GPLv3 fully-offline desktop password manager (KeePassXC Team, Weimar DE, est. 2016) — no cloud, no servers, no telemetry; structurally zero CLOUD Act exposure.
- FROM
- —
- CLOUD ACT
- NONE
Zusammenfassung aus Eigentümerschaft und CLOUD-Act-Risiko.
German-hosted business password manager from LC by vBoxx GmbH; collections, group sharing, central management, unlimited devices; an EU-hosted 1Password / LastPass alternative.
LC-Pass aus der Kategorie Passwort-Manager ist ein EU-eigener Dienst mit Germany als Hosting-Standort und ohne erkennbares CLOUD-Act-Risiko.
LC-Pass is the business password manager in the leitzcloud suite, operated by LC by vBoxx GmbH (Frankfurt am Main, HRB 117087; part of the Dutch vBoxx group). It stores and shares credentials, credit-card data, and other secrets for teams, with collections, group sharing and per-item rights, central management and reporting, and unlimited items, devices, and synchronisation. Data is stored in two georedundant German locations on the operator's own infrastructure, ISO/TÜV-certified and DSGVO-oriented, with zero-knowledge encryption per the vendor — EU-owned, EU-hosted, no CLOUD Act exposure. It is positioned as a German-hosted alternative to 1Password / LastPass for organisations that want credential management inside EU infrastructure. The vendor supplied an AVV (DPA + sub-processors + data-residency) on request; no public DPA URL is the documentation gap.
Wie stark Kundendaten US-Behörden nach dem CLOUD Act ausgesetzt sind.
Wo die letztliche Kontrolle über das Betreiberunternehmen liegt.
LC-Pass is the credential-management component of the leitzcloud suite, operated by LC by vBoxx GmbH (Frankfurt am Main; part of the Dutch vBoxx group). It lets organisations securely store, manage, and share passwords, credit-card details, and other sensitive data, organised into collections with group-based sharing and per-item rights, plus central management and reporting for administrators and unlimited items, devices, and synchronisation. The positioning is a German-hosted alternative to 1Password and LastPass for teams that want their secrets held inside EU infrastructure rather than with a US-based provider.
Data is stored across two georedundant German locations on the group's own infrastructure, ISO/TÜV-certified and DSGVO-oriented, with zero-knowledge encryption stated by the vendor — an EU-owned, EU-hosted, no-CLOUD-Act-exposure posture. The vendor provided an AVV (DPA, sub-processor list, data-residency statement) on request in June 2026; it is not yet published at a public URL, which is the remaining transparency gap. Best fit: DACH SMBs and public-sector-adjacent teams already using or considering leitzcloud who want team credential management under the same German operator and data residency.
GPLv3 fully-offline desktop password manager (KeePassXC Team, Weimar DE, est. 2016) — no cloud, no servers, no telemetry; structurally zero CLOUD Act exposure.
Lithuanian password manager by Nord Security, zero-knowledge XChaCha20, ISO 27001 + SOC 2 — but hosted on AWS (US): material CLOUD Act exposure.
German AGPLv3 open-source password manager (MaKleSoft, Bavaria), audited 3×, self-hostable — but hosted cloud uses Stripe + defunct Privacy Shield ref.