Subprocessor List
Last Updated: July 12, 2026
Reede is a service of Reede Systems Inc.. To deliver the service, Reede uses a small number of carefully selected third-party providers. When these providers handle personal information on our behalf — by hosting it, processing it, or transmitting it — they are referred to as "subprocessors." We share personal information with subprocessors only to the extent necessary for them to perform their function. Each subprocessor is bound by contract to handle personal information in accordance with applicable Canadian privacy laws.
Current subprocessors
Anthropic, PBC
- Role: AI processing — analyzes content, answers questions, and drafts and returns documents. Used for:
- The Reede assistant (chat): setting up matters and drafting documents from a task the user describes
- Ask Reede: answering BC practice questions
- Document drafting (e.g. resolutions, cover letters, invoices) for corporate matters
- Minute book reviews and status reviews of saved entities
- Extraction: pulling structured facts (significant individuals, shareholdings) out of documents the user uploads
- Location: United States
- Data received: The content sent to Reede's AI features — the user's typed requests and questions, the document being analyzed or drafted, the related matter/entity context, and the prompt instructing how to process it
- Retention: Reede accesses Anthropic's API under Anthropic's Commercial Terms of Service and Data Processing Addendum, which incorporates the EU Standard Contractual Clauses for cross-border transfers. These terms prohibit Anthropic from using customer inputs or outputs to train its models. Anthropic retains API inputs and outputs for up to 30 days for trust and safety purposes, after which they are deleted from Anthropic's systems.
- Privacy policy: https://www.anthropic.com/legal/privacy
Supabase, Inc.
- Role: Backend infrastructure — authentication, database, and file storage
- Location: Data hosted in Montreal, Canada (
ca-central-1region) - Data received: User account information; uploaded minute book PDFs (during the brief retention window before deletion, unless the entity is saved); entity records (directors, officers, share classes, shareholdings, significant individuals, notes, annual filings); documents uploaded to an entity's minute book; documents generated by Reede (cover letters, invoices, registers, signed PDFs, signature images); audit logs including signing events
- Retention: Per Reede's retention policies. See Section 7 of the Privacy Policy
- Privacy policy: https://supabase.com/privacy
Stripe, Inc. (and Stripe Payments Canada, Ltd.)
- Role: Payment processing for paid subscriptions
- Location: United States and Canada
- Data received: Billing details and payment information (entered directly into Stripe's hosted checkout — Reede does not see card numbers). Reede stores only a Stripe customer ID, subscription status, and plan tier
- Retention: Per Stripe's own retention policies, plus 7 years for billing records required for Canadian tax purposes
- Privacy policy: https://stripe.com/privacy
Vercel, Inc.
- Role: Application hosting — serves the Reede website and runs all of Reede's server-side application code, including document generation and the calls to Reede's AI provider
- Location: United States, with Canadian edge regions
- Data received: Standard server access logs (timestamps, IP addresses, request paths), which Vercel retains. Separately, because Reede's server-side code runs on Vercel, file contents and record data necessarily pass through Vercel compute while a request is being served — for example when a document is generated, when an uploaded file is read in order to send it to the AI provider, or when a data export is assembled. Vercel does not store uploaded files or generated documents: those are written to and read from Reede's storage provider (Supabase), and exist on Vercel only in memory, transiently, for the duration of the request
- Retention: Approximately 30 days
- Privacy policy: https://vercel.com/legal/privacy-policy
Amazon Web Services, Inc.
- Role: Transactional email delivery (Amazon Simple Email Service)
- Location: Montreal, Canada (
ca-central-1) - Data received: Outbound email addresses (recipient and sender) and message contents for service emails such as signing-link emails, password resets, and notifications
- Retention: Per AWS's own retention policies; Reede retains bounce/complaint metadata for suppression-list management
- Privacy policy: https://aws.amazon.com/privacy/
Cross-border data transfers
Some of the subprocessors above process data in the United States — Anthropic, Vercel, and a portion of Stripe's processing. Each subprocessor's current region is listed above. These regions reflect our current configuration and may change as our infrastructure evolves; we do not guarantee that your data is stored in any particular country or region.
By using Reede, you consent to these transfers. Personal information sent outside Canada is subject to the laws of the country where it is processed. For more detail, see Section 6 of the Privacy Policy.
Changes to this list
If we add a new subprocessor, remove one, or change the role of an existing one, we will update this page and revise the "Last Updated" date. For users on active paid subscriptions, we will provide notice of material changes by email at least 30 days before the change takes effect, where feasible.
Contact
Email: privacy@reede.ca