DocumentSubprocessor List · v1
Last revised2026-05-24
Notification policyNew subprocessors will appear on the public list before they begin processing customer data.
1 ·MICROSOFT AZURE
RoleReeve product hosting and storage
Data accessedAll Reeve customer data: incident records, attached photos, audit-chain artifacts, per-tenant verification keys, citation index, derived analytics.
RegionUnited States Azure regions
Contractual basisMicrosoft Online Services Data Protection Addendum (DPA), Standard Contractual Clauses where applicable.
Encryption postureStorage Service Encryption with AES-256-GCM; backups encrypted with same posture.
2 ·ANTHROPIC
RoleAI inference for Reeve (vision + reasoning via Claude Sonnet)
Data accessedConstruction-site photos and OSHA-rule text the customer submits, plus prompts assembled by the Reeve backend.
RegionAnthropic-managed inference, US
Contractual basisAnthropic Commercial Terms of Service. We have not opted into the training-data program for this workload. Customer submissions to Reeve are never sent to any training pipeline.
3 ·NETLIFY
RoleMarketing site hosting (vendriclabs.net) and inbound email capture
Data accessedEmail addresses (and passwords, if self-login is enabled in the future) captured via marketing forms. No Reeve customer record data.
RegionUnited States, Netlify Edge
Contractual basisNetlify Master Services Agreement and Netlify DPA.
Encryption postureTLS 1.3 in transit; Netlify storage-level encryption at rest.
EXCLUSIONS
We do not use analytics trackers that record customer data. We do not use a customer-data platform. We do not use third-party fonts that phone home. We do not use third-party widgets (chat, surveys, feedback) on the marketing site. If we ever add one, it will appear on this list before it ships.