Sub-processor List
Effective 2026-10-14 · Last updated 2026-09-13
Fratelli Platform Inc. uses the following third parties to process customer personal data on our behalf, as authorized under the Data Processing Addendum. We provide at least 30 days' notice before adding or replacing a sub-processor by email and by updating this page.
Infrastructure & Core Platform
| Sub-processor | Purpose | Data | Location | Safeguards |
|---|---|---|---|---|
| Google LLC — Google Cloud Platform / Firebase | Hosting, Firestore database, Cloud Storage, Cloud Functions, Authentication, App Check, Analytics, backups, Secret Manager | All Customer Data and account data | United States (us-central1) | SCCs; ISO 27001/27017/27018; SOC 2/3 |
| Google LLC — Gemini API | AI features requested by the user (drafting, analysis, site builder) | Prompts and the account data needed to answer them | United States | SCCs; no training on customer data (API terms) |
Payments & Banking
| Sub-processor | Purpose | Data | Location | Safeguards |
|---|---|---|---|---|
| Stripe, Inc. | Subscription billing for Fratelli plans; Stripe Connect payment processing for customers' own sales; KYC verification | Billing contact, payment status, connected-account status; card/bank details are collected by Stripe directly | United States (global processing) | SCCs; PCI DSS Level 1; regulated payment institution |
| Plaid Inc. | Bank account connectivity (only when a customer connects a bank) | Account balances, transactions, institution name | United States | SCCs; SOC 2 Type II; ISO 27001 |
Communications
| Sub-processor | Purpose | Data | Location | Safeguards |
|---|---|---|---|---|
| Google LLC — Gmail API | Sending business email from a customer's connected Gmail account | Outgoing messages, recipients, approved attachments (only when sending) | United States | Google API Services User Data Policy (Limited Use) |
| Google LLC — Maps Platform | Address lookup and validation | Addresses entered by users | United States | SCCs |
| Transactional email delivery (SMTP relay) | Invoices, receipts, reminders, security alerts, system notifications | Recipient email, message content | United States | Contractual confidentiality; TLS |
| Apple Inc. — Sign in with Apple; Apple Push Notification service | Optional sign-in; push notifications to iOS devices | Apple identifier, relayed email; device push token | United States | Apple developer terms |
Change Log
- 2026-09-13 — Initial published list.
To subscribe to sub-processor change notices or to object to a change, email privacy@fratelli-app.com.