Data processing, providers and international transfers
A public summary of the service providers used by the website and Portal, separate from infrastructure controlled by an Agent owner.
Three separate environments
- Public website: contact forms, technical access information and consent-based marketing measurement.
- Banalytics Portal: account, billing, licensing, sharing and connection-signalling metadata.
- Agent infrastructure: equipment configuration, credentials, recordings, telemetry, local analytics, files and operational rules controlled by the Agent owner.
Banalytics is the controller for the website and Portal processing described in the Privacy Policy. Banalytics is not automatically the controller or processor of data stored and used independently on an Agent. A different role may apply when a signed pilot or Enterprise contract includes managed hosting, remote support or another service that requires Banalytics to process customer personal data.
Website and Portal provider register
| Provider | Service boundary | Purpose | Transfer note |
|---|---|---|---|
| Google Cloud Platform | Portal | Portal hosting in the selected EU North region | EU hosting is selected; provider terms and any support access must still be reviewed |
| Stripe | Portal payment flow | Checkout, invoices and payment processing | Stripe may process payment and billing data in multiple jurisdictions |
| Google reCAPTCHA | Public website forms | Abuse and spam prevention | Browser and network information may be processed outside the EEA |
| Google Tag Manager | Public marketing site only | Consent-based analytics and marketing tag management | Disabled until Marketing consent and when GPC/DNT is active |
| Reddit Pixel | Public marketing site only | Consent-based campaign and visit measurement | Disabled until Marketing consent and when GPC/DNT is active |
| HubSpot | Requested newsletter flow | Newsletter subscription and preference | Used only when a visitor requests subscription |
| Iubenda | Public website | Cookie policy and privacy-preference controls | Processes the browser requests required to provide those controls |
Contract and transfer review
A provider may process data outside the European Economic Area even when the primary service region is in the EU. Before relying on a provider for a production pilot, Banalytics reviews the provider’s published data-processing terms, processing locations, subprocessors and offered transfer mechanism, including Standard Contractual Clauses where applicable.
Banalytics is formalising a central supplier-contract and transfer register. Until a deployment-specific review is complete, this page must not be read as a representation that every optional service is approved for every customer, data category or regulated use case.
Services configured on an Agent
An Agent owner may add Gemini, Cesium, Mapbox, Telegram, e-mail, databases, brokers, custom modules and other external services using the owner’s own account and credentials. Those transfers are initiated from infrastructure controlled by the owner and follow the owner’s configuration and the third party’s terms. They are not Portal subprocessors merely because an optional connector is available.
If Banalytics is asked to design, host or operate an integration under a written contract, the parties will document the resulting roles, data flow, providers and safeguards in that contract and, where applicable, the Data Processing Addendum.
Last updated: 23 July 2026.