Sub-processors
Last updated: 26 September 2026
When you use EasyBankData, EasySoft Tech S.L. processes the bank data of your accounts as processor on your behalf, as you are the controller. To provide the service we rely on the providers on this page, which act as sub-processors within the meaning of article 28.2 GDPR.
We publish it so that you can meet your own obligations: if you process data about your customers or suppliers through the service, you need to be able to disclose the full chain to them. That is why it lists names, locations and safeguards rather than generic categories.
1. The connection with the banks
These are the ones involved in reading your accounts.
| Sub-processor | What it does | What it receives | Location | Safeguard |
|---|---|---|---|---|
| Wealth Reader, S.L. Tax ID B44575942 · Madrid (Spain) Account Information Service Provider authorised by the Bank of Spain, no. 6939 |
Connects with your bank, reads the accounts, delivers the balances and transactions to us, updates them and revokes the authorisation when we ask | The data of the accounts you connect, including that of the counterparties of the transactions | Spain. Its infrastructure is on Google Cloud, in European Economic Area regions (Madrid, Spain) | Processing agreement in Annex I of the framework contract between Wealth Reader and ONNA Digital |
| ONNA Digital | Holds the contract with Wealth Reader through which access is provided: it makes its account available to us and passes our instructions on to Wealth Reader | It does not receive the bank data, which goes directly from Wealth Reader to us. It can see the technical details of the connections in Wealth Reader's portal | Not applicable: it does not host the bank data | Processing agreement with EasySoft Tech S.L. (see section 5) |
Wealth Reader's sub-processors
| Sub-processor | What it does | Location | Safeguard |
|---|---|---|---|
| Google Cloud | Hosting of Wealth Reader's infrastructure | European Economic Area regions (Madrid, Spain) | Processing within the European Economic Area |
| Google LLC and its affiliates | Maintenance and support of that infrastructure, with possible remote access | United States and other countries | Towards the United States, the EU-US Data Privacy Framework |
Wealth Reader also acts as an independent controller for its regulated core: its contract with the account holder, the safekeeping of bank credentials, the consent given on its screen, and its obligations towards the Bank of Spain and on anti-money laundering. That part is not part of the processing agreement and is governed by its own privacy policy.
EasySoft Tech S.L. has not authorised any artificial intelligence provider in this chain.
2. Infrastructure and communications
They do not access bank content in the ordinary course of the service, but they are part of the chain.
| Sub-processor | What it does | Location | Safeguard |
|---|---|---|---|
| Contabo GmbH Munich (Germany) |
Hosting of the application and the database | Germany | Processing within the European Union |
| Dinahosting SL Spain · data centre in Madrid |
Email: the service's notifications and the [email protected] mailbox. Its data centre is provided by Aire Networks del Mediterráneo SLU (Madrid), ISO 27001 certified | Spain | Processing within the European Union |
| Cloudflare, Inc. United States |
Domain name resolution (DNS) and the network through which the traffic of the easybankdata.com domain passes | Global network | Its data processing agreement, with the mechanisms of Chapter V GDPR for transfers outside the European Economic Area |
About payments. Subscriptions are charged by card through Redsys, which is involved through our bank. Redsys does not act as our sub-processor: it processes the transaction data as an independent controller, in compliance with its own payment services obligations. Your card details are typed directly on its page and we never see them: we only keep the brand, the last four digits, the expiry date and the reference that lets us charge each period.
About analytics. The site does not use analytics today. If we add it, it will be Umami, hosted on a server owned by EasySoft Tech S.L. (analytics.easysoft.es) and without cookies, so it will not add any third party to this list.
3. International transfers
The data is hosted within the European Economic Area: the application in Germany; Wealth Reader's infrastructure on Google Cloud, in European Economic Area regions (Madrid, Spain). Data may leave the European Economic Area in two cases:
- Remote access by Google LLC (United States) and its affiliates for the maintenance and support of Wealth Reader's infrastructure. Towards the United States it is covered by the EU-US Data Privacy Framework, under which Google LLC is certified.
- Cloudflare's network, through which the domain's traffic passes, under its data processing agreement.
EasySoft Tech S.L. is not a party to the agreements between Wealth Reader and its providers. What we do is require, through the chain, that those transfers rely on one of the mechanisms of Chapter V GDPR, and check that Google LLC's certification remains valid.
4. Advance notice
Before adding a sub-processor or replacing one on this list, we will notify customers 30 calendar days in advance and also publish it on this page. During that period you may object to the change on reasonable grounds; if we cannot find a solution, you may cancel without penalty.
When the change is made by a sub-processor within its own chain (for example, Wealth Reader with its providers), we depend on the notice it gives us. In those cases we will pass it on to you as soon as we receive it, with whatever time we have. We would rather say so than promise a period that is not in our hands.
5. Processing agreements
This is the status of each agreement as of today. We keep it up to date rather than taking it for granted:
| Sub-processor | Processing agreement |
|---|---|
| Wealth Reader, S.L. | In force: Annex I of the framework contract between Wealth Reader and ONNA Digital. EasySoft Tech S.L. is not a party to that contract. |
| ONNA Digital | In preparation |
| Contabo GmbH | In force |
| Dinahosting SL | In force: clause 7 of its general terms |
| Cloudflare, Inc. | Cloudflare's data processing agreement, incorporated into its terms of service |
They are agreements between EasySoft Tech S.L. (or, in Wealth Reader's case, ONNA Digital) and each provider, so they are not published.
If you need to sign a processing agreement with us, write to [email protected].
6. Change history
| Date | Change |
|---|---|
| 26/09/2026 | Initial publication of the named list of sub-processors. |
7. Contact
For any question about this list or about the processing agreements, or to exercise your data protection rights: [email protected].