COMPLIANCE · DATA PROTECTION

Subprocessors

List of GBCORP sub-processors that may process Customer personal data on our behalf.

Effective 1 June 2026 · Centrally managed across the GBCORP network

This page lists the sub-processors GBCORP engages to deliver Covered Services where GBCORP processes personal data on a Customer's behalf. Sub-processors are bound by data-protection obligations no less protective than those agreed with the Customer under the Data Processing Agreement.

1) Notification of Changes

GBCORP will give at least 30 days' prior notice of any change to this list (additions or replacements) by email to the Customer's nominated data-protection contact and by updating this page. The notice period gives the Customer time to raise reasonable, data-protection-based objections under the DPA.

2) Current Sub-processors

Infrastructure & Hosting

Amazon Web Services, Inc. — cloud hosting and storage — United States, European Union (Customer can request EU-only region)
Google Cloud Platform (Google LLC) — cloud hosting and AI inference infrastructure — United States, European Union
Cloudflare, Inc. — content delivery, DNS, DDoS protection, edge security — Global edge network
GoDaddy.com, LLC — domain registration and WordPress hosting for gbcorp.org core site — United States

Productivity & Communication

Google LLC (Google Workspace) — email, calendaring, documents — United States, European Union
Apple iCloud (Apple Inc.) — custom-domain email for gbcorp.org — United States

Payments & Commerce

Stripe Payments Europe Ltd / Stripe, Inc. — card processing for international payments — United States, Ireland
PayPal Holdings, Inc. — alternative card and wallet processing — United States, Luxembourg
Razorpay Software Pvt. Ltd. — payment processing for Indian transactions — India

Analytics & Monitoring

Google Analytics (Google LLC) — website analytics — United States, European Union
Cloudflare Web Analytics (Cloudflare, Inc.) — privacy-preserving website analytics — Global
Firebase (Google LLC) — mobile-app analytics, crash reporting, and hosting for selected GBCORP applications — United States

Customer Support

Zendesk Inc. — support-ticket system for selected GBCORP services — United States, European Union

Development & Operations

GitHub, Inc. — source-code hosting and CI/CD — United States
Microsoft Azure (Microsoft Corporation) — limited DevOps tooling for enterprise engagements — Global

3) Right to Object

Customers may object to a new or replacement sub-processor on reasonable data-protection grounds by emailing [email protected] within the 30-day notice period. We will engage with you in good faith to address concerns; if no agreement is reached, the Customer may terminate the affected Service per the DPA.