EU data residency & processing

For customers requiring that all document data stays strictly within the European Union

For customers who would like to utilize the EU region only, Reducto guarantees that all customer document data is processed, stored, and deleted exclusively within the EU, with no exceptions. This applies to ingestion, temporary storage, computation, and deletion workflows.

EU regions utilized

Reducto operates across multiple cloud providers with EU-only data processing:

AWS: Frankfurt (eu-central-1), Ireland (eu-west-1), Paris (eu-west-3), Stockholm (eu-north-1)

GCP: Belgium (europe-west1), Frankfurt (europe-west3), Netherlands (europe-west4)

Azure: Paris (francecentral), Frankfurt (germanywestcentral), Netherlands (westeurope), Zurich (switzerlandnorth), Sweden (swedencentral), Norway (norwayeast)

Data boundary guarantee

No customer document data ever leaves the EU. Only aggregated operational metrics (containing no document content) may be processed outside the EU.

Subprocessor transparency

Reducto maintains a strict EU-only data boundary for all document content.

Document-processing subprocessors (EU-only execution)

Company	Description
Amazon Web Services (AWS)	Compute, storage, networking (EU regions only)
Google Cloud	Compute, storage, networking (EU regions only)
Modal Labs	Compute infrastructure (EU regions only)
OpenAI	Compute (ZDR, EU region only)

Vendors receiving only operational telemetry

The following vendors receive only aggregated, anonymous service-level metrics and never receive document content:

Company	Description
Sentry	Error monitoring
PostHog	Product analytics

Data retention, expiry & deletion

Reducto enforces a strict 24-hour maximum retention window for all customer-submitted data.

Retention policy

All documents, extracted text, and intermediate outputs expire within 24 hours. Jobs are purged automatically every 12 hours. All S3 data is encrypted at rest (AES-256) and in transit (TLS 1.2+).

Deletion guarantees

Automatic, irreversible deletion occurs after the 24-hour window. No backups or long-term archives are maintained. Logs and cache entries containing customer data are never persisted.