Zum Inhalt springen
EU VETTED

weclapp

Gegründet 2008 · weclapp.com

German cloud ERP + CRM (weclapp SE), Frankfurt and Karlsruhe data centres, ISO 27001/27018, part of the Dutch Exact Group under US private-equity control.

weclapp bietet EU-Hosting in Deutschland, doch ein US-Mutterkonzern oder Unterauftragsverarbeiter hinterlässt ein materielles CLOUD-Act-Risiko. Gelistet unter CRM.

Bewertungsnotizen

German Societas Europaea (weclapp SE) running customer ERP/CRM data on a Frankfurt data centre with Karlsruhe backup, both certified ISO 9001/27001/27018/27701/22301/20000-1/PCI-DSS/CSA STAR/SSAE16. Two facts cap the score. First, ownership: weclapp SE has been part of the Dutch Exact Group since 2022, and Exact is a KKR portfolio company (majority since 2019) with Silver Lake co-invested since 2021, so the ultimate control sits with US private equity and the signal is eu_hq_us_funded, not eu_owned. Second, the processor chain: the sub-processor list (verified 2026-08-26, page dated 13 August 2026) shows production storage and processing running on Amazon Web Services via the operations partner Exact Cloud Development Benelux, with Microsoft, Splunk, Akamai, ServiceNow and Secureworks (all US-owned) for monitoring and security. CLOUD Act exposure is material despite the German data region. The AVV/DPA itself is publicly downloadable as a PDF.

Befund

CLOUD Act
Eigentümer
Unterauftragsverarbeiter
16 · 9 US

Geprüfte Signale

Jurisdiktion
  • EU-/Angemessenheits-Hosting: Ja
  • EU-/Angemessenheits-Betreiber: Ja
  • Keine US-CLOUD-Act-Exposition: Nein
Transparenz
  • Öffentlicher AVV: Ja
  • Unterauftragsverarbeiter offengelegt: Ja
  • Open-Source-Clients: Nein
  • Zertifizierung durch Dritte: Ja
Springen zu

Über weclapp

weclapp is a German cloud ERP + CRM platform operated by weclapp SE, a Societas Europaea legal form adopted to support international expansion, with offices in Frankfurt am Main, Marburg, Kitzingen, and Karlsruhe. Since September 2022 weclapp has been part of the Dutch Exact Group, which is itself a KKR portfolio company with Silver Lake co-invested as a minority since 2021, so ultimate control sits with US private equity and the ownership signal is recorded as EU-Sitz, US-finanziert. Founded in 2008, the platform combines CRM, sales pipelines, quotations, invoicing, accounting, project management, and full inventory/warehouse management for SMBs and mid-market companies, with strong integrations into German marketplaces, payment providers, and shipping platforms (Amazon, eBay, Shopify, etc.). The product has won "ERP-System des Jahres" multiple times and is positioned as the first German cloud ERP with TÜV-certified data protection.

For procurement-grade EU buyers the data region is clear but the processor chain is not EU-only. Customer ERP/CRM data is stored on a Frankfurt am Main data centre with a Karlsruhe backup; both facilities carry an exceptional certification stack (ISO 9001, ISO 27001, ISO 27018, ISO 27701, ISO 22301, ISO 20000-1, PCI-DSS, CSA STAR CCM v4.0, SSAE16 / ISAE3402), while weclapp itself holds ISO 27001 and ISO 27018. The dedicated sub-processor page (last updated 13 August 2026) shows production storage and processing running on Amazon Web Services via the operations partner Exact Cloud Development Benelux, with Microsoft, Splunk, Akamai, ServiceNow and Secureworks in the monitoring and security path, so a US-owned hyperscaler does sit in the customer-data path and CLOUD Act exposure is recorded as Erheblich despite the German data region. Doxis AI Solutions B.V. (NL) performs OCR and automated extraction from customer documents. Google, Intercom, Productboard, Meta and LinkedIn are scoped to marketing-site analytics, advertising pixels, customer chat and product roadmapping, with SCCs cited under Art. 46 GDPR for onward transfers. Brevo (FR) handles newsletters and Personio (DE) handles application data.

Pricing in EUR: ERP Starter €39/user/month, ERP Services €86/user/month, ERP Trade €163/user/month, Enterprise custom for 10+ licences. A 30-day free trial requires no credit card and auto-cancels. Best fit: German and DACH SMBs and mid-market companies that need an integrated ERP + