Specific, true, and written down.
A vague answer to “where does my data go?” is worse than none. This is the short version of the standard we issue with every proposal. Every statement in it is checkable — and if one stops being true of your engagement, we have broken it.
The client wall
Your documents, parameters, observations, reads and receipts live in your workspace. The only thing that ever crosses into Cherrystone’s own library is a sanitised pattern report — no names, no figures, no documents — and we tell you in writing when we file one.
Receipts for every upload
Every workbook and document gets a numbered receipt: what was received (with its fingerprint), what was extracted and at which grade, what left your workspace — normally nothing — and what was discarded, and why.
Derived, never stored
We store parameters and decisions. No derived figure is stored anywhere: every number you see is computed from your parameters in your browser, when you look. There is no cached total that could disagree with your evidence.
No AI at runtime
Your package does its own arithmetic — a hundred users cost nothing and send nothing anywhere. Where we use AI at build time to read documents in a Sprint, it runs under Anthropic’s commercial terms, which do not allow training on customer content; identifiers are stripped where the analysis does not need them, and the extraction — not the raw document — is what persists.
It runs offline
Your licensed package is a single file that opens anywhere without a connection and proves its own arithmetic on the Method page every time it opens. No vendor sits inside it.
POPIA by design
Hosted in the EU (Frankfurt) under data-processing agreements, with South-African-resident hosting on request. One strictly necessary cookie. Marketing only with an unticked opt-in. Information Officer: Zander Kirstein.
The package checks itself, in your browser.
Every time a package opens, its Method page runs a self-check: every view rendered from your parameters, every balance line reconciling to within a thousandth, no currency anywhere in a view, a live lever on every view, zero stored figures. You do not have to take our word for the arithmetic.
| What | Where | Why |
|---|---|---|
| The application | Vercel, Frankfurt region (fra1) | Serves the site, your workspace and your hosted package |
| Database and file vault | Supabase, Frankfurt (eu-central-1) | Parameters, observations, reads, receipts and your uploaded files, encrypted at rest |
| Resend | Sign-in links, invitations and service notices only | |
| Card payments | Paystack (South Africa) | Monthly plans by card; we never store card details |
| South-African residency | AWS Cape Town or Azure Johannesburg, on request | For clients whose policy requires data to stay in the Republic |
Your rights under POPIA — access, correction, deletion and objection — are set out in the privacy notice. Write to kirsteinzander@gmail.com.