Sub-processors

Last updated: 16 June 2026

Blankitt (EAS Technology Consulting Limited) uses a small set of trusted third parties ("sub-processors") to help deliver our services. This page lists them, what they do, and where they process data. It is referenced by our Privacy Policy, and by the Data Processing Agreement we make available to business customers on request.

Not every sub-processor applies to every customer or product — for example, Microsoft and Google mailbox access is used only if you connect a mailbox to Blankitt DMARC, and Yapily is used only for the personal-finance Open Banking feature.

Current sub-processors

Sub-processorPurposeData processedLocation / safeguard
Cloudflare, Inc.Hosting, edge compute, storage (D1 / R2 / KV), CDN, DMARC report-email routing, and Turnstile bot protectionAll service data, including account data, DMARC reports, and cloud-saved diagramsUK + Republic of Ireland regions
Microsoft Ireland Operations Ltd / Microsoft CorporationMailbox access to collect DMARC reports — only if you connect a Microsoft 365 mailbox to Blankitt DMARCDMARC report messages and attachments from the connected mailboxEU / US — SCCs
Google LLCProduct/web analytics (GA4); and mailbox access to collect DMARC reports — the latter only if you connect a Google Workspace mailboxAnonymised analytics events; DMARC report messages from the connected mailboxUnited States — SCCs
Stripe Payments Europe Ltd / Stripe, Inc.Payment processing and subscription billingBilling contact, card metadata (brand, last 4), billing countryRepublic of Ireland / US — SCCs
Resend, Inc.Transactional and notification email deliveryRecipient email address and message contentUnited States — SCCs
Yapily LtdFCA-authorised Account Information Service Provider — personal-finance Open Banking onlyBank account identifiers, balances, and transaction historyUnited Kingdom

Changes to this list

We may add or replace sub-processors as our services evolve. For business customers under our Data Processing Agreement, we will give advance notice of any new sub-processor that processes customer personal data, so you have the opportunity to object. To be notified of changes, email privacy@blankitt.com.

Contact