Trust
Subprocessors
Third parties that process data on behalf of a Cut Above deployment. Several are optional and only engaged if a person connects them.
| Provider | Purpose | What it sees | When |
|---|---|---|---|
| Supabase | Database, authentication, file storage | All application data, in the deployment's chosen region | Always |
| Vercel | Application hosting, edge network, aggregate performance metrics | Requests, and aggregate data on page performance | Always |
| Anthropic | Falcon, the assistant in the app and the MCP server | Only what a question requires: the records the asking user can already see | Always |
| Resend | Transactional email such as invitations and notifications | Recipient address and message content | Always |
| Recall.ai | Falcon's meeting notetaker, which joins a call and transcribes it (EU region) | The audio, video, chat and participant names of calls it is sent to; its copy is deleted as soon as the transcript is taken | Only if a firm turns the notetaker on and sends it to a call |
| Stripe | Card payments for Falcon AI credit top-ups | The buyer's email and the payment; card details go to Stripe only, never to us | Only when a firm buys a top-up |
| Sentry | Error reporting | Stack traces and request metadata; no personal data by default | Always |
| Microsoft | Signing in; a person's mail, calendar, contacts and documents | What that person authorises, under their own permissions | Only if connected |
| Signing in; a person's Gmail, Calendar and Contacts | What that person authorises, under their own permissions | Only if connected | |
| The person's own mail host | IMAP / SMTP / CalDAV / CardDAV | Credentials the person supplies, stored encrypted per workspace | Only if connected |
Regions: the database and storage live in the region chosen for the deployment (the reference instance: Frankfurt, eu-central-1). Falcon's inference runs on Anthropic's US infrastructure; an EU routing option is a configuration flip. The meeting notetaker runs in Recall.ai's EU region for the reference instance. This list is updated when it changes; the date of the last change is in the page source.