Data & security
Where your data lives and how we handle GDPR
EU/UK hosted, row-level security per agency, full export, deletion on request.
All proposal data, client records and Terms of Business templates are stored in EU/UK regions on Supabase, which runs on AWS infrastructure. Nothing customer-facing is hosted outside the EU/UK.
Tenant isolation
Every customer table uses Postgres row-level security tied to your agency ID. Other agencies on the platform cannot read your data even if they try to — the database enforces it, not just the application code.
GDPR
We're a data processor under GDPR — you're the controller of your data. We have a Data Processing Agreement in place with Supabase. You can request a copy of your data, export everything to CSV from the dashboard, or request full deletion of your account.
Who runs RateCalc.io
The platform is operated by MCR Labs Ltd (company number 17228923), registered in Middlewich, UK.
Related articles
Last updated: 2026-06-29. Did this not answer your question? Click the chat bubble bottom-right or email hello@ratecalc.io.