Zum Inhalt springen
Unabhängig verifiziert · Quartalsweises Re-Audit
EU VETTED

SuperOffice

VERIFIZIERT
CRM · Norway
Founded 1989 · superoffice.com ↗

Long-running Norwegian Nordic-enterprise CRM (SuperOffice AS, Oslo) with EU/EEA hosting and on-premise edition; Axcel-owned with Carlyle backing.

Warum diese Bewertung?

Long-running Norwegian Nordic-enterprise CRM (SuperOffice AS, Oslo) with subsidiaries across NO/SE/DK/DE/NL/CH/LT and customer data hosted 'in Europe', but the privacy statement still references the invalidated Privacy Shield framework (last updated May 2023), the underlying hosting provider is not publicly named, and the 2025 continuation-fund round was led by Carlyle AlpInvest with US Carlyle as ultimate parent — together caps the score at 3/5 with material CLOUD Act exposure.

SCORE
3.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
0 none disclosed
JUMP TO
OVERVIEW

About SuperOffice

SuperOffice is one of the longest-running European CRM vendors, founded in 1989 in Oslo and operated by SuperOffice AS (Wergelandsveien 27, 0167 Oslo, Norway) with subsidiaries in Sweden, Denmark, Germany, the Netherlands, Switzerland, and Lithuania. The product targets Nordic enterprise B2B with three modules — Sales (deal management and forecasting), Marketing (campaign management and lead generation), Service (customer support) — plus AI-assisted summaries and content generation, and 1,000+ integrations including Microsoft Dynamics, SharePoint, Slack, Trello, and Zapier. The company emphasises 30+ years of European CRM expertise. Ownership is layered: in April 2020 Norwegian SuperOffice AS was acquired by Axcel, the Danish private-equity firm; on 3 June 2025 Axcel secured a €266M continuation fund led by Carlyle AlpInvest, with US-headquartered Carlyle as the ultimate parent of the AlpInvest sub-fund. So while the operating entity sits firmly in Norway/EEA and earlier ownership was fully Nordic, the continuation-fund layer adds meaningful US-PE exposure that procurement-grade buyers should understand. CEO as of 2026 is Bjørn Røsten. Compliance disclosures are partial. The privacy statement (last updated 1 May 2023) names Google Analytics, Facebook, and LinkedIn as marketing-site sub-processors and references a "directory of approved sub-processors" inside the DPA in the Trust Center — not directly resolvable as a public URL at audit. The same statement still cites the EU-U.S. Privacy Shield Framework as an alternative legal basis, which has been invalidated since Schrems II (July 2020) and replaced by the Data Privacy Framework — outdated wording is a transparency red flag. The hosting provider for customer CRM data is described only as "Europe" without a specific provider, region, or city. Per the directory's strict CLOUD Act stance these gaps cap the score at 3/5 pending vendor confirmation of the underlying cloud and a refreshed transfer-mechanism reference. Pricing in EUR is enterprise-grade: Sales Essentials starts at €71/user/month with annual billing (monthly, quarterly, semi-annual, and annual cycles available); higher Sales / Service / Marketing tiers above; an interactive demo replaces a self-serve free trial. Best fit: Nordic and DACH mid-market and enterprise B2B teams that want a long-running European CRM with deep Microsoft-stack integration. Procurement-led EU-only buyers should request the Trust Center sub-processors list, the AVV/DPA, and a written commitment on the underlying cloud region before signing.
SUB-PROCESSORS

Unterauftragsverarbeiter-Karte · none disclosed

Source ↗
Vendor discloses zero sub-processors. All data processing happens in-house.
CERTIFICATIONS

Rahmenwerke & Zertifizierungen · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-11).
FEATURES

Funktionsmatrix

INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option Yes
PRICING

Preise & Tarife

KOSTENPFLICHTIG
ab €71/Monat
Preisseite ansehen ↗
PUBLIC DOCUMENTS

Öffentliche Dokumente

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement — this caps the compliance score (see How we score).
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    www.superoffice.com/privacy…
    Open ↗
ALTERNATIVES

Alternativen in dieser Kategorie