Beta Cut Above CMS is in beta with its first customers. It works, it changes weekly, and when something breaks you talk to the person who built it. Tell us what you need. In beta with our first customers. Tell us what you need.
Trust

What Falcon does with your data

How the assistant works, what it can and cannot see, where inference runs, and what is never done with your data.

How it works

  • Falcon answers using the same database access as the person asking. Row-level security is enforced by the database; the assistant cannot read a record its user cannot.
  • When a question needs data, the relevant records are sent to the model provider (Anthropic) as part of the request, and only for that request.
  • Actions such as logging time, filing an email or moving a deal are drafted by Falcon and executed only when the person confirms. They are recorded in the audit log as that person's action.
  • Each workspace has monthly AI credits. With a fifth left Falcon uses an economy model; at zero it says so and pauses until the 1st or a top-up.
  • Email that Falcon sends goes from the person's own connected mailbox, only to a contact on the record, a colleague, or an address the person typed, never to an address taken from a document or a message. The person sees and can edit the whole message before it goes.

The meeting notetaker

  • Off until a firm administrator turns it on and accepts the recording policy; each person chooses whether it may join their meetings without being asked.
  • It joins only the calls it is sent to, from the person's own calendar or a link they paste, under the firm's name, and posts a notice in the meeting chat as it joins. Anyone in the call can remove it.
  • Audio and video are never kept by us, and the recording provider's copy is deleted once the transcript is taken. Transcripts are deleted on the firm's schedule: after up to 90 days, or as soon as the notes are reviewed if the firm chooses that. The notes a person files stay on the record.
  • A transcript can be deleted at any time, for example when someone in the call asks. The person who sent the notetaker, or a senior colleague, deletes it from the meeting's page, and any notes not yet filed go with it.
  • The audit trail records who changed a meeting's notes and when, but not what the notes said.
  • What was said is treated like any outside text: instructions spoken in a call are never followed, and every note, task or change it leads to waits for a person to confirm it.

What is never done

  • Your data is not used to train any model. Requests are inference only.
  • Falcon does not act on its own initiative or on a schedule; every write is a confirmed request.
  • Nothing is shared between workspaces. Falcon reads through the same database policies as the person asking, so it knows only their workspace.

Where inference runs

On Anthropic's infrastructure in the United States by default, under Anthropic's commercial terms (no training on customer data). Routing inference through an EU endpoint is a configuration setting for each deployment; ask if your policy requires it.