This instance hasn’t set its operator’s details (the LEGAL_* environment variables), so the bracketed placeholders below are not filled in.

Legal

Subprocessors

Companies that process personal data so Asincly can run, and what each one gets.

The database and recordings are hosted in [hosting region — set LEGAL_DATA_REGION]. Transfers outside the EU/EEA rely on the EU–US Data Privacy Framework for certified recipients or on the Standard Contractual Clauses.

CompanyWhat forDataCountry
Vercel Inc.Application hosting, request logsAll application data in transit; request metadata (IP address, user agent)United States
Neon Inc.DatabaseAccounts, teams, check-ins, comments; transcripts and summaries encryptedUnited States
Cloudflare, Inc. (R2)Storage of video and audio recordingsRecordingsUnited States
Groq, Inc.Speech-to-text and drafting check-ins from recordingsOnly for teams with AI drafting on, and members who haven't opted outA recording's audio track, the author's notes and previous plan, team member namesUnited States
Resend, Inc.Email (sign-in links, reminders, notifications)Email address, email contentUnited States
Stripe Payments Europe, Ltd.Payments, invoicing, taxOnly for paying organizationsBilling contact, company details, VAT ID; card details are held by StripeIreland
Google LLCSign in with GoogleOnly if you sign in with GoogleEmail address, name, profile picture URLUnited States
Slack Technologies, LLCPosting digests and reminders to a team's SlackOnly for teams that connect SlackNames, today's plans and blockers in digests; reminder messagesUnited States

Changes

We email organization owners at least 30 days before adding or replacing a subprocessor and update this page. To object, write to [contact email — set LEGAL_EMAIL] within that time; see section 4 of the DPA.

Self-hosted instances use whichever providers their operator configures; their operator is responsible for this list.