Zum Inhalt springen
Unabhängig verifiziert · Quartalsweises Re-Audit
EU VETTED

weclapp

VERIFIZIERT
CRM · Germany
Gegründet 2008 · weclapp.com ↗

German cloud ERP + CRM (weclapp SE), Frankfurt and Karlsruhe data centres, ISO 27001/27018/27701, banking-grade encryption.

Kurzfassung

weclapp aus der Kategorie CRM bietet EU-Hosting mit Germany als Hosting-Standort, doch ein US-Mutterkonzern oder Unterauftragsverarbeiter hinterlässt ein materielles CLOUD-Act-Risiko.

Bewertungsnotizen

German Societas Europaea (weclapp SE) running customer ERP/CRM data exclusively on a Frankfurt data centre with Karlsruhe backup, both certified ISO 9001/27001/27018/27701/22301/20000-1/PCI-DSS/CSA STAR/SSAE16; however, the verified sub-processor list (2026-06) shows production storage and processing run on Amazon Web Services (a US-owned hyperscaler) via its operations partner Exact Cloud Development Benelux, with Microsoft, Splunk, Akamai, ServiceNow and Secureworks (all US) for monitoring and security, so CLOUD Act exposure is material despite the EU data region; a public DPA URL was not resolvable at audit. (An earlier assessment understated the US footprint as marketing-site-only; the dedicated sub-processor page shows AWS as the production host.)

CLOUD ACT
OWNERSHIP
SUB-PROCS
15 · 9 US
Geprüfte Signale
Jurisdiktion
  • EU-/Angemessenheits-Hosting
  • EU-/Angemessenheits-Betreiber
  • Keine US-CLOUD-Act-Exposition
Transparenz
  • Öffentlicher AVV
  • Unterauftragsverarbeiter offengelegt
  • Open-Source-Clients
  • Zertifizierung durch Dritte
JUMP TO
OVERVIEW

Über weclapp

weclapp is a German cloud ERP + CRM platform operated by weclapp SE, a Societas Europaea legal form adopted to support international expansion, with offices in Frankfurt am Main, Marburg, Kitzingen, and Karlsruhe. Founded in 2008, the platform combines CRM, sales pipelines, quotations, invoicing, accounting, project management, and full inventory/warehouse management for SMBs and mid-market companies, with strong integrations into German marketplaces, payment providers, and shipping platforms (Amazon, eBay, Shopify, etc.). The product has won "ERP-System des Jahres" multiple times and is positioned as the first German cloud ERP with TÜV-certified data protection.

For procurement-grade EU buyers the hosting story is among the strongest in this directory. Customer ERP/CRM data is stored exclusively on a Frankfurt am Main data centre with a Karlsruhe backup; both facilities carry an exceptional certification stack (ISO 9001, ISO 27001, ISO 27018, ISO 27701, ISO 22301, ISO 20000-1, PCI-DSS, CSA STAR CCM v4.0, SSAE16 / ISAE3402). No US-owned hyperscaler sits in the customer-data path. The privacy policy (last updated September 2024) names sub-processors transparently; the US-resident ones (Google, Microsoft, Intercom, Productboard, Meta, LinkedIn) are scoped to marketing-site analytics, advertising pixels, customer chat, and product roadmapping rather than customer business records, with SCCs cited under Art. 46 GDPR for any onward transfers. Brevo (FR) handles newsletters and Personio (DE) handles application data.

Pricing in EUR: ERP Starter €39/user/month, ERP Services €86/user/month, ERP Trade €163/user/month, Enterprise custom for 10+ licences. A 30-day free trial requires no credit card and auto-cancels. Best fit: German and DACH SMBs and mid-market companies that need an integrated ERP + CRM with explicit German data residency, multi-ISO certifications, and broad e-commerce-marketplace integrations. The lack of an obvious public DPA URL is the primary friction for a fully procurement-grade buyer: request the AVV directly and confirm the Frankfurt / Karlsruhe DC contractual commitments before signing.

SUB-PROCESSORS

Unterauftragsverarbeiter-Karte · 15

Quelle ↗
  • Akamai Technologies Netherlands B.V. US
    Netherlands

    DDoS and cyber-attack protection (via Exact)

  • Amazon Web Services EMEA SARL US
    Luxembourg

    Production storage and processing (via Exact; data in Frankfurt)

  • DigitalOcean LLC US
    United States

    Hosting for weclapp webpages and knowledge base

  • Intercom R&D Unlimited Company US
    Ireland

    Product tours, surveys and chat for customer communications

  • Microsoft B.V. US
    Netherlands

    Microsoft Defender status monitoring (via Exact)

  • Microsoft Ireland Operations Ltd. US
    Ireland

    Storage/processing of mail, files, SharePoint, Teams (via Exact)

  • Secureworks Inc. US
    United States

    24/7 Security Operations Center (via Exact)

  • ServiceNow Nederland B.V. US
    Netherlands

    IT process/service management and monitoring (via Exact)

  • Splunk Inc. US
    United States

    Monitoring AWS cloud infrastructure (via Exact)

  • CLOUDIWAY SASU EU
    France

    Migration of mail, files, SharePoint, Teams (via Exact)

  • DevOn India-NL B.V. EU
    Netherlands

    Migration/operation support with onward sub-processing in India (via Exact)

  • Exact Cloud Development Benelux B.V. EU
    Netherlands

    Service configuration, security monitoring, performance tracking

  • Exact Group B.V. EU
    Netherlands

    Support services to operate the MS Office suite

  • fiskaly Germany GmbH EU
    Germany

    Fiscalisation solution for KassenSichV

  • Product Fruits s.r.o. EU
    Czechia

    Product tours, surveys and in-app support

9 von 15 Unterauftragsverarbeitern sind in den USA registriert. CLOUD-Act-Risiko anwendbar.
CERTIFICATIONS

Rahmenwerke & Zertifizierungen

ISO/IEC 27001
AKTIV
ISO/IEC 27018
AKTIV
FEATURES

Funktionsmatrix

Sales-Pipeline Ja
E-Mail-Sync Ja
Workflow-Automatisierung Ja
Lead-Erfassung Ja
E-Mail-Kampagnen Nein
Angebote / Rechnungen Ja
Telefonie Nein
Mobile App Nein
Gratis-Tarif Nein
INTEGRATION & ZUGRIFF
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Preise & Tarife

KOSTENPFLICHTIG
ab €39/Monat
Preisseite ansehen ↗
PUBLIC DOCUMENTS

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    www.weclapp.com/en…
    Öffnen ↗
  • Liste der Unterauftragsverarbeiter
    www.weclapp.com/en…
    Öffnen ↗
ALTERNATIVES

Alternativen in dieser Kategorie

Capsule CRM
United Kingdom · Gegründet 2009
EU-GEHOSTET

Manchester-based UK CRM (Zestia Ltd) with a free tier, public DPA, and AWS hosting; post-Brexit jurisdiction.

Öffentl. AVV Subprozessoren Open Source
FROM
CLOUD ACT
MATERIAL
centralstationCRM
Germany · Gegründet 2010
EU-SOUVERäN

Cologne-based German SMB CRM (42he GmbH), all-German hosting on Hetzner + Core-Backbone + Telekom, free tier for 3 users.

Öffentl. AVV Subprozessoren Open Source
FROM
€24/Mt.
CLOUD ACT
NONE
combit CRM
Germany · Gegründet 1989
EU-SOUVERäN

Konstanz-based German CRM (combit Software, since 1989), founder-owned, on-prem + cloud, German Mittelstand vendor.

Öffentl. AVV Subprozessoren Open Source
FROM
CLOUD ACT
NONE