Subprocessors
The providers that process personal data for Galla. Owners are told 30 days before one is added.
Earlier version, in force from Thursday, October 15, 2026. Read the version in force
These texts are drafts until a lawyer has reviewed them; the bracketed details are filled in before launch.
Google Cloud (Google Cloud EMEA Ltd, Ireland)
- What: hosting of the application, the database, files, backups, secrets, logs and monitoring.
- Where: European Union (Belgium; backups in the Netherlands).
Firebase Authentication with Identity Platform (Google Cloud EMEA Ltd, Ireland)
- What: staff sign-in accounts (name, email address, password hash).
- Where: Google’s global infrastructure, under the standard contractual clauses.
Postmark (ActiveCampaign LLC, United States)
- What: sending emails (invitations, reminders, account and billing emails).
- Where: United States, under the standard contractual clauses.
Stripe (Stripe Payments Europe Ltd, Ireland)
- What: subscription billing, and card payments for tickets on an organization’s own Stripe account.
- Where: European Union and United States, under the standard contractual clauses.