Subprocessors
Last updated: May 7, 2026
This page lists the third-party subprocessors and infrastructure providers used by Lato travel app bv (“Lato”) to deliver and support the Lato platform and related services.
A subprocessor is a third-party service provider engaged by Lato that may process customer personal data on behalf of our customers.
Lato carefully evaluates all subprocessors for security, privacy, and GDPR compliance and only engages subprocessors necessary for the delivery and operation of the Services.
For questions regarding subprocessors or data protection, please contact:
For more information about how we process personal data, please review our:
Privacy Policy
Data Processing Addendum (DPA)
Infrastructure & Hosting
| Provider | Purpose | Categories of Personal Data | Region |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure, object storage, backups | Uploaded documents, images, backups, application data | EU |
| netcup GmbH | Application hosting and infrastructure operations | Application data, logs, operational data | EU |
Analytics, Monitoring & Product Improvement
| Provider | Purpose | Categories of Personal Data | Region |
|---|---|---|---|
| Google Tag Manager | Website analytics and tag management | Website usage and analytics data | International |
| PostHog | Product analytics, logging, feature analysis | Usage analytics, device/browser metadata | EU |
| Canny | Feedback and changelog management | User account and feedback data | International |
| Google Analytics | Website analytics and traffic analysis | Website usage data, browser/device metadata, IP-related analytics data | United States and/or international |
Payments & Billing
| Provider | Purpose | Categories of Personal Data | Region |
|---|---|---|---|
| Stripe, Inc. | Payment processing and subscription billing | Billing data, payment metadata | EU and/or United States |
Lato does not store complete payment card details on its own servers.
Customer Support, CRM & Communication
| Provider | Purpose | Categories of Personal Data | Region |
|---|---|---|---|
| Brevo | Transactional email delivery | Email addresses and communication content | EU |
| Zoho Corporation | CRM and customer communication tools | Customer account and communication data | EU and/or international |
AI & Document Processing Providers
| Provider | Purpose | Categories of Personal Data | Region |
|---|---|---|---|
| OpenAI, L.L.C. | AI-powered features and document processing | Trip content, prompts, uploaded content | United States and/or international |
| Google Gemini | AI-powered features and document processing | Trip content, prompts, uploaded content | United States and/or international |
Where supported by the provider, Lato configures AI subprocessors not to use customer content for model training purposes.
Maps & Geolocation Services
| Provider | Purpose | Categories of Personal Data | Region |
|---|---|---|---|
| Google Maps Platform | Maps, geocoding, routing | Location and itinerary data | International |
| Mapbox | Mapping services | Map and location data | International |
| GraphHopper | Routing and navigation | Route and location data | EU and/or international |
Travel & External Inventory Providers
| Provider | Purpose | Categories of Personal Data | Region |
|---|---|---|---|
| RateHawk | Hotel inventory integrations | Traveller and booking data | International |
| Amadeus | Travel and flight integrations | Traveller and itinerary data | International |
| AeroDataBox | Flight status and aviation data | Flight and itinerary metadata | International |
International Data Transfers
Some subprocessors may process personal data outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, Lato relies on appropriate safeguards under applicable data protection laws, including:
European Commission Standard Contractual Clauses (SCCs),
adequacy decisions issued by the European Commission,
and/or participation in the EU-U.S. Data Privacy Framework where applicable.
Changes to Subprocessors
Lato may update this list from time to time as our services evolve.
Customers may contact Lato at support@latotravelapp.com for questions regarding subprocessors or data protection practices.
Adapted from the Basecamp open-source policies/CC BY 4.0