# Reducto

Reducto (reducto.ai): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/reducto
- Documents last verified: 2026-10-03
- Transparency rating: 83/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 23 tracked vendors directly, 142 within two hops, 364 within three; 10 tracked vendors rely on it directly, 122 within two hops, 313 within three
- Cite as: Reducto, Third Party Index, https://thirdpartyindex.com/vendors/reducto (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.reducto.ai/ | 2026-10-03 | 2026-10-03 |
| Subprocessor list | https://trust.reducto.ai/subprocessors | 2026-10-03 | 2026-10-03 |
| Privacy policy | https://reducto.ai/privacy | 2026-10-03 | 2026-10-03 |
| Terms | https://reducto.ai/terms | 2026-10-03 | 2026-10-03 |
| Security page | https://docs.reducto.ai/security/policies | 2026-10-03 | 2026-10-03 |
| security.txt | https://reducto.ai/.well-known/security.txt | 2026-10-03 | 2026-10-03 |
| Status page | https://status.reducto.ai/ | 2026-10-03 | 2026-10-03 |

## Subprocessors (24)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud infrastructure, storage, networking, database, and selected document-processing services; Customer document/content subprocessor; may receive documents, document-derived content, prompts, schemas, or model inputs and outputs when configured. | United States | 2026-10-03 |
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | AI inference for document extraction and processing workloads; Customer document/content subprocessor; may receive documents, document-derived content, prompts, schemas, or model inputs and outputs when configured. | United States | 2026-10-03 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Cloud and operational infrastructure subprocessor; may process stored content, delivery data, network metadata, and telemetry depending on the configured service. | Storage, CDN, tunnel, networking, and telemetry infrastructure | 2026-10-03 |
| [Cognition](https://thirdpartyindex.com/vendors/cognition.md) | AI software development agent for code, pull request, issue, and debugging context; Operational/development subprocessor; may process source code, issue, pull request, CI, or debugging context. No customer document content by design. | United States | 2026-10-03 |
| Convex | — | — | 2026-10-03 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Operational telemetry subprocessor for application monitoring, logging, and tracing. No customer document content by design. | Application monitoring, logging, tracing, and observability | 2026-10-03 |
| [Fireworks AI](https://thirdpartyindex.com/vendors/fireworks.md) (AI model provider: Fireworks) | Customer document/content processor; may receive document-derived content, prompts, schemas, or model inputs and outputs when configured.; LLM inference services | United States | 2026-10-03 |
| [GitHub](https://thirdpartyindex.com/vendors/github.md) | Operational/development subprocessor; may process source code, issue, pull request, CI, or debugging context. No customer document content by design.; Source code, issues, pull requests, CI, and security development workflow | United States | 2026-10-03 |
| [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud.md) | Alternative cloud infrastructure and AI inference, vision, and storage where configured; Customer document/content subprocessor; may receive documents, document-derived content, prompts, schemas, or model inputs and outputs when configured. | United States | 2026-10-03 |
| [incident.io](https://thirdpartyindex.com/vendors/incident-io.md) | Incident management, operational communications, and alerts; Operational incident-management subprocessor; may process alerts, debugging context, and customer metadata. No customer document content by design. | United States and United Kingdom | 2026-10-03 |
| [Linear](https://thirdpartyindex.com/vendors/linear.md) | Operational/development subprocessor; may process product, engineering, security, and customer-related debugging context. No customer document content by design.; Product, engineering, and task documentation | United States | 2026-10-03 |
| [Modal](https://thirdpartyindex.com/vendors/modal.md) | Customer document/content subprocessor; may receive documents, document-derived content, prompts, schemas, or model inputs and outputs when configured. | Serverless and GPU compute infrastructure for document processing and model workloads | 2026-10-03 |
| [Notion](https://thirdpartyindex.com/vendors/notion-com.md) | Operational/development subprocessor; may process product, engineering, security, and customer-related context. No customer document content by design.; Product, engineering, task, and security documentation | United States | 2026-10-03 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | AI inference for document extraction and processing workloads; Customer document/content subprocessor; may receive documents, document-derived content, prompts, schemas, or model inputs and outputs when configured. | United States | 2026-10-03 |
| [OpenRouter](https://thirdpartyindex.com/vendors/openrouter.md) (AI model provider: OpenRouter) | Customer document/content subprocessor; may receive documents, document-derived content, prompts, schemas, or model inputs and outputs when configured. | LLM API routing and inference services | 2026-10-03 |
| [PostHog](https://thirdpartyindex.com/vendors/posthog.md) | Customer metadata/product analytics subprocessor; processes product and event metadata only. No customer document content by design.; Product analytics | United States | 2026-10-03 |
| [PropelAuth](https://thirdpartyindex.com/vendors/propelauth.md) | Authentication and organization/user identity management; Customer metadata/platform subprocessor; processes account, identity, billing, usage, job, webhook, or analytics metadata. No customer document content by design. | United States | 2026-10-03 |
| [Pylon](https://thirdpartyindex.com/vendors/pylon.md) | Customer support communications; Customer support subprocessor; may process customer metadata and customer-provided support context. No customer document content by design unless intentionally supplied for support. | United States | 2026-10-03 |
| [Scalr](https://thirdpartyindex.com/vendors/scalr.md) | Operational infrastructure subprocessor; processes infrastructure configuration and deployment metadata. No customer document content by design.; Terraform and infrastructure-as-code management and automation | United States | 2026-10-03 |
| [Sentry](https://thirdpartyindex.com/vendors/sentry.md) | Error monitoring; Operational telemetry subprocessor for error monitoring. No customer document content by design. | United States | 2026-10-03 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | Operational communications and alerts; Operational communications subprocessor; may process alerts, support context, and customer metadata. No customer document content by design. | United States | 2026-10-03 |
| [Snowflake](https://thirdpartyindex.com/vendors/snowflake.md) | Customer metadata/platform subprocessor; processes account, identity, billing, usage, job, webhook, or analytics metadata. No customer document content by design.; Data warehouse and analytics for product, billing, usage, and account metadata | United States | 2026-10-03 |
| [Svix](https://thirdpartyindex.com/vendors/svix.md) | Customer metadata/platform subprocessor; processes account, identity, billing, usage, job, webhook, or analytics metadata. No customer document content by design.; Webhook delivery infrastructure | United States | 2026-10-03 |
| [Tinybird](https://thirdpartyindex.com/vendors/tinybird.md) | Analytics, event querying, and usage/billing event support; Customer metadata/platform subprocessor; processes account, identity, billing, usage, job, webhook, or analytics metadata. No customer document content by design. | United States | 2026-10-03 |

