Zum Inhalt springen
EU VETTED

GoCardless

Gegründet 2011 · gocardless.com

London-based UK direct-debit and recurring-payments specialist (FCA-authorised); Mollie acquisition announced Dec 2025.

GoCardless bietet EU-Hosting in dem Vereinigten Königreich, doch ein US-Mutterkonzern oder Unterauftragsverarbeiter hinterlässt ein materielles CLOUD-Act-Risiko. Gelistet unter Zahlungen.

Bewertungsnotizen

GoCardless Ltd (Sutton Yard, 65 Goswell Road, London EC1V 7EN; Companies House 07495895) is the UK direct-debit-and-recurring-payments specialist, FCA-authorised under the Payment Services Regulations 2017 (597190), but in December 2025 Dutch Mollie announced an acquisition agreement valuing the company at ~US$1.1B, the deal subject to regulatory approval and still not closed at the August 2026 re-verification, so the immediate ownership state is in transition; UK post-Brexit jurisdiction plus a historical cap-table mix (Permira UK + BlackRock US + Accel US + Balderton UK) results in cloud_act_exposure: material and ownership_signal: other (transition pending Mollie acquisition close); there is no self-serve DPA, though a versioned sub-processor list naming 23 suppliers is published.

Befund

CLOUD Act
Eigentümer
Unterauftragsverarbeiter
23 · 17 US

Geprüfte Signale

Jurisdiktion
  • EU-/Angemessenheits-Hosting: Ja
  • EU-/Angemessenheits-Betreiber: Ja
  • Keine US-CLOUD-Act-Exposition: Nein
Transparenz
  • Öffentlicher AVV: Nein
  • Unterauftragsverarbeiter offengelegt: Ja
  • Open-Source-Clients: Nein
  • Zertifizierung durch Dritte: Nein
Springen zu

Über GoCardless

GoCardless is a London-headquartered UK payments platform specialising in direct debit and recurring payments, operated by GoCardless Ltd (Sutton Yard, 65 Goswell Road, London EC1V 7EN; Companies House 07495895). Founded in 2011 by Hiroki Takeuchi, Tom Blomfield, and Matt Robinson, the company is authorised by the UK's Financial Conduct Authority under the Payment Services Regulations 2017 (registration 597190) and supports a uniquely broad set of bank-to-bank schemes: Bacs (UK), SEPA Direct Debit (Eurozone), ACH (US), BECS (Australia and New Zealand), PAD (Canada), Autogiro (Sweden), and Betalingsservice (Denmark). The product is positioned as the direct-debit-and-recurring-payments alternative to Stripe/PayPal, particularly strong for subscription SaaS, B2B invoicing, charities, and any business with predictable recurring billing.

Two ownership signals matter for an EU-sovereignty audit at this time. First, the historical cap table includes Permira (UK), BlackRock (US), Accel (US), and Balderton (UK) alongside other backers: mixed-jurisdiction with material US-VC exposure that, on its own, would place GoCardless in the eu_hq_us_funded-equivalent UK band. Second, and more importantly, in December 2025 Dutch Mollie announced an agreement to acquire GoCardless for approximately US$1.1B, over 90% in Mollie shares. The deal has not closed: GoCardless's own customer FAQ still describes completion as expected in mid-2026 subject to regulatory approvals, and no completion announcement existed at the August 2026 re-verification. If the acquisition closes as announced, GoCardless will become a subsidiary of Mollie B.V. (Amsterdam, DNB-licensed EMI), shifting the primary regulatory anchor from FCA to a Dutch parent, though Mollie itself carries a US-funded cap table (TCV, General Atlantic, Blackstone, Alkeon; see Mollie's listing). Ownership signals remain in transition pending acquisition close: cloud_act_exposure: material, and no self-serve DPA, though a sub-processor list is published as a versioned PDF ("GoCardless material supplier list v2026.06", accurate as of 12 June 2026) naming 23 suppliers, among them Google Cloud, AWS, Cloudflare, Segment, Okta, Zendesk, SendGrid and LexisNexis on the US side.

Pricing in GBP is volume-tiered: Standard 1% + £0.20 (capped at £4 domestic UK), Advanced 1.25% + £0.20 (capped £5, with auto failed-payment recovery), Pro 1.4% + £0.20 (capped £5.60, with fraud protection), and Custom for >£1M annual volume. International payments run on the Wise mid-market FX engine and carry an extra 0.3% on amounts over £2,000. Branding add-ons: £50/month for bank-statement branding, £150/month for fully customised checkout. Best fit: UK and EU subscription SaaS, mid-market B2B invoicing, NGOs and membership organisations collecting recurring direct debits across multiple jurisdictions. EU procurement-grade buyers needing strict EU-controlled ownership should re-evaluate after the Mollie acquisition closes or use Mollie directly for cards/iDEAL/SEPA workflows.

