Data Subprocessors
To support delivery of our Services, bankIO may engage and use data processors with access to certain Customer Data or Personal Information (each, a “Subprocessor”). This page provides information about each Subprocessor.
Please email [email protected] if you have any questions.
Amazon Web Services
- Location: Seattle, United States.
 - Security certifications: Privacy Shield, ISO27001, SOC3.
 - Data processed: Anonymized content, email address, IP address.
 - Use: Data storage, backups, CDN, DNS, SSL, domain management, emails.
 - DPA signed: Yes – incorporated into terms.
 
Google Cloud
- Location: Mountain View, United States.
 - Security certifications: Privacy Shield, ISO27001, SOC3.
 - Data processed: User-added content (when using sentiment analysis).
 - Use: Natural language processing.
 - DPA signed: Yes – incorporated into terms.
 
Heroku
- Location: San Francisco, United States.
 - Security certifications: Privacy Shield, ISO27001, 27017, 27018 SOC2 Type 1.
 - Data processed: User name, email address, IP address.
 - Use: Infrastructure hosting and encrypted data storage.
 - DPA signed: Yes – incorporated into terms.