Security
Your pipeline, on your side of the Atlantic.
Blake is an EU-hosted, tenant-isolated sales CRM. Workspace separation is enforced by Postgres row-level security, not by convention. The specifics, because we think you deserve them in plain language.
EU data residency
Postgres runs on Supabase in Frankfurt (eu-central-1). Your pipeline data does not leave the EU at rest. Claude calls run against Anthropic's EU endpoints where available.
Row-level security
Every table has a workspace_id and a row-level-security policy enforced at the database layer. A query from workspace A cannot return a row from workspace B. Not by convention; by Postgres policy.
Tested, not assumed
Our integration suite seeds two workspaces and asserts zero cross-tenant leakage on every endpoint before merge. If a regression slips through, CI fails before prod sees it.
Encryption in transit and at rest
TLS everywhere. Encryption at rest via Supabase's managed Postgres. API tokens and service-role keys are kept in Vercel's encrypted secret store, not in the repo.
Backups
Supabase Pro daily physical snapshots with seven-day retention. Restorable from the dashboard. Point-in-time recovery added when paid-customer load justifies the additional spend.
What Claude sees
The contents of emails you forward, and the public web when researching a company. Claude sees one thread at a time. We do not train on your data. We do not share it with third parties.
GDPR
Built by a European team, for European customers.
blakecloses acts as data processor for your workspace data under a standard data processing agreement. Subjects can request export or deletion through your workspace admin, and we respond within the legally required window.
blakecloses is operated by Deuces Media BV, Netherlands.
Questions we get
- Can you pull a copy of our workspace data?
- Yes. Admins can export every record in the workspace from Settings. If you prefer a raw SQL dump, email us and we'll put one in an encrypted bucket for you.
- What happens if we leave?
- You keep the export. We delete the workspace and its related rows on request. Backups roll off on the standard seven-day retention.
- Do you have SOC 2 / ISO 27001?
- Not yet. We're a small team and compliance audits happen when a paying customer needs them on paper. If you need a questionnaire filled in, send it over and we'll answer every line.
Ready when you are.
Request a workspace. We'll walk your security team through the specifics once yours is provisioned.
Request access