Fraudulent sites are impersonating Global Ledger
How to stay safe
Skip to content

Global Ledger
Subprocessor List

Global Ledger: GLO Services AG, Grafenauweg 8, 6300 Zug, Switzerland.

Document version: 12.10.2026

This list identifies providers that process Customer Personal Data on Global Ledger’s behalf under Section 6.4 and Schedule B of the Master Subscription Agreement. A provider is engaged only for the Services and features used under the relevant Order.

Subprocessor

Function

Processing and access countries; transfer safeguard

Hetzner Online GmbH
Industriestr. 25, 91710 Gunzenhausen, Germany

server hosting and database storage of the platform (customer user accounts, case data, logs)

Germany, Finland

Swiss adequacy; no additional transfer safeguards required.

OVH SAS
2 rue Kellermann, 59100 Roubaix, France

server hosting, blockchain nodes, backups and standby databases

France, Poland

Swiss adequacy; no additional transfer safeguards required.

Amazon Web Services EMEA SARL
38 Avenue John F. Kennedy, L-1855 Luxembourg

S3 storage of generated PDF reports (no personal data by design)

EU (Ireland)

Swiss adequacy; no additional transfer safeguards required.

Google Cloud EMEA Limited
70 Sir John Rogerson’s Quay, Dublin 2, Ireland

transactional e-mail delivery to customer users

EU/global Google infrastructure

Google Cloud DPA incl. SCCs/EU-US DPF.

OpenAI Ireland Ltd.
1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland

AI-assisted analysis, only if the AI features are enabled for the customer (disabled by default); no personal data sent by design

EU entity, processing may occur in the US

OpenAI DPA incl. SCCs / DPF.

For the EEA countries identified above, an adequate level of protection is recognised under Swiss data protection law; no additional transfer safeguards are required under that law for disclosure to those countries. International transfers and remote access remain subject to applicable data protection law, including any required safeguards and supplementary measures.

Global Ledger personnel access. Personnel acting under Global Ledger’s direct authority currently access Customer Personal Data from Switzerland and Spain to operate, support and secure the Services. Any third party engaged to process Customer Personal Data on Global Ledger’s behalf must be identified as a subprocessor.

Changes. Global Ledger shall give advance notice of subprocessor additions and replacements under Section 6.4. Changes to processing or access countries are governed by Schedule B.6 and require advance notice only to the extent required by applicable law or the Order. Earlier versions are available to Customer on request.