Pending review. This page is prepared but has not been cleared for publication. It is not in force and nothing on it binds any party.

Subprocessors

EvidEpi LLC uses the third-party services below to operate Havast. This page is kept current. If you hold a Data Processing Addendum with us, changes to this list are notified under it.

ProviderPurposeData reaching itRegion
Anthropic, PBC AI extraction. Uploaded documents and the extraction prompt are sent to the model. Document content; extraction configuration United States
Supabase Inc. Database, authentication and file storage. Account data; project data; uploaded documents United States
Render Services, Inc. Application hosting. Data in transit through the application United States

Uploaded documents at the model provider

A document uploaded for AI extraction is transferred to Anthropic's Files API so the model can read it. Havast deletes that provider-side copy after the extraction finishes, on both the success and the failure path, and a sweeper removes any copy that a crashed run left behind. Retention of the request and response themselves is governed by our agreement with the provider, described on the Trust page.

What is not sent

Account identifiers, billing records and usage history stay within our own infrastructure. They are not sent to the model provider.