# Harvey AI

Harvey AI (harvey.ai): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/harvey-ai
- Documents last verified: 2026-09-30
- Transparency rating: 95/100 (how much it publishes, not how secure it is)
- Cite as: Harvey AI, Third Party Index, https://thirdpartyindex.com/vendors/harvey-ai (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.harvey.ai/ | 2026-09-30 | 2026-09-30 |
| Subprocessor list | https://www.harvey.ai/legal/subprocessors | 2026-09-30 | 2026-09-30 |
| Data processing addendum | https://www.harvey.ai/legal/data-processing-addendum | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://www.harvey.ai/legal/privacy-policy | 2026-09-30 | 2026-09-30 |
| Terms | https://www.harvey.ai/legal/evaluation-terms-of-service | 2026-09-30 | 2026-09-30 |
| Security page | https://www.harvey.ai/security | 2026-09-30 | 2026-09-30 |
| security.txt | https://www.harvey.ai/.well-known/security.txt | 2026-09-30 | 2026-09-30 |
| Status page | https://status.harvey.ai/ | 2026-09-30 | 2026-09-30 |

## Subprocessors (13)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | AI provider and cloud services provider | US, EU, Switzerland, Australia | 2026-09-30 |
| [Anthropic, PBC](https://thirdpartyindex.com/vendors/anthropic.md) | AI provider | US\* | 2026-09-30 |
| [Baseten Labs, Inc.](https://thirdpartyindex.com/vendors/baseten.md) | AI provider | US, EU, Australia | 2026-09-30 |
| [DeepL SE](https://thirdpartyindex.com/vendors/deepl.md) | AI provider (machine translation) | US, EU | 2026-09-30 |
| [ElevenLabs Inc.](https://thirdpartyindex.com/vendors/elevenlabs.md) | AI provider (including voice services) | US, EU | 2026-09-30 |
| [Fireworks.ai, Inc.](https://thirdpartyindex.com/vendors/fireworks.md) | AI provider | US, EU, Australia | 2026-09-30 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | AI provider | US, EU, Switzerland, Australia | 2026-09-30 |
| [Microsoft Corp](https://thirdpartyindex.com/vendors/microsoft.md) | AI provider and cloud services provider | US, EU, Switzerland, Australia | 2026-09-30 |
| [Mistral AI SAS](https://thirdpartyindex.com/vendors/mistral.md) | AI provider | EU | 2026-09-30 |
| [OpenAI, LLC](https://thirdpartyindex.com/vendors/openai.md) | AI provider | US, EU, Switzerland, Australia | 2026-09-30 |
| [Parallel Web Systems Inc.](https://thirdpartyindex.com/vendors/parallel-web-systems.md) | Knowledge Sources and Web browsing | US, EU | 2026-09-30 |
| RELX Inc., d.b.a. LexisNexis | Ask LexisNexis | US | 2026-09-30 |
| [SuSea, Inc (you.com)](https://thirdpartyindex.com/vendors/you-com.md) | Web browsing | US, EU | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/22300)). CSV: https://thirdpartyindex.com/vendors/harvey-ai/subprocessors.csv

### Its own affiliates (1)

- Harvey AI Corp (US)

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001, TX-RAMP, IRAP ([evidence](https://thirdpartyindex.com/evidence/22299))
- Claimed: HIPAA, GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/22299))

## Listed as a subprocessor by (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 1 reported incidents (1 major or critical, 0 minor, 0 with no impact stated)
- Typical time to resolve: 20 min
- 2026-08-14: AU region Platform unavailable (critical)
- 2026-06-08: Login and Verification Issues – All Instances (no impact stated)
- 2026-06-03: AU Region - File Uploads & Semantic Search Degraded (minor)
- 2026-05-19: EU Instance Downtime for Data Migration (critical)
- 2026-04-21: Degraded Performance in Harvey (minor)
- 2026-04-16: Vault Review Tables Stuck on Generating (critical)
- 2026-04-14: Latency Issues Affecting Document Processing (minor)
- 2026-04-02: INC-341 (minor)

## Security contact

From its security.txt (https://www.harvey.ai/.well-known/security.txt):

- Contact: mailto:security@harvey.ai
- Contact: mailto:security-reports@harvey.ai
- Security jobs: https://www.harvey.ai/careers

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api