Last updated 14 September 2026
Sub-processors
These are the third parties that may process customer data on Casily's behalf, and we will give notice before adding a new one.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Application database, authentication and file storage | All application data | AWS eu-west-1, Ireland |
| Anthropic | Drafting case studies, testimonials, proposals and Ask AI answers | Transcript passages and proof content | United States |
| Google (via Lovable AI Gateway) | Tagging, triage, passage extraction and matching | Transcript passages and proof content | United States |
| OpenAI (via Lovable AI Gateway) | Fallback for the above | Transcript passages and proof content | United States |
| Lovable | AI gateway, hosting and front-end error reporting | Content passed to the models above | EU / United States |
| Resend | Outbound email and inbound transcript forwarding | Recipient details and email content, including forwarded transcripts | United States |
| Fathom | Transcript capture from your recorded customer calls | Transcripts and participant email addresses | United States |
| Recall.ai | Calendar-based meeting capture, optional | Calendar events, transcripts and participant email addresses | EU, eu-central-1 |
| Fireflies | Transcript import, only if you connect it | Transcripts | United States |
| Attention | Transcript import, only if you connect it | Transcripts | United States |
| Microsoft | Sign in with Microsoft, and Outlook calendar meeting capture, only if you use them | Your name and email address, and calendar event details where you connect Outlook | European Union / United States |
| ScrapingBee | Fetching public review pages you ask Casily to import | Public review page content, including reviewer names | France, with proxy egress worldwide |
| Cloudflare | DNS resolution used by our public website audit tool | Only the public URL submitted | Global |
| Google (YouTube) | Playing video proof embedded from YouTube | Visitor IP address, device and player request data | Global / United States |
| Vimeo | Playing video proof embedded from Vimeo | Visitor IP address, device and player request data | United States |
| Atlassian (Loom) | Playing video proof embedded from Loom | Visitor IP address, device and player request data | United States by default; Germany where data residency is provisioned |
| Wistia | Playing video proof embedded from Wistia | Visitor IP address, device and player request data | United States |
YouTube, Vimeo, Loom and Wistia receive nothing when a visitor opens a proof page. Video poster images are served from Casily's own domain, and a provider's player is loaded only after the visitor presses play.
Transfers outside the EEA rely on Standard Contractual Clauses under each provider's terms. None of the AI providers above train their models on data submitted through their commercial APIs.