Reducto

Security and trust center evidence

The complete agentic document platform

reducto.ai Data platformsLast verified 30 Sep 2026

Request the report Are you Reducto?

HIPAAVendor-stated

SOC 2Vendor-stated

Reducto has 2 vendor-stated rows in the CertReports index, last verified 30 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Reducto displays a HIPAA badge on its trust centre, as of 28 Sep 2026. The evidence row notes this is a vendor claim and that BAA availability has not yet been captured, so the HIPAA badge as of 28 Sep 2026 should be read as a stated claim rather than a confirmed BAA offering. Reducto also states SOC 2 on its trust centre, as of 28 Sep 2026. No public evidence found for ISO/IEC 27001 for Reducto as of 28 Sep 2026. No public evidence found for GDPR or PCI DSS for Reducto as of 28 Sep 2026.

HIPAA: vendor displays a badge on its trust centre; BAA availability not yet captured, as of 28 Sep 2026.
SOC 2: vendor states on its trust centre, as of 28 Sep 2026.
No public evidence found for ISO/IEC 27001, GDPR or PCI DSS as of 28 Sep 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 28 Sep 2026; it is regenerated whenever a row changes.

Among data platforms vendors

0verified rows

Category median 0, across 69 indexed data platforms vendors. Reducto has no registry-verified row yet, like 51 percent of them; its evidence is vendor-stated or reported.

data pipelinedocument extractiondocument parsingocr

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for GDPR, FedRAMP, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Subprocessor list

Public · 24 subprocessors listed on the trust centre · as of 30 Sep 2026

Open

Public · as of 30 Sep 2026

Open

Subprocessors (24)

Amazon Web ServicesCloud infrastructure, storage, networking, database, and selected document-processing services · United States
AnthropicAI inference for document extraction and processing workloads · United States
CloudflareStorage, CDN, tunnel, networking, and telemetry infrastructure
CO
CognitionAI software development agent for code, pull request, issue, and debugging context · United States
CO
Convexconvex.dev
DatadogApplication monitoring, logging, tracing, and observability
Fireworks AILLM inference services · United States
GitHubSource code, issues, pull requests, CI, and security development workflow · United States
Google CloudAlternative cloud infrastructure and AI inference, vision, and storage where configured · United States
II
incident.ioIncident management, operational communications, and alerts · United States and United Kingdom
LinearProduct, engineering, and task documentation · United States
MO
ModalServerless and GPU compute infrastructure for document processing and model workloads
NO
NotionProduct, engineering, task, and security documentation · United States
OpenAIAI inference for document extraction and processing workloads · United States
OP
OpenRouterLLM API routing and inference services
PostHogProduct analytics · United States
PR
PropelAuthAuthentication and organization/user identity management · United States
PY
PylonCustomer support communications · United States
SC
ScalrTerraform and infrastructure-as-code management and automation · United States
SentryError monitoring · United States
SlackOperational communications and alerts · United States
SnowflakeData warehouse and analytics for product, billing, usage, and account metadata · United States
SV
SvixWebhook delivery infrastructure · United States
TI
TinybirdAnalytics, event querying, and usage/billing event support · United States

Security profile

Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.

Change history

25 Sep 2026Subprocessor added: ConvexConvex appeared on the subprocessor list.
25 Sep 2026Subprocessor removed: DopplerDoppler left the subprocessor list.
25 Sep 2026Subprocessor removed: StripeStripe left the subprocessor list.
25 Sep 2026Subprocessor removed: Together AITogether AI left the subprocessor list.
25 Sep 2026Subprocessor removed: VantaVanta left the subprocessor list.
18 Sep 2026First indexed by CertReports2 evidence rows across 2 frameworks entered the index.