Zum Inhalt springen
Unabhängig verifiziert · Quartalsweises Re-Audit
EU VETTED

Prismic

VERIFIZIERT
Headless CMS · France
Founded 2013 · prismic.io ↗

Paris headless CMS / page-builder (founded 2013); Slice Machine + Next.js / Nuxt / SvelteKit focus; from €7/mo.

Warum diese Bewertung?

Prismic (Paris FR, founded 2013) is a developer-and-marketer-focused headless CMS with Slice Machine + visual page-builder differentiator; cap table is European-leaning (Notion Capital UK with US participation in earlier rounds) without identified US-PE majority — ownership_signal: eu_owned; no explicit ISO 27001 / SOC 2 attestation on marketing site caps score at 3/5.

SCORE
3.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
JUMP TO
OVERVIEW

About Prismic

**Prismic** (Paris, France, founded 2013) is a developer-and-marketer-focused headless CMS with a distinctive **Slice Machine** + **Page Builder** approach — slices are reusable content components that bridge dev / marketer workflows in a way most pure-API CMSs don't. Strong fit for **Next.js, Nuxt, SvelteKit** projects. Free tier available; paid tiers from ~€7/mo. Cap table is mostly European with US participation in earlier rounds (Notion Capital UK et al), no identified US-PE majority — placing Prismic in `ownership_signal: eu_owned`. No public ISO 27001 or SOC 2 attestation on marketing site at time of research caps procurement-grade score at 3/5.
SUB-PROCESSORS

Unterauftragsverarbeiter-Karte · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Rahmenwerke & Zertifizierungen · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-12).
FEATURES

Funktionsmatrix

INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Preise & Tarife

FREEMIUM
ab €7/Monat
Preisseite ansehen ↗
PUBLIC DOCUMENTS

Öffentliche Dokumente

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement — this caps the compliance score (see How we score).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
ALTERNATIVES

Alternativen in dieser Kategorie