Client Central Service Providers and Subprocessors Addendum
Last updated: October 14, 2026 • Version: 1.1
1. Scope
1.1 This Addendum identifies the providers engaged by Financial Gravity to process personal information in operating, securing, supporting, and delivering Client Central. It supplements the Client Central Terms of Service and Privacy Policy. A provider’s access depends on its function and the features used.
1.2 Providers acting on our behalf are subject to the confidentiality, permitted-use, and security requirements described in the Terms of Service. The term “subprocessor” applies where Financial Gravity acts as a processor and engages another processor. Independent financial institutions remain subject to their own agreements and privacy notices.
2. Provider list
2.1 The locations below identify where information is stored or otherwise processed, including remote support access. Additional details identify any limits on the features or information involved.
| Provider | Purpose of processing | Processing location | Data processed |
|---|---|---|---|
| Amazon Web Services (Cognito, Lambda, API Gateway, DynamoDB, CloudFront, S3, CloudWatch, SNS / End User Messaging) | Hosting the portal and API; sign-in and two-factor authentication; sessions; text-message codes; logs and monitoring; storage of documents and Foundation Reports | USA: us-west-2 (Oregon); us-east-2 (Ohio) for FG integration gateways | Name, email, phone number, password (hashed), session records (including cached CRM household data), sign-in and preview audit logs, report-download audit logs, SMS delivery logs (full phone numbers, 90 days), uploaded and shared documents, generated Foundation Reports, IP address and browser details |
| SST (SST Console) | Deployment dashboard and error monitoring for the portal’s infrastructure | USA | Application error logs, which may include client identifiers and request details; administrative access to the hosting account (logs, data stores) |
| Zoho (Zoho CRM) | System of record for clients, households and accounts; sends invitation and password-reset emails; document catalogue; secure messages; records each Foundation Report | USA (Zoho US data centre) | Name, email, phone numbers, CRM record IDs, household details (risk tolerance, probability of success, advisors), financial account details, last sign-in time, email-notification preference, document records, secure messages, invitation and reset links |
| BridgeFT (WealthTech API) | Portfolio reporting in the portal and in Foundation Reports | USA (AWS us-east-1, N. Virginia) | Account and household IDs; holdings, balances, transactions, returns |
| Retool (Retool Database) | Supplemental account data, manually tracked accounts (annuities), advisor profiles; inputs to Foundation Reports | USA (Retool Cloud) | Account values and dates, manual account valuations, advisor name, email, phone and booking link |
| Transloadit | Receives client file uploads and stores them in FG’s S3 | USA | Full contents of uploaded documents, file names, CRM contact and household IDs, IP address and browser details |
| Fly.io | Runs the Foundation Report generator | USA (San Jose) | Client name and reporting period; holdings, balances, performance, allocations, account details; advisor details; the finished PDF |
| PDFCrowd | Converts each Foundation Report from HTML to PDF | USA | Full report content: client name, period, holdings, balances, performance, allocations, account details, advisor details |
| Pipedream | Receiving “Submit Dev Logs” reports; relaying phone-number change requests to Client Success | USA us-east-1 | Dev logs: client or preview identifier, browser details, page path, up to 300 console messages. Phone requests: client name, sign-in email, requested phone number |
| Google Workspace (Gmail) | Delivering phone-change request emails to Client Success | USA / global | Client name, sign-in email, requested phone number |
3. Updates and questions
3.1 We may add or replace providers and will update this list accordingly. Material changes to personal-information practices remain subject to the notice and consent requirements in the Privacy Policy and applicable law. Updating this list does not expand the uses permitted by the Terms of Service or change an existing privacy election.
3.2 Questions about these providers or their handling of personal information may be sent to clientsuccess@financialgravity.com.