SUBPROCESSORS

Subprocessors

EFFECTIVE: SEPTEMBER 28, 2026

These are the vendors Casewave uses to provide the service ("subprocessors"), what each one does, and what data it handles. For agents: we keep this page current, and material changes are announced here and by email.

VendorPurposeData categoriesLocation
CloudflareApplication hosting, networking, queuing, and transactional email deliveryApplication data in transit; email content and addressesUS
VercelWeb application hosting (the agent app and client portal front end)Request data in transit and in memory while serving pages; no service data at restUS
NeonDatabase hosting (Postgres)Service data at rest (with the protections described in the Privacy Policy §8)US
ClerkSign-in and authenticationAccount identifiers, email, phone, authentication eventsUS
StripeSubscription billing (agents)Billing contact and payment status; card details are collected by Stripe directly and never touch CasewaveUS
BoldSignE-signature; system of record for executed documents and for the sensitive fields a signer enters at signing (Privacy Policy §2)Signer identity, document contents including containment-tier fields (SSN, driver's licence, health) typed directly into BoldSign. Casewave stores only document ids and status; the signed document and its certificate of completion are emailed by BoldSign straight to the agent and never transit CasewaveUS
Amazon Web Services (KMS)Encryption key operations onlyNo personal data transits AWS — key material operations onlyUS
AnthropicAI model provider for CaseyConversation content processed to generate responsesUS

Changes. When we add or replace a subprocessor that will process client data, we will update this page and notify agents by email.

Questions: privacy@casewave.life.