Last reviewed: October 2026
We are a young product, so this page claims less than most security pages, but everything on it is exact. No badge wall, no borrowed certificates.
Where the data lives
Your data is stored in the European Union. The database runs on Supabase (managed PostgreSQL, Frankfurt) and the application is served by Vercel. Encryption in transit (TLS) and at rest is the standard of those platforms; we state it as their work, not as our own audit.
Who can see what
Every company's data is separated at the database row level: your orders, messages, documents and drafts are readable only by your company and, for an order or a conversation, by the other company in it. What is public is what you choose to show: your company page and the lots on it.
What the AI reads, and where it goes
Label and document reading and the assistant are powered by Anthropic. When you scan a label, upload a price list or ask a question, that content is sent to Anthropic's API to produce the answer. Under Anthropic's commercial terms, API data is not used to train their models. AI features are optional: a lot can always be created by hand.
How payments work
We never hold the money in an order. The buyer pays the seller directly, against the seller's invoice and on the terms the two companies agree; the goods and the funds do not pass through WineGate.
The seller pays WineGate 1 % of each paid order, on one invoice a month sent through Stripe. Card details for those invoices are entered on Stripe's pages and never touch our servers.
Honestly: what we hold, and what we don't
WineGate does not yet hold its own SOC 2 or ISO 27001 certification; an audit of our own is planned as the company grows. The infrastructure we build on (Supabase, Vercel, Stripe) holds those certifications for their platforms. We would rather tell you this plainly than decorate the page with other people's badges.
GDPR and your rights
WineGate is operated by PorteVin OÜ, an Estonian company: EU jurisdiction, GDPR applies in full. You can delete your account and its data yourself, and a data processing agreement is available on request.
- Operator: PorteVin OÜ · reg. no. 17473145 · Tallinn
- Privacy: Privacy Policy
- Deletion: Delete your account
Where the numbers come from
Every excise and VAT value carries its source and effective date: the European Commission's Taxes in Europe Database (DG TAXUD) and national tax authorities. Rates are checked on each official publication, twice a year, in January and July. The same table prices every lot and powers the free calculator.
A question this page doesn't answer?
Write to us; a person reads it. hello@winegate.app