How we handle your firm's data.
Reede is built for Canadian legal professionals, which means every choice about where data lives, who can see it, and what we do with it is made with solicitor-client privilege and the law society technology-competence rules your practice operates under in mind. The short version is below.
Last Updated: June 29, 2026
Run on vetted infrastructure.
Reede runs on a small set of vetted providers — Supabase, Vercel, AWS, Anthropic, and Stripe. Exactly where each one stores and processes your data is listed publicly on our Subprocessors page, so you can review it before you sign up.
Encrypted everywhere.
TLS 1.2+ in transit, AES-256 at rest — strong, industry-standard encryption applied to all customer data.
Your documents are never used to train AI.
Reede uses Anthropic's API under Anthropic's Commercial Terms, which prohibit Anthropic from using customer inputs or outputs to train models.
Tight access — yours, ours, no one else's.
Within a firm, only the firm's members can see the firm's entities, matters, and documents. Across firms, content is isolated, and access is enforced on every request. Internal Reede access is limited to operational necessity and audited.
No ads. No selling your data. No surprises.
Reede is a subscription product. We don't monetise your firm's data, and we don't sell, rent, or share it for marketing. The full list of subprocessors is public and changes are announced before they take effect.
Built around Law Society rules.
The architecture, retention defaults, and AI provider terms are chosen to be consistent with the LSBC's rules on technology competence (the 2019 amendments to the Code of Professional Conduct) and the BC Personal Information Protection Act. We'll sign a DPA on request and can provide supplementary documentation for firm risk reviews.
Transparent on incidents.
If a security incident affects your firm's data, we'll tell you — promptly, with what we know, and with what we're doing about it. We don't hide behind PR teams. You can also raise a privacy concern with our Privacy Officer, or complain to the Office of the Privacy Commissioner of Canada or your provincial regulator — see Your rights.
- Security Whitepaper — architecture, encryption, access controls, breach response
- Privacy Policy — what we collect, why, who we share it with, your rights
- Subprocessors — every third-party service in the data path
- Terms of Service — the contract you accept by using Reede
Questions about how Reede handles your firm's data? Reach us at privacy@reede.ca. If you need a Data Processing Agreement signed, or additional documentation for a firm-side risk review, ask and we'll send what we have.