GalaciaData location and providers
Identify each service in your configuration, where data is stored and which organisations can process it. Discuss residency and transfer requirements before onboarding.
Security and trust
Understand the data. Agree the controls.
Review website data handling separately from the Salesforce and cloud storage configuration agreed for your organisation.
Your Vault configuration
Files use customer-owned Amazon S3 storage for the current assisted setup. Region, access, retention, recovery and provider charges depend on your agreed configuration.
Galacia handles installation, API connections, bucket configuration and testing. Confirm access with both permitted and restricted users before rollout.
Read Vault storage responsibilitiesThis website and your account
The website handles enquiries and optional company accounts. It does not accept Salesforce files or storage credentials.
Account features use essential sign-in cookies. Public pages contain no analytics or advertising scripts. Demo requests are stored privately and sent to the owner through Discord.
Read privacy and cookie informationQuestions for a security review
Access and credentials
Agree Salesforce access, storage permissions, who owns credentials and how access is revoked. Use an agreed secure channel for setup secrets.
Recovery and retention
Agree backup ownership, recovery checks, retention settings and deletion. Customer-owned storage still needs a documented operating plan.
Evidence and contracts
Share required questionnaires, contract clauses or assurance evidence. Certifications and audit reports are not published here. See the support window and first-response target; any contractual service-level agreement needs separate agreement.
Report a security concern
Email hello@galacia.app with the affected URL or product, when you noticed the issue and safe steps to reproduce it.
Do not include passwords, tokens, customer files or unnecessary personal information. If sensitive evidence is needed, ask for a suitable transfer route first.