Subprocessors and data processing
Last updated: November 2026
1. Subprocessors
These companies process personal or customer data on our behalf to run the Service. Each is bound by data protection terms no less protective than our data processing agreement. We give customers with a signed DPA 30 days' notice before adding one.
Cloudflare
- Service
- Hosting and network: the web and API Workers, file storage, request analytics, Workers AI, and AI Gateway (the proxy every Agent and Ask model call goes through)
- Data
- Everything in transit; uploads; request analytics (90 days). AI Gateway is told per request to keep metadata only (model, token counts, cost, status): never the prompt or the answer, and never a cached copy
- Location
- Global edge network
PlanetScale
- Service
- The database
- Data
- All application data: accounts, organizations, events, subscriptions, the activity log, Agent conversations
- Location
- AWS us-east-1 (United States)
Resend
- Service
- Transactional email: invitations, sign-in, notifications
- Data
- Recipient email address and message content
- Location
- United States
Stripe
- Service
- Billing
- Data
- The organization's billing contact, payment method (held by Stripe, never by CastHQ) and subscription
- Location
- United States and EU
Anthropic
- Service
- The language model behind Agent, Ask, classification and the Steward (Claude, through Cloudflare AI Gateway)
- Data
- What you ask Agent or Ask, the workspace data a request reads to answer it, and public event text and source pages. Anthropic does not train on it, and deletes it within 30 days (content flagged for a usage policy breach is kept up to 2 years)
- Location
- United States
Apple (APNs), browser push services
- Service
- Push notification delivery
- Data
- A device token or push endpoint and the notification text
- Location
- United States and global
2. AI features: Agent and Ask
- Model calls go to Anthropic through Cloudflare AI Gateway. Under Anthropic's commercial terms your content is not used to train models.
- Every call tells AI Gateway to log metadata only (model, token counts, cost, status) and to skip its cache, so neither the prompt nor the answer is stored at Cloudflare.
- Anthropic deletes API inputs and outputs within 30 days, except content flagged for a usage policy breach, which it may keep up to 2 years.
- Agent conversations are kept in our database for 90 days after their last message, then deleted. A record of each change Agent made for you is kept with the activity log, for 365 days.
3. Data processing agreement
Organizations on the Team plan and above can sign our data processing agreement; it is included with Enterprise. It covers processing on your instructions, security measures, breach notice within 48 hours, these subprocessors, and return and deletion of your data. Ask for it at support@casthq.co. See also our Privacy Policy.