Sub-processors
Last updated: 19 August 2026
Blankitt (EAS Technology Consulting Ltd) uses a small set of trusted third parties ("sub-processors") to help deliver our services. This page lists them, what they do, and where they process data. It is referenced by our Privacy Policy, and by the Data Processing Agreement we make available to business customers on request.
Not every sub-processor applies to every customer or product. Many apply only to a specific product or feature — for example, mailbox access is used only if you connect a mailbox to Blankitt DMARC; background-check, job-board, and video-interview providers apply only to Blankitt HR; and the Open Banking providers apply only to Blankitt Finance. The "Purpose" column notes which product each supports.
Current sub-processors
| Sub-processor | Purpose | Data processed | Location / safeguard |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, edge compute, storage (D1 / R2 / KV), CDN, Analytics Engine, Stream (video interviews), Workers AI, DMARC report-email routing, and Turnstile bot protection — all products | All service data, including account data, DMARC reports, HR and finance records, Edge storefront logs, and cloud-saved diagrams | UK + Republic of Ireland regions |
| Anthropic, PBC | AI features: candidate-CV parsing (HR), document and receipt processing (Finance), and alert explanations (Edge and marketing tooling) | For HR, candidate CV and application text; for Finance, invoice and receipt documents; for Edge and marketing, aggregated non-personal summaries | United States — SCCs |
| Microsoft Ireland Operations Ltd / Microsoft Corporation | Mailbox access to collect DMARC reports (if you connect a Microsoft 365 mailbox); Microsoft 365 calendar and email features (HR) | DMARC report messages and attachments; interview scheduling and email metadata | EU / US — SCCs |
| Google LLC | Product/web analytics (GA4); mailbox access to collect DMARC reports (if you connect a Google Workspace mailbox); Google Workspace calendar, email, and Meet features (HR) | Anonymised analytics events; DMARC report messages; interview scheduling, email, and video-interview metadata | United States — SCCs |
| Stripe Payments Europe Ltd / Stripe, Inc. | Payment processing and subscription billing — all paid products | Billing contact, card metadata (brand, last 4), billing country | Republic of Ireland / US — SCCs |
| Resend, Inc. | Transactional and notification email delivery — all products | Recipient email address and message content | United States — SCCs |
| Yapily Ltd | FCA-authorised Account Information Service Provider — Open Banking (personal and business Finance) | Bank account identifiers, balances, and transaction history | United Kingdom |
| TrueLayer Limited | FCA-authorised Account Information Service Provider — business Finance Open Banking | Bank account identifiers, balances, and transaction history | United Kingdom |
| Onfido Ltd | Identity, right-to-work, and background checks — Blankitt HR | Identity-document images and check results for candidates and employees | United Kingdom / EU — SCCs where applicable |
| Zinc Work Ltd | Background and reference checks — Blankitt HR | Candidate identity, employment history, and reference data | United Kingdom |
| Reed Online Ltd | Job-board posting and application intake — Blankitt HR | Job postings and candidate application data | United Kingdom |
| Zoom Video Communications, Inc. | Video interviews — Blankitt HR | Interview audio/video and scheduling metadata | United States — SCCs |
| Expo (650 Industries, Inc.) | Mobile push notifications — Blankitt HR mobile app | Device push tokens and notification content | United States — SCCs |
Statutory recipients and customer-connected integrations
Some data goes to parties that are not our sub-processors. When you run UK payroll in Blankitt HR, or file VAT in Blankitt Finance, we transmit the data required by law to HMRC, a statutory recipient. When you choose to connect an accounting system to Blankitt Finance (for example QuickBooks, Xero, or Companies House), those are data sources you connect and control, not sub-processors we route your data to.
Changes to this list
We may add or replace sub-processors as our services evolve. For business customers under our Data Processing Agreement, we will give advance notice of any new sub-processor that processes customer personal data, so you have the opportunity to object. To be notified of changes, email [email protected].
Contact
- Email: [email protected]