Our guarantee
Every third-party service that processes our data is listed below, with what data it sees, where it's located, and its own compliance posture.
We use the following third-party services to operate Reclaim Protocol. Each subprocessor is contractually bound to the same data protection standards we uphold, and we maintain an up-to-date record of what data each one processes, where it is located, and their own compliance posture.
Cloud infrastructure (compute, storage, databases) and TEE confidential compute (AMD SEV-SNP). Hosts one or both halves of a TEE_K/TEE_A pair, depending on the region a session is assigned to.
Data processed
Location
US, IN (ap-south-1), EU (eu-north-1)
Compliance
TEE confidential compute (AMD SEV-SNP). Hosts one or both halves of a TEE_K/TEE_A pair, depending on the region a session is assigned to.
Data processed
Location
US, Indonesia
Compliance
Admin authentication (Google OAuth)
Data processed
Location
US
Compliance
AI analysis for PII, security, and whitepaper checks
Data processed
Location
US
Compliance
Source code hosting and Dependabot supply-chain alerts
Data processed
Location
US
Compliance
Hosting for the Trust Portal (runs on Google Cloud Run under the hood)
Data processed
Location
GCP (asia-southeast1)
Compliance