Legal
Subprocessors
Last updated 13 October 2026
The companies that process data on our behalf, what each one does, and what it sees.
Redaction for the accuracy-testing program runs on hardware we own, using a model that runs there — not a new processor, and no document goes to a cloud service for that step.
| Processor | What it does | What it sees | Where |
|---|---|---|---|
| Google Cloud | Runs the application and the database | Account records, the documents you upload and text you paste while we read them (never stored, unless you opt into the accuracy-testing program), the figures or lease terms you choose to keep, server logs | United States (database backups in Google's US multi-region) |
| Google Cloud: Gemini Enterprise Agent Platform (formerly Vertex AI) | Extracts lease terms from the text of your documents | The text of the lease you upload, while the model answers. Not used for training; for our account, not logged or cached | United States (US multi-region) |
| Google Workspace | Our email: support and legal correspondence, including privacy, deletion, and export requests | Your email address, what you write to us, and anything we send you by email | Any country where Google or its subprocessors have facilities |
| Stripe | Takes payments, issues invoices, and emails receipts | Your name, email, billing address, and card details. We never see your full card number | United States, and other countries where Stripe's affiliates and subprocessors operate |
| Resend | Sends account email: welcome and email confirmation, password reset, and a notice if a payment fails | Your email address and the contents of those messages | United States |
Changes to this list
We update this page when a processor is added or removed. If you would like to be told in advance, write to support@ratably.io and we will add you to the notice list.
Data processing agreement
If your business needs a signed data processing agreement, ask at support@ratably.io.