Subprocessors - Casa Conect Docs

Casa Conect uses the services below to deliver the product. We list each with its purpose and the kind of data it handles, so that you can assess them against your own obligations.

This page describes how the product is built. The contractually binding list of subprocessors, with their locations and transfer mechanisms, is part of your data processing agreement. To request one, write to support@casaconect.ai.

Infrastructure

Service	Purpose	Data handled
Amazon Web Services	All hosting: application, database, file storage, email, malware scanning, key management, and AI inference for Claude models through Amazon Bedrock	All customer data, in the EU. Bedrock inference uses EU regions.
Trigger.dev	Runs background jobs: agent sessions, document indexing, folder sync, workflows	Processes content in memory while a job runs. Connects privately to our database. Not a system of record.

Identity and billing

Service	Purpose	Data handled
WorkOS	Sign-in, multi-factor authentication, sessions, organizations, roles and invitations. Also hosts the OAuth connection to your Google or Microsoft account and holds those tokens.	Names, email addresses, organization memberships, authentication events, connected-account tokens
Stripe	Subscriptions, credit purchases, invoices, tax, payment methods	Billing contact details and payment information. Card numbers never reach Casa Conect.

AI services

Service	Purpose	Data handled
Anthropic, through Amazon Bedrock	Claude conversation models	Conversation content and retrieved passages. Processed within AWS, in EU regions.
OpenAI	ChatGPT conversation models, conversation-memory embeddings, voice dictation	Conversation content and retrieved passages, short conversation passages, dictated audio. Requests are sent with storage off.
Microsoft Azure OpenAI	Search embeddings and search-query understanding	Text passages from documents, and search queries
Cohere	Reranking of search results	Search queries and candidate passages
LlamaIndex (LlamaParse)	Parsing uploaded documents into text, tables and layout	Uploaded files. The EU endpoint is used.
DeepL	Automatic translation between English and Spanish of names and descriptions inside Shared Spaces	The short texts people enter in a Shared Space: names of teams, document types, categories and appointments, descriptions, and review comments. Not documents.
Tavily	Web search for the agent	Search queries written by the agent
Browserbase	Cloud browser sessions, live view and session recordings	The pages the agent visits, and recordings of the session
Braintrust	Authoring and versioning of the agent’s system instructions	Casa Conect’s own prompts. Not customer content.

See AI data handling for what each AI service receives and the controls available to you.

Monitoring and analytics

Service	Purpose	Data handled
Sentry	Error monitoring	Server error reports. Request inputs are reduced to their structure. Values are never sent.
PostHog, EU cloud	Product analytics and session replay	Usage events with content fields removed. Replays with all text masked and content areas blocked entirely. See Privacy.

Only when you connect them

Service	Purpose	Data handled
Google (Drive)	Folder sync, when a member connects their account	The files in the folders that member links
Microsoft (OneDrive, SharePoint)	Folder sync, when a member connects their account	The files in the folders that member links

Website

The marketing site at casaconect.ai is hosted on Vercel. It processes no customer workspace data.

Changes

We update this page when a service is added or removed, and record the change in the changelog.