Leadership
A single interlocutor
One technology conversation instead of several vendors coordinated by hand.
Hulahoop, the platform moving investor capital into culture. And once it is authorised, DORA applies to them too.
What the CNMV and investors will ask of a crowdfunding platform, and how it can serve more clients without standing up a new technical department.
Prepared for Hulahoop Media
The challenge
Three business lines, a small team and a regulator on the way.
What it costs Hulahoop today
- Preparing the CNMV licence while Pro Tax keeps growing
- Digital operational resilience (DORA) required from authorisation
- KYC, AML and GDPR on retail investor data
- Critical third-party integrations: payments, signature and identity
- The same due diligence questions in every round
- Choosing between moving the product or securing what exists
Road to the licence
From CNMV authorisation to launch. With DORA already in force.
The dates that set when the platform has to be ready and what is required of it from the first investor.
10 Nov 2023
Transitional period ends
Since then, crowdfunding in the EU can only be provided with authorisation.
Delegated Regulation (EU) 2022/1988
17 Jan 2025
DORA applies
It covers authorised crowdfunding service providers.
Regulation (EU) 2022/2554, arts. 2.1.s and 64
2026
CNMV licence in progress
The platform seeks authorisation while Services and Pro Tax already operate.
Alhambra Venture
Q1 2027
Platform launch
First investors and producers, with DORA enforceable from day one.
Alhambra Venture
2028
Italy, France and Germany
ECSP authorisation allows the service in other Member States.
Alhambra Venture · Regulation (EU) 2020/1503, art. 18
What we propose
One technology partner for its three lines at once.
A single interlocutor answers leadership, investors and the technical team.
Investors
Evidence ready
Technical reports for each round, without rebuilding them every time someone asks.
Technical team
Capacity that adds
Reinforcement in security, resilience and compliance, without replacing the in-house team.
Expected impact
More clients served with the same team.
What changes when security, resilience and due diligence stop consuming the team.
×1.9
clients it can serve by the end of the period, versus staying without a partner
−23 pts
of technical time going back to product and clients
6 → 1
technical areas, a single interlocutor
Illustrative scenario, not a forecast. Index 100 = clients it can serve at platform launch. Assumption: freed time goes back to product and sales.
Its market
A sector going digital and competitors already moving.
What public sources show about the sector and its competitors.
120%
of the contribution the investor can deduct under the art. 39.7 LIS contract
Horizonte360
DORA
applies to authorised crowdfunding service providers (art. 2.1.s)
CNMV
2028
Hulahoop's planned expansion to Italy, France and Germany
Alhambra Venture
Who it is compared with
- Incentiva Music (SFTL)Cultural tax deductions for music and live arts
- YunitFilm and music financing through tax deductions
- Horizonte360Cultural tax equity marketplace
- DefilmBlockchain film investment with a CAMA account per project
- FilmChainAutomated collection and split of audiovisual revenue
Of the competitors reviewed, none combines services, SaaS and a regulated platform. That breadth is Hulahoop's edge, and also its technical surface.
Benefits and advantages
What Hulahoop gains from the first quarter.
01
A smoother licence
Technical evidence organised for the CNMV file.
02
DORA from day one
ICT risk, incidents and critical vendors, documented.
03
Faster rounds
An audit report ready for every due diligence.
04
Scale without tech debt
Infrastructure ready for more investors and producers.
05
A single partner
One relationship covers Services, Pro Tax and the platform.
06
A product-focused team
Technical time goes back to clients and roadmap.
Three ways to cover it
| In-house hire | Several vendors | Globodain as partner | |
|---|---|---|---|
| Getting started | Months of hiring | Weeks per vendor | From the diagnosis |
| Interlocutors | One, with gaps | One per area | One, for everything |
| Cost | Fixed and high | Scattered | Predictable |
| Overall view | Depends on the hire | Fragmented | Complete |
| Evidence for investors | To be built | Separately | In one report |
How we would solve it
A continuous rhythm, not a project with an end date.
Each turn leaves evidence and sets the priority of the next.
Phase 01
Diagnosis
Security, access, data, infrastructure, code and integrations.
Phase 02
Audit
A report leadership, investors and the CNMV can read.
Phase 03
Implementation
We fix things alongside its team, without replacing it.
Phase 04
Vigilance
Early warning when something requires moving the roadmap.
Why Globodain
Capabilities that apply to a regulated platform like this one.
01
Cybersecurity
Security and access on a platform holding third-party capital.
02
Technical audit
Data and privacy, CI/CD, integrations, infrastructure and code.
03
Compliance
A technical reading of ECSP, DORA and GDPR on its stack.
04
Cloud and DevOps
GCP infrastructure ready to grow without tech debt.
05
Integrations
Payments, signature and identity, securely connected.
06
Vigilance
Early warning of regulatory changes that affect the business.
Scope note: the mention of regulated environments describes applicable capabilities, not an accredited track record in crowdfunding.
Scope and limits
So it is clear from day one.
What we bring
- Technical audit, implementation and continuous vigilance
- A report with findings and priorities
- A stable interlocutor, not a one-off vendor
What we do not do
- We do not certify regulatory compliance
- We do not issue certificates or seals to third parties
- We do not replace legal advice: we complement it
Certifications and legal advice belong to authorised third parties. We provide technology support: audit, implementation and vigilance.
Does your case look like Hulahoop's? Let's analyse it.
This case was built from public sources. If yours looks similar, Rubén Ayuso will analyse it with you and prepare one for you. If you are part of Hulahoop Media, that includes you.
Use case prepared by Globodain Technology Corporation from public sources, without Hulahoop Media's involvement. Not a contract: figures and scenarios are indicative.
