> ## Documentation Index
> Fetch the complete documentation index at: https://docs.reducto.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# EU data residency & processing

> For customers requiring that all document data stays strictly within EU

For customers who would like to utilize the EU region only, Reducto guarantees that *all customer document data is processed, stored, and deleted exclusively within the EU*, with no exceptions. This applies to ingestion, temporary storage, computation, and deletion workflows.

## EU regions utilized

Reducto operates across multiple cloud providers with EU-only data processing:

**AWS**: Frankfurt (eu-central-1), Ireland (eu-west-1), Paris (eu-west-3), Stockholm (eu-north-1)

**GCP**: Belgium (europe-west1), Frankfurt (europe-west3), Netherlands (europe-west4)

**Azure**: Paris (francecentral), Frankfurt (germanywestcentral), Netherlands (westeurope), Sweden (swedencentral)

## Data boundary guarantee

No customer document data ever leaves the EU. Only aggregated operational metrics (containing no document content) may be processed outside the EU.

## Subprocessor transparency

Reducto maintains a strict EU-only data boundary for all document content.

### Document-processing subprocessors (EU-only execution)

| Company                   | Description                                    |
| ------------------------- | ---------------------------------------------- |
| Amazon Web Services (AWS) | Compute, storage, networking (EU regions only) |
| Google Cloud              | Compute, storage, networking (EU regions only) |
| Modal Labs                | Compute infrastructure (EU regions only)       |
| OpenAI                    | Compute (ZDR, EU region only)                  |

### Vendors receiving only operational telemetry

The following vendors receive only aggregated, anonymous service-level metrics and never receive document content:

| Company | Description       |
| ------- | ----------------- |
| Sentry  | Error monitoring  |
| PostHog | Product analytics |

## Data retention, expiry & deletion

Reducto enforces a strict 24-hour maximum retention window for all data submitted via API, except for Studio-run jobs and results saved with `persist_results: true`.

### Retention policy

Job results are generally available for 12 hours. Under the ZDR policy, all documents, extracted text, and intermediate outputs expire within 24 hours. All S3 data is encrypted at rest (AES-256) and in transit (TLS 1.2+).

### Deletion guarantees

API-submitted data is automatically and irreversibly deleted after the 24-hour window, except for Studio-run jobs and results saved with `persist_results: true`. No backups or long-term archives are maintained. Logs and cache entries containing customer data are never persisted.