> ## Documentation Index
> Fetch the complete documentation index at: https://docs.reducto.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# EU data residency & processing

> For customers requiring that all document data stays strictly within EU

For customers who would like to utilize the EU region only, Reducto guarantees that *all customer document data is processed, stored, and deleted exclusively within the EU*, with no exceptions. This applies to ingestion, temporary storage, computation, and deletion workflows.

## EU regions utilized

Reducto operates across multiple cloud providers with EU-only data processing:

**AWS**: Frankfurt (eu-central-1), Ireland (eu-west-1), Paris (eu-west-3), Stockholm (eu-north-1)

**GCP**: Belgium (europe-west1), Frankfurt (europe-west3), Netherlands (europe-west4)

**Azure**: Paris (francecentral), Frankfurt (germanywestcentral), Netherlands (westeurope), Sweden (swedencentral)

## Data boundary guarantee

No customer document data ever leaves the EU. Only aggregated operational metrics (containing no document content) may be processed outside the EU.

## Subprocessor transparency

Reducto maintains a strict EU-only data boundary for all document content.

### Document-processing subprocessors (EU-only execution)

| Company                   | Description                                    |
| ------------------------- | ---------------------------------------------- |
| Amazon Web Services (AWS) | Compute, storage, networking (EU regions only) |
| Google Cloud              | Compute, storage, networking (EU regions only) |
| Modal Labs                | Compute infrastructure (EU regions only)       |
| OpenAI                    | Compute (ZDR, EU region only)                  |

### Vendors receiving only operational telemetry

The following vendors receive only aggregated, anonymous service-level metrics and never receive document content:

| Company | Description       |
| ------- | ----------------- |
| Sentry  | Error monitoring  |
| PostHog | Product analytics |

## Data retention, expiry & deletion

Reducto enforces a strict 24-hour maximum retention window for all customer-submitted data.

### Retention policy

All documents, extracted text, and intermediate outputs expire within 24 hours. Jobs are purged automatically every 12 hours. All S3 data is encrypted at rest (AES-256) and in transit (TLS 1.2+).

### Deletion guarantees

Automatic, irreversible deletion occurs after the 24-hour window. No backups or long-term archives are maintained. Logs and cache entries containing customer data are never persisted.