Manchester-based UK CRM (Zestia Ltd) with a free tier, public DPA, and AWS hosting; post-Brexit jurisdiction.
- FROM
- —
- CLOUD ACT
- MATERIAL
Zusammenfassung aus Eigentümerschaft und CLOUD-Act-Risiko.
German cloud ERP + CRM (weclapp SE), Frankfurt and Karlsruhe data centres, ISO 27001/27018/27701, banking-grade encryption.
weclapp aus der Kategorie CRM bietet EU-Hosting mit Germany als Hosting-Standort, doch ein US-Mutterkonzern oder Unterauftragsverarbeiter hinterlässt ein materielles CLOUD-Act-Risiko.
German Societas Europaea (weclapp SE) running customer ERP/CRM data exclusively on a Frankfurt data centre with Karlsruhe backup, both certified ISO 9001/27001/27018/27701/22301/20000-1/PCI-DSS/CSA STAR/SSAE16; however, the verified sub-processor list (2026-06) shows production storage and processing run on Amazon Web Services (a US-owned hyperscaler) via its operations partner Exact Cloud Development Benelux, with Microsoft, Splunk, Akamai, ServiceNow and Secureworks (all US) for monitoring and security, so CLOUD Act exposure is material despite the EU data region; a public DPA URL was not resolvable at audit. (An earlier assessment understated the US footprint as marketing-site-only; the dedicated sub-processor page shows AWS as the production host.)
Wie stark Kundendaten US-Behörden nach dem CLOUD Act (Clarifying Lawful Overseas Use of Data Act) ausgesetzt sind.
Wo die letztliche Kontrolle über das Betreiberunternehmen liegt.
weclapp is a German cloud ERP + CRM platform operated by weclapp SE, a Societas Europaea legal form adopted to support international expansion, with offices in Frankfurt am Main, Marburg, Kitzingen, and Karlsruhe. Founded in 2008, the platform combines CRM, sales pipelines, quotations, invoicing, accounting, project management, and full inventory/warehouse management for SMBs and mid-market companies, with strong integrations into German marketplaces, payment providers, and shipping platforms (Amazon, eBay, Shopify, etc.). The product has won "ERP-System des Jahres" multiple times and is positioned as the first German cloud ERP with TÜV-certified data protection.
For procurement-grade EU buyers the hosting story is among the strongest in this directory. Customer ERP/CRM data is stored exclusively on a Frankfurt am Main data centre with a Karlsruhe backup; both facilities carry an exceptional certification stack (ISO 9001, ISO 27001, ISO 27018, ISO 27701, ISO 22301, ISO 20000-1, PCI-DSS, CSA STAR CCM v4.0, SSAE16 / ISAE3402). No US-owned hyperscaler sits in the customer-data path. The privacy policy (last updated September 2024) names sub-processors transparently; the US-resident ones (Google, Microsoft, Intercom, Productboard, Meta, LinkedIn) are scoped to marketing-site analytics, advertising pixels, customer chat, and product roadmapping rather than customer business records, with SCCs cited under Art. 46 GDPR for any onward transfers. Brevo (FR) handles newsletters and Personio (DE) handles application data.
Pricing in EUR: ERP Starter €39/user/month, ERP Services €86/user/month, ERP Trade €163/user/month, Enterprise custom for 10+ licences. A 30-day free trial requires no credit card and auto-cancels. Best fit: German and DACH SMBs and mid-market companies that need an integrated ERP + CRM with explicit German data residency, multi-ISO certifications, and broad e-commerce-marketplace integrations. The lack of an obvious public DPA URL is the primary friction for a fully procurement-grade buyer: request the AVV directly and confirm the Frankfurt / Karlsruhe DC contractual commitments before signing.
DDoS and cyber-attack protection (via Exact)
Production storage and processing (via Exact; data in Frankfurt)
Hosting for weclapp webpages and knowledge base
Product tours, surveys and chat for customer communications
Microsoft Defender status monitoring (via Exact)
Storage/processing of mail, files, SharePoint, Teams (via Exact)
24/7 Security Operations Center (via Exact)
IT process/service management and monitoring (via Exact)
Monitoring AWS cloud infrastructure (via Exact)
Migration of mail, files, SharePoint, Teams (via Exact)
Migration/operation support with onward sub-processing in India (via Exact)
Service configuration, security monitoring, performance tracking
Support services to operate the MS Office suite
Fiscalisation solution for KassenSichV
Product tours, surveys and in-app support
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| Akamai Technologies Netherlands B.V. | Netherlands | DDoS and cyber-attack protection (via Exact) | US |
| Amazon Web Services EMEA SARL | Luxembourg | Production storage and processing (via Exact; data in Frankfurt) | US |
| DigitalOcean LLC | United States | Hosting for weclapp webpages and knowledge base | US |
| Intercom R&D Unlimited Company | Ireland | Product tours, surveys and chat for customer communications | US |
| Microsoft B.V. | Netherlands | Microsoft Defender status monitoring (via Exact) | US |
| Microsoft Ireland Operations Ltd. | Ireland | Storage/processing of mail, files, SharePoint, Teams (via Exact) | US |
| Secureworks Inc. | United States | 24/7 Security Operations Center (via Exact) | US |
| ServiceNow Nederland B.V. | Netherlands | IT process/service management and monitoring (via Exact) | US |
| Splunk Inc. | United States | Monitoring AWS cloud infrastructure (via Exact) | US |
| CLOUDIWAY SASU | France | Migration of mail, files, SharePoint, Teams (via Exact) | EU |
| DevOn India-NL B.V. | Netherlands | Migration/operation support with onward sub-processing in India (via Exact) | EU |
| Exact Cloud Development Benelux B.V. | Netherlands | Service configuration, security monitoring, performance tracking | EU |
| Exact Group B.V. | Netherlands | Support services to operate the MS Office suite | EU |
| fiskaly Germany GmbH | Germany | Fiscalisation solution for KassenSichV | EU |
| Product Fruits s.r.o. | Czechia | Product tours, surveys and in-app support | EU |
Manchester-based UK CRM (Zestia Ltd) with a free tier, public DPA, and AWS hosting; post-Brexit jurisdiction.
Cologne-based German SMB CRM (42he GmbH), all-German hosting on Hetzner + Core-Backbone + Telekom, free tier for 3 users.
Konstanz-based German CRM (combit Software, since 1989), founder-owned, on-prem + cloud, German Mittelstand vendor.