Legal
Sub-processors
Last updated: May 23, 2026
Hey Cass AI (operated by ThinkBOLD Solutions, LLC) uses a small set of third-party service providers — “sub-processors” — to deliver the Service. Each one processes some data on our behalf under their own contractual and privacy commitments. This page lists every named sub-processor currently in use.
We update this list before adding any new sub-processor that materially changes how we process customer data. Customers under a Data Processing Agreement (DPA) receive notice of changes in advance.
Current sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Site hosting, DNS, CDN, edge security, email routing (inbound). | United States |
| Resend (Resend, Inc.) | Outbound transactional and waitlist email delivery from cass@heycass.ai. | United States |
| Anthropic, PBC | AI model inference powering the Cass chatbot (when active). | United States |
| Google LLC (Google Fonts) | Self-hosted web font delivery (Inter). Served via our hosting provider; no direct visitor-to-Google connection at runtime. | United States |
Notes
- Hey Cass AI is operated directly by ThinkBOLD Solutions, LLC. Customer relationship management, conversation storage, and marketing automation run on our own infrastructure and are not listed as external sub-processors.
- We do not transfer customer data to any external sub-processor outside this list without first updating this page.
- All sub-processors are bound by written terms requiring them to protect customer data and limit its use to the purposes above.
- When the Cass chatbot is active, conversation inputs are transmitted to our AI model provider listed above for inference. We do not allow customer inputs to be used to train the underlying models.
Questions or DPA requests
For a Data Processing Agreement, GDPR Article 28 documentation, or questions about a specific sub-processor: cass@heycass.ai
Questions? cass@heycass.ai