Is GlobalPass a data controller or data processor?

Compliance is the responsibility of the client using GlobalPass services. All the rules and regulations should be considered by the clients, GlobalPass can only provide recommendations for setup. 

GlobalPass is a data processor and its clients are data controllers. You as a client responsible for any changes and setting rules on how to proceed with user data.