• bunq on AWS

So I recently noticed that bunq is moving all of their services to AWS (iDEAL, App, bunq.me).

Should I be worried about my privacy since AWS is a US based company?

    Hey Jelle,


    We moved a part of our services towards AWS to help cope with the DDoS attacks we had this week, as we don't want bunqers to experience issues with attacks like that.

    No need to worry, AWS has been approved by DNB (central bank) to handle sensitive data. Also, AWS Europe is fully based in Europe, your data will stay right here 👍 Of course, bunq will remain encrypting all data!

    We understand that a lot of bunqers would like to know more about this move to AWS. That is why we will write a blogpost about it, explaining everything 😄

      Completely safe. Just like with Google, Amazon stock would drop drastically if data is not kept safely.

        Hey Koen,

        I can't wait for this blog post. Why not stay with TransIP? Also I am a big fan of amazon, but I am worried about moving data to AWS even through its certified for financial institutions. I would much more like the data to say at the company that is also run by the bunq CEO. Also AWS must be much more expensive I think.

          Don't let AWS Scare you just because it is an Amazon service :)

          Many huge company's use AWS such as Netflix, Spotify, airbnb and iCloud if 'm not mistaking.

          As long as Bunq does not use a Google datacenter you should be OK.

            Yes Apple uses AWS for many of its services (iCloud, App Store downloads, sw updates, etc), though they're also building their own data centers... and not many people now this but bunq is not the only bank (in the NLD & the EU) that runs part of its service on AWS. As for the reasons why bunq would not stay on its own founders servers at TransIP, they are after all in some part all the same company, and secure those better escapes me. Maybe Ali can explain in that blog post they promised us

              Why do you believe that the US doesn't already have full details of every transfer you make? Unless you are finding a known terrorist group or a US person they have little interest in you. If you want real privacy you need something outside conventional banking.


              AWS is perfectly safe. Bunq's biggest cool on-line competitor is on AWS.

                10 days later

                When is this blogpost being published?

                  Je hoeft niet groot te zijn om AWS (Europe) te gebruiken ;-)

                    Just a small nuance. The DNB 'approval' only means that they have an agreement with AWS regarding 'right to examine for DNB'. So that DNB can oversee the whole outsourcing. Still, the customer (financial institution) has to ask AWS for this addendum herself. How safe AWS really is, also dependents on bunq. But magic words like encryption helps :).. And hopefully bunq does manage encryption keys by themselves.

                      5 days later

                      Why not to Azure instead of AWS? At least then the services and data stay in a datacenter in the Netherlands...

                        I somewhat doubt if MS don't have the same safety level... what would be the significant difference?

                          I am curious about that blog post 👍

                            Azure has tons of issues and is really not that stable in multiple regards.

                              I've used Azure. Seriously, it's not production ready. It's the cloud of choice of those who don't have a choice. AWS is a far better bet.

                                a month later

                                Hi Koen,


                                Any idea when the blogpost will be published?

                                  Ofwel: de VS kan bij je bunq transacties. Leuk dat er “encryption” geroepen wordt - maar als je iets wilt doen met data (zoals zoeken naar transacties) zul je toch echt moeten decrypten dus die sleutel hangt vast ook ergens in AWS. Lijkt me stug namelijk dag ze AWS alleen als (cold) storage gebruiken.


                                  https://www.topsec.com/it-security-news-and-info/what-is-the-patriot-act-and-how-does-it-affect-europe

                                    Ja, maar Amazon heeft niet de specifieke sleutel van Bunq klanten. Dus maak je niet bang! En als het goed is worden de gegevens van iedere klant met een aparte sleutel verlseuteld, dus alleen Bunq kan die hebben lijkt me.. Wie weet kan Ali ons meer vertellen?

                                      Volgens mij doen we nu allemaal allerlei aannames en weet alleen bunq hoe het echt zit. En ik gok dat bunq daar weinig nadere toelichting op gaat geven :)...

                                      Tot op zekere hoogte is het wat mij betreft ook kwestie van vertrouwen. En als er een bank is die ik het meeste mijn geld toevertrouw, dan is dat bunq wel.