Read from ([evidence](https://thirdpartyindex.com/evidence/35869)). CSV: https://thirdpartyindex.com/vendors/reducto/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 4. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/35858))
- Claimed: HIPAA ([evidence](https://thirdpartyindex.com/evidence/35858))

## Subprocessor of (10)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Airtable](https://thirdpartyindex.com/vendors/airtable.md): AI-powered data extraction
- [Arphie](https://thirdpartyindex.com/vendors/arphie.md)
- [Capcade](https://thirdpartyindex.com/vendors/capcade.md): Document parsing and data extraction, utilized to power our AI Assistant
- [Drata](https://thirdpartyindex.com/vendors/drata.md): \[Drata & SafeBase\] \[Opt-in\] Reducto is used to process user-uploaded documents (e.g., questionnaires, raw documents, policies, third party attestations, reports…
- [Endex](https://thirdpartyindex.com/vendors/endex.md): Document Processing
- [Hadrius](https://thirdpartyindex.com/vendors/hadrius.md)
- [Patlytics](https://thirdpartyindex.com/vendors/patlytics.md): AI-powered document parsing and extraction.; IT
- [Spellbook](https://thirdpartyindex.com/vendors/spellbook.md): Data Processing; Provides document data extraction capabilities in Spellbook Associate.
- [Stellic](https://thirdpartyindex.com/vendors/stellic.md): Data analytics; Image based transcript processing for Explore product
- [Vanta](https://thirdpartyindex.com/vendors/vanta.md): Document Parsing Tool; Vanta AI

## Security contact

From its security.txt (https://reducto.ai/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/35867)):

- Contact: mailto:support@reducto.ai
- Disclosure policy: https://trust.reducto.ai
- Languages: en
- Valid until 2027-07-01

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api