RegentDesk← Compliance overview

Work in progress

This page is a work in progress and subject to changes and rewrites. Content here reflects RegentDesk's current intent — language, commitments, and structure may all change before launch.

Subprocessors

Every third-party vendor that processes advisor or client data on RegentDesk's behalf is listed here. RegentDesk commits to giving advisors at least 30 days' notice before adding any new subprocessor that processes client data.

Last updated: July 11, 2026

Active subprocessors

Subprocessor
Purpose
Data categories processed
Location
Supabase
Database, file storage, and auth storage
All client data, drafts, voice samples, life events, interaction history, advisor profile
United States
Clerk
User authentication and session management
Advisor email address, identity tokens, session metadata, MFA state
United States
Anthropic
AI draft generation and context extraction
Email content and client context submitted during generation. Retained only briefly (up to 7 days) for safety monitoring, then deleted. Not used to train models.
Global inference; brief US retention
OpenAI
Writing-style matching for voice-personalized drafts (Enhanced voice mode)
The advisor’s own past sent-email text, converted into numeric embeddings used to match how that advisor writes when generating a draft. Not retained to train OpenAI’s models. Never used for any calculation about investments.
Global
Vercel
Application hosting and serverless function execution
All data flowing through the application in transit. Logs retained per Vercel's standard policy.
United States
Inngest
Background job queue for batch email generation
Job metadata and payload (batch job IDs, client IDs, status). Does not store email content.
United States
Resend
Transactional email notifications to advisors
Notification content and the advisor's own email address. No client data.
United States
Google Cloud Pub/Sub
Gmail & Google Calendar sync
Gmail message IDs and change notification metadata. No email body content.
United States
Microsoft Graph
Outlook & Microsoft 365 sync
Outlook message IDs and change notification metadata. No email body content.
United States

Planned subprocessors

These vendors are listed in advance of integration. They are not active today. Advisors will be notified at least 30 days before activation.

Subprocessor
Purpose
Data categories
Location
Stripe
Payment processing and subscription management (billing only — no client data)
Billing data only: payment method metadata, subscription state, invoice history. No client data.
United States
OpenAI (Whisper)
Voice transcription for voice memo → structured notes
Advisor-recorded voice memo audio. Separate from the active embeddings use above.
United States
Postmark
Inbound email parsing for the BCC / forwarding fallback path
Forwarded email content for advisors on the BCC fallback.
United States
Sentry
Error monitoring and alerting
Application error metadata. Minimized to exclude client content.
United States

A note on Anthropic

Per Anthropic's API terms, inputs are not used to train Anthropic's models and are retained only briefly (up to 7 days) for safety monitoring, then deleted. Anthropic processes requests in real time on its own infrastructure.

A note on OpenAI

To draft in each advisor's own voice, RegentDesk uses OpenAI to match writing style in Enhanced voice mode. It converts the advisor's own past emails into a numeric representation the system compares against when drafting, so a new draft reflects how that advisor actually writes. Under OpenAI's commercial API terms, this data is not used to train their models. Like the drafting model, it only shapes the draft — it never sends anything and performs no calculation about investments.

How we notify you of changes

Before adding any new subprocessor that processes client data, RegentDesk will email all active advisors at least 30 days in advance. The notification will include the subprocessor name, purpose, data categories, and geographic location. Advisors may object to the addition; the process for objection and the available remedies will be provided with that notice. This page will be updated to reflect all changes.