Security
Security and data protection
Contracts are sensitive documents. Indexerly is built accordingly — EU storage, encryption, and deletion that actually deletes.
Traceable audit
Every amount has receipts
This is the audit trail behind every finding: contract text, official index values, and the math that turns it into money.
We show the exact contract wording, not a guessed summary.
Base period and comparison period are tied to the correct official index.
The formula is shown step by step so the amount can be checked.
Data stored within the EU
All customer data — documents, extracted fields, and calculations — is stored with Supabase in an EU region. No data leaves the EU for storage.
Encryption
TLS in transit, encryption at rest. Documents live in private storage buckets with signed, time-limited access links.
Access model
Row-level security in the database technically isolates each organization's data. Your contracts can only be accessed by users you have invited.
AI processing
Contract text is sent to our AI provider (Anthropic) solely for analysis, under settings that mean your content is not used for model training and is not retained.
Retention and deletion
You decide. Delete a contract or your entire organization in settings — documents, extracted data, and calculations are permanently removed, including stored files.
Sub-processors
Vercel (hosting), Supabase (database and storage, EU), Anthropic (AI analysis), Resend (email), Plausible (cookie-free analytics, EU).
Data Processing Agreement
We sign DPAs with all customers. Email kontakt@indexerly.com and we'll send our standard agreement.