French open-source e-commerce with hosted SaaS option; parent group Fortidia is an Oaktree Capital portfolio company.
- FROM
- —
- CLOUD ACT
- MATERIAL
Zusammenfassung aus Eigentümerschaft und CLOUD-Act-Risiko.
German mid-market commerce platform (Schöppingen, est. 2000); Cloud entry €600/mo. PayPal owns ~41% as of Oct 2025.
Shopware aus der Kategorie E-Commerce bietet EU-Hosting mit Germany als Hosting-Standort, doch ein US-Mutterkonzern oder Unterauftragsverarbeiter hinterlässt ein materielles CLOUD-Act-Risiko.
shopware AG (Schöppingen DE, HRB 11471 Coesfeld) is German-incorporated and EU-hosted with ISO 27001 + SOC 2 Type II + PCI DSS, but PayPal (Nasdaq: PYPL) acquired Carlyle's stake in October 2025 and now holds ~41%, flipping the ownership signal to eu_hq_us_funded and creating material CLOUD Act exposure via the US-public-company parent stake; founders Hamann still majority-own.
Wie stark Kundendaten US-Behörden nach dem CLOUD Act (Clarifying Lawful Overseas Use of Data Act) ausgesetzt sind.
Wo die letztliche Kontrolle über das Betreiberunternehmen liegt.
Die Exposition hängt davon ab, wie Sie dieses Produkt betreiben.
Anbieterbetrieben: die unten genannten Unterauftragsverarbeiter gelten.
Wie stark Kundendaten US-Behörden nach dem CLOUD Act (Clarifying Lawful Overseas Use of Data Act) ausgesetzt sind.
Auf eigener EU-Infrastruktur betreiben: Sie kontrollieren Hosting und jeden Unterauftragsverarbeiter.
Wie stark Kundendaten US-Behörden nach dem CLOUD Act (Clarifying Lawful Overseas Use of Data Act) ausgesetzt sind.
Shopware (Schöppingen, DE, founded 2000) is the most visible German Shopify alternative but is structurally NOT in Shopify's SMB price range: Cloud Rise plan starts at €600/month excl. VAT, with pricing scaling on GMV. The free open-source Community Edition is self-hosted and is the realistic indie / SMB path, not the SaaS Cloud. Ownership changed materially in October 2025: PayPal took over Carlyle's stake from the 2022 $100M Carlyle + PayPal round, bringing PayPal's stake to ~41%. PayPal is a US-public company on Nasdaq, which is a substantive CLOUD Act-relevant ownership flip from the 2024 "eu_owned" perception. Certifications: ISO 27001 + SOC 2 Type II + PCI DSS + GDPR. EU data centres claimed; specific provider not transparently named on public site. Best fit for mid-market DACH merchants who need a full-control B2B+B2C platform with on-prem option, not for solo merchants comparing Shopify Basic ($39/mo) prices.
French open-source e-commerce with hosted SaaS option; parent group Fortidia is an Oaktree Capital portfolio company.
Polish open-source Symfony e-commerce framework (MIT); commercial Plus modules from €800/yr GMV-based.
Finnish all-in-one e-commerce SaaS with own Helsinki hosting and 0% commission across plans.