Security & compliance
Last updated October 26, 2026
Subprocessors
The providers that may process customer data on MeetSwift's behalf, what each one does, the categories of data it receives and where it operates.
- Optional integrations apply only when a workspace enables them.
- Identity providers can also apply when a person chooses that provider to sign in.
- Zoom applies only when a customer selects a Zoom meeting for capture.
Core service
| Provider | Purpose | Data categories | Location |
|---|---|---|---|
| Replit | Purpose: app/API hosting, PostgreSQL service, App Storage, connectors, runtime/build logs, development and platform analytics | Data: Application/database content and audio, secrets authority, requests, logs, source and developer prompts; critical platform | Location: to be confirmed |
| OpenAI via Replit AI Integrations | Purpose: AI transcription, transcript analysis, summaries, meeting questions and briefs via Replit's AI intermediary. | Data: Audio transcription, transcript analysis, summaries, evidence for meeting questions/briefs; proxy/intermediary included | Location: to be confirmed |
| Recall.ai via Replit connector | Purpose: Meeting capture through visible bots and the Replit connector. | Data: Visible bots, platform links, participant information, call audio/transcript and provider copies | Location: to be confirmed |
| Clerk | Purpose: Authentication, account and session management, multi-factor authentication and recovery. | Data: User identities, emails, session/account metadata, factors and recovery; no intentional transcript storage | Location: to be confirmed |
| Stripe | Purpose: Payments, subscriptions, checkout and billing management; exclude meeting content and PHI. | Data: Billing customer/contact data, checkout/subscription and entitlement/payment references; hosted payment pages | Location: to be confirmed |
| Resend | Purpose: transactional and action email, invitations, privacy notices and security alerts | Data: Recipient email, onboarding link, task reminders/digests and notice/delivery metadata; templates may disclose content | Location: to be confirmed |
| Google Fonts | Purpose: public site and portal styles | Data: Browser network/request metadata to fonts.googleapis.com/fonts.gstatic.com; not intended meeting-content processor | Location: to be confirmed |
Optional integrations
Apply only when a workspace enables them, or when a person chooses that provider to sign in.
| Provider | Purpose | Data categories | Location |
|---|---|---|---|
| Microsoft | Purpose: identity/calendar, Graph/To Do and optional Teams channel posting | Data: Account identity, calendar titles/attendees/meeting links, OAuth grants, synchronized tasks and authorized channel outputs | Location: to be confirmed |
| Purpose: identity, calendar OAuth/managed connector | Data: Identity, calendars, titles, attendees, meeting links, OAuth grants | Location: to be confirmed | |
| Slack | Purpose: optional private-channel meeting posts | Data: Destination/channel membership and authorized meeting summary/action content; OAuth tokens | Location: to be confirmed |
| Zoom | Purpose: customer meeting platform joined by Recall | Data: Customer call content, participants and call retention when Zoom is selected | Location: to be confirmed |
Notes
- This inventory describes service providers, integrations and external dependencies; it is not a vendor assurance or residency guarantee.
- Optional calendar, channel and meeting-platform integrations apply only when enabled for the workspace. Microsoft and Google may also process identity data when selected for sign-in through Clerk.
- Zoom is customer-selected: it is the customer's meeting platform joined by Recall when that capture is requested. Its contractual role depends on the selected service and arrangement.
- Processing locations are to be confirmed; no specific residency or international-transfer guarantee is made.
- Source hosting/CI and internal email, password-vault and evidence-repository providers remain to be confirmed in the internal register; they are not represented as confirmed providers here.