Who else sees your data.

Version 5, last changed 2026-08-23. If a company is not on this page, Concord does not send it your data. If a company is on this page, the row says when it sees anything at all.

Two groups. The first is Concord’s own stack: hosting, subscription billing, models, optional voice, mail, and sign-in. A voice processor sees nothing until an operator opens the company line. The second group runs only after somebody connects that system. Connecting Stripe does not give HubSpot your invoices.

These companies see data because Concord is the product, not because you connected a tool.

Cloudflare

Runs Concord, holds its database, and terminates TLS. Always. Everything described on this site lives there.

Stripe

Processes Concord subscription checkout and keeps the related billing record. When a customer starts or manages a paid Concord subscription. Stripe receives the billing details entered at checkout. Concord receives identifiers and status, not a card number.

Anthropic

Drafts scheduled proposals, answers an operator's questions during setup, and is the configured fallback for typed company correspondence. Only when a company has the model switched on. It receives bounded company facts or a limited summary of the current setup record, never saved sign-ins. Voice turns do not silently fall back to Anthropic. A company without a key sends nothing — the departments run on rules, and setup keeps its written guide.

Google Gemini

Reasons over a final typed or spoken company turn and its bounded company context. When company correspondence is configured. The final words and bounded records needed to answer are sent to Gemini 3.7 Flash. Raw audio and partial transcripts are not sent to Gemini. If it is unavailable, voice uses Concord's deterministic record floor rather than another model.

LiveKit

Carries the private realtime audio room and dispatches Concord's isolated media worker. Only while an operator deliberately opens the voice line. It receives opaque room/session identifiers and realtime audio, not a tenant id, actor email, business credential, or signing authority.

Deepgram

Turns cleaned incoming speech into final and partial text with Flux. Only during an open voice line. Concord stores final turns; it does not store partial transcripts.

Cartesia

Turns Concord's final reply text into spoken audio with Sonic. Only during an open voice line. It receives reply text, not company credentials or authority.

Krisp

Removes background noise from incoming voice audio in the isolated media worker. Only during an open voice line. Server-side isolation is applied once; the browser does not apply a second Krisp pass.

Resend

Sends mail Concord itself sends. When Concord writes a letter — a chase, a notice, or an operations alert. Nothing is written to a customer until that kind of action has been switched on, and a redirect can still send every letter to one address instead.

Google

Operator sign-in. When a person on the company's list signs in with a Google account. Concord never sees their password.

Microsoft

Operator sign-in. When a person on the company's list signs in with a Microsoft account. Concord never sees their password.

Stripe appears again below when a company connects its own Stripe account. Concord’s Stripe processes the Concord subscription. A connected Stripe account supplies that company’s operational records.

Google and Microsoft also appear again for connected mail and calendars. Sign-in gets a person into Concord. A connected account supplies company records.

Nothing here is on until somebody at your company switches it on. Each connection lists what it reads before it is switched on, and the console shows it afterwards.

Stripe

Charges, open invoices, and subscription changes the company connected. Only if that company connected this system. Connecting it is their decision, and they can disconnect it.

HubSpot

Deals and contacts the company connected. Only if that company connected this system. Connecting it is their decision, and they can disconnect it.

Slack

Mentions and the escalation channel the company connected. Only if that company connected this system. Connecting it is their decision, and they can disconnect it.

QuickBooks

Profit-and-loss and payables the company connected. Intuit is the vendor. Only if that company connected this system. Connecting it is their decision, and they can disconnect it.

Zendesk

Tickets and satisfaction scores the company connected. Only if that company connected this system. Connecting it is their decision, and they can disconnect it.

Your database

Product metrics and account usage from the company's own database, reached through Cloudflare Hyperdrive. Only if that company connected this system. Connecting it is their decision, and they can disconnect it.

Google Calendar

Committed hours on the calendar the company connected. Only if that company connected this system. Connecting it is their decision, and they can disconnect it.

Linear

Cycle progress and incidents the company connected. Only if that company connected this system. Connecting it is their decision, and they can disconnect it.

Gmail

Two kinds of message in the mailbox the company connected — a claimed change of payment details, and a message that needs a person. Only if that company connected this system. Connecting it is their decision, and they can disconnect it.

Microsoft 365 mail

The same two kinds of message, in the Microsoft 365 mailbox the company connected. Only if that company connected this system. Connecting it is their decision, and they can disconnect it.

QuickBooks is Intuit’s product. Intuit sees what that connection reads, and only then. A company that never connects QuickBooks sends Intuit nothing.

This is a list of who can see data, kept current against the software. It is not a data processing agreement. There is an unsigned draft at /legal/dpa, not reviewed by counsel and not executed. Do not treat this page or that draft as signed.

Quebec’s Law 25, liability for an action the departments carry out, and the terms a lawyer should write are not answered here. Those are lawyer work. Write to charles@predictive.company.

The version at the top moves when a row is added, removed, or its job changes. A connection added to Concord that does not appear here is a defect. The date is when this text last changed, not when the site last shipped.