Unterauftragsverarbeiter-Karte · 23

Quelle
  • Amazon Web Services US
    Vereinigte Staaten

    File storage and scale computing (data location: EU-West region)

  • Braze US
    Vereinigte Staaten

    Sending operational emails

  • Celigo US
    Vereinigte Staaten

    Partner connection, NetSuite integration (data location: Germany)

  • Cloudflare US
    Vereinigte Staaten

    Optimisation and protection of the GoCardless website and API

  • Dun & Bradstreet US
    Vereinigte Staaten

    Company credit scoring and identity verification

  • Finastra Limited US
    Vereinigtes Königreich

    Direct debit scheme provider software (Bacs)

  • GitHub US
    Vereinigte Staaten

    Software development

  • Google US
    Vereinigte Staaten

    Hosting the GoCardless Service on Google Cloud Platform and other cloud services (data location: Netherlands)

  • LexisNexis Risk Solutions US
    Vereinigte Staaten

    Background and AML checks, fraud prevention

  • Looker US
    Vereinigte Staaten

    Data platform and analytics

  • Mastercard Payment Services US
    Dänemark

    Payment scheme operator, chargeback processing (Betalingsservice)

  • Okta US
    Vereinigte Staaten

    Employee access management and merchant authentication (2FA)

  • Provenir US
    Vereinigte Staaten

    Credit decisioning

  • Segment US
    Vereinigte Staaten

    Anonymous online event tracking and analytics

  • SendGrid US
    Vereinigte Staaten

    Sending transactional emails

  • Zendesk US
    Vereinigte Staaten

    Support ticketing software

  • Flagright non-US
    Vereinigtes Königreich

    Payment screening and monitoring

  • Form3 non-US
    Vereinigtes Königreich

    Direct debit scheme provider software (Bacs)

  • Onfido non-US
    Vereinigtes Königreich

    Identity verification

  • Pure JAM non-US
    Vereinigtes Königreich

    Support telephony service

  • Trulioo non-US
    Kanada

    Identity verification

  • Vonage US
    Vereinigte Staaten

    Support telephony service

  • Wise non-US
    Vereinigtes Königreich

    FX services

Quelle: veröffentlichte Unterauftragsverarbeiter-Liste des Anbieters, gelesen am 26 Aug 2026.

17 von 23 Unterauftragsverarbeitern sind in US-Eigentum oder haben ihren Sitz in den USA. CLOUD-Act-Risiko anwendbar.

Rahmenwerke & Zertifizierungen · keine gelistet

Wir haben die Website des Anbieters und die Register der Zertifizierungsstellen geprüft. Keine aktiven Zertifizierungen gefunden zum Zeitpunkt der letzten Prüfung (2026-08-26).

Funktionsmatrix

Tabelle 2Funktionen von GoCardless

Kartenzahlung Nein
SEPA-Lastschrift Ja
Buy now, pay later Nein
Open Banking (A2A) Ja
Abos / Wiederkehrend Ja
Payment-Links Ja
Vor Ort / POS Nein
Marktplatz / Split Nein

Integration & Zugriff

REST API Ja
SSO (SAML / OIDC) Ja

Compliance & Governance

Audit log Ja
Self-host / on-prem option Nein

Preise & Tarife

Individuelle Preise

Kontaktieren Sie den Anbieter für Staffel- oder Mengenpreise.

Preisseite ansehen

Öffentliche Dokumente

Anbieter veröffentlicht keinen öffentlichen AVV. Ohne öffentlich zugänglichen Auftragsverarbeitungsvertrag können kleine EU-Kunden den Verarbeitervertrag nicht selbst abschließen. Dies wird als fehlender öffentlicher AVV vermerkt (siehe So prüfen wir).
  • Auftragsverarbeitungsvertrag (AVV)
    — fehlt
    fehlt
  • Liste der Unterauftragsverarbeiter
    gocardless.com/privacy…
    Öffnen

Alternativen in dieser Kategorie

  • Adyen
    Niederlande
    EU-gehostet
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
  • Alma
    Frankreich
    EU-gehostet
    Öffentl. AVV: Nein Subprozessoren: Nein Open Source: Nein
  • Dintero
    Norwegen
    EU-ansässig
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
Alle zahlungen-Alternativen ansehen