Sub-processors & data processing agreements

Last updated: September 2026

A sub-processor is a third party that receives client data in the course of our providing the Service. Recon Brief uses exactly two, and maintains a current data processing agreement with each. We will provide copies on request — see Contact.

Anthropic — AI processing

The text of your transcript is transmitted to Anthropic's commercial API to generate your deliverables. Anthropic's Commercial Terms of Service prohibit using customer content to train models, and its Data Processing Addendum is incorporated into those terms. Anthropic retains API inputs and outputs for up to 30 days for safety purposes, then deletes them; they are not used to train models.

Google — hosting and email

The Service runs on Google Cloud: client data at rest and in transit sits on Google infrastructure, encrypted with AES-256, SOC 2 Type II certified, and located in the United States only. Google Workspace relays our notification and invoice emails, which carry a case label, a deponent name, or an invoice — never transcript content. Google's Cloud Data Processing Addendum and Workspace Data Processing Amendment apply to our accounts.

No other third party receives client data, and we use no analytics, advertising, or tracking services.

Changing the AI provider

We will give clients at least 30 days' written notice and the replacement provider's data-handling terms before changing AI providers, except where a change in a provider's own terms forces a faster move — in which case notice follows as soon as practicable.