Etropo
Etropo is marketing budget software. Customers trust it with budget plans, spend actuals and the account data of the people who manage them.
Security, reliability, privacy and compliance are part of how we build and run Etropo, from the first design to daily operations.
This page shows how we protect customer data, in terms you can check. It lists every control with its status, the vendors that process customer data and the policies we follow.
Vercel • Application hosting
Germany (Frankfurt, functions), USA (control plane), global edge network
Runs the web application and API, builds and deploys every release, serves static assets from its edge network, and provides the AI Gateway through which model requests are routed.
Supabase • Database, authentication, storage
Germany (AWS eu-central-1, Frankfurt)
Hosts the PostgreSQL database, authentication (passwords, sessions, two-factor), file storage and daily backups.
Amazon Web Services • Infrastructure (via Supabase)
Germany (AWS eu-central-1, Frankfurt)
Underlying cloud for the Supabase database and storage.
Stripe • Payments
USA
Subscription billing, card processing and the customer billing portal.
Anthropic (via Vercel AI Gateway) • AI model provider
USA
Powers AI Budget Buddy, dashboard building, Marketing Brain and the Slack and Teams assistants (Claude Opus 5.5 and Claude Haiku 5.5).
16 subprocessors and 9 customer-connected integrations. See the full list with the data each receives.
Published 22 October 2026
The three application log tables are now pruned automatically. Integration token audit logs (who connected or disconnected an integration, and token events) are kept for 1 year; integration sync logs and inbound webhook events for 90 days. A scheduled job runs once a day and deletes every row older than its period.
Published 21 October 2026
The full list of vendors that process customer data is now public, including the AI model providers (Anthropic, OpenAI, Mistral AI), monitoring and analytics tools (Sentry, Mixpanel, Segment, Braintrust) and support tooling (Intercom, Linear). Customer-connected integrations are listed separately.
Published 15 June 2026
This site expands on the security page on www.etropo.com. It lists the controls we run with their status, the vendors that process customer data, the policies we follow, and answers to the questions security reviewers ask most.
