Kalix

What is Kalix?

Kalix is a serverless Platform-as-a-Service (PaaS) developed by Lightbend, the company behind the Akka framework. Originally launched as Akka Serverless, Kalix provides a fully managed cloud-native application platform designed for building stateful microservices, event-driven APIs, and distributed backend systems. Developers can deploy production-grade services without provisioning or managing servers, databases, or messaging infrastructure. Kalix handles persistence, caching, service mesh, and API gateway capabilities natively, significantly reducing operational overhead.

Does Kalix Set Cookies or Track End Users?

Kalix is backend infrastructure and does not inject any client-side scripts, tracking pixels, or cookies into the browsers of visitors to your website. Unlike advertising networks or analytics platforms, Kalix operates entirely at the server layer. No JavaScript SDK is loaded in end-user browsers as part of using Kalix as a hosting provider. This means that integrating Kalix for your application backend has no direct impact on your cookie banner or ePrivacy consent flows for end users.

GDPR Legal Basis and Data Processing Agreement

When you use Kalix to host an application that processes personal data of EU residents, Lightbend acts as a data processor on your behalf under GDPR Article 28. You must therefore enter into a Data Processing Agreement (DPA) with Lightbend before using Kalix for any processing involving personal data. The legal basis for the hosting itself is typically legitimate interest (Art. 6(1)(f)) or performance of a contract (Art. 6(1)(b)), depending on your service context. No end-user consent is required for the infrastructure hosting function.

International Data Transfers to the United States

Kalix infrastructure runs on cloud providers including Google Cloud Platform, which operates data centres in the United States and other countries outside the European Economic Area. This constitutes a third-country transfer under GDPR Chapter V. Lightbend relies on Standard Contractual Clauses (SCCs) as the transfer mechanism. As a data controller, you must document these transfers in your Records of Processing Activities (RoPA) and ensure that Lightbend's SCCs are current and adequate. Review Lightbend's privacy documentation and sub-processor list regularly.

ePrivacy Directive Applicability

The ePrivacy Directive (2002/58/EC) applies to the storage of information on, or access to information from, a user's terminal equipment. Since Kalix does not place any cookies or similar technologies on end-user devices, the ePrivacy Directive is not directly triggered by the use of Kalix as a backend hosting platform. Your existing cookie policy and consent management does not need to list Kalix as a technology that interacts with end-user devices.

Practical Compliance Steps for European Publishers

To comply with GDPR when using Kalix, complete the following steps: sign a Data Processing Agreement with Lightbend, document the Kalix relationship in your RoPA including the nature of data processed and the US transfer mechanism, verify that SCCs are in place and conduct a Transfer Impact Assessment if processing high-risk personal data, and review Lightbend's sub-processor list periodically. Update your privacy policy to disclose that backend infrastructure is hosted on Kalix/Lightbend with data potentially processed in the US. No changes to your cookie banner are required specifically for Kalix.