Legal

Subprocessors

Last updated: July 2026

Reagent, operated by ReaperAgent, LLC, uses the third-party subprocessors below to provide the Service. This page is the authoritative, versioned list; it is referenced by our Privacy Policy. Each subprocessor is contractually bound to protect the data it processes and to use it only to provide services to us. We update this list when we add or remove a subprocessor and revise the "Last updated" date above.

All processing listed below occurs in the United States. We do not currently offer a regional (for example, EU) data-residency commitment.

SubprocessorPurposeData receivedLocationPersonal data
SupabaseAuthentication, application database, and temporary file storageAccount data (email, display name, hashed password), usage and credit records, temporarily uploaded dialogue audio and reference filesUnited StatesYes
VercelApplication and website hosting, and the AI Gateway that routes model requestsAll request data as host; text prompts and transcripts in transit through the AI GatewayUnited StatesYes
AnthropicClaude AI models for processing text commands and generating responsesText commands and REAPER project metadata (e.g. track and item names)United StatesYes
GoogleGemini models for dialogue transcript analysis and translationText transcripts only — no audio is sent to GoogleUnited StatesYes
ElevenLabsSpeech-to-text transcription for dialogue-editing featuresDialogue audio, uploaded temporarily and deleted after processingUnited StatesYes
Voyage AIText embeddings for REAPER/Wwise documentation searchDocumentation search-query textUnited StatesYes
WorkOSEnterprise SAML single sign-on (SSO)Email and organization membership; the SAML assertion (which may include the user’s name) is processed in transit, though Reagent stores only email and organizationUnited StatesYes
PolarSubscription management and billingName, email, and subscription/billing detailsUnited StatesYes
StripePayment card processing, used by PolarPayment card details (Reagent does not store full card numbers)United StatesYes
PostHogProduct analyticsUsage and behavioral events, IP address, and, for identified users, profile attributesUnited StatesYes
ResendTransactional and contact-form email deliveryEmail address and message contentUnited StatesYes
MintlifyDocumentation site hostingDocumentation-site visitor logs (IP address, page views)United StatesInfrastructure only
GitHubDesktop application update distribution and avatar image deliveryApplication version and IP address on update checksUnited StatesInfrastructure only

Enterprise data handling

For enterprise (SSO) organizations, model traffic is routed to the customer's own model endpoint rather than through the subprocessors above, and the transcription, feedback, and documentation-search features that would contact our servers are disabled. See the Privacy Policy for details.

Data Processing Agreement

Enterprise customers who require a Data Processing Agreement (DPA) can request one through our contact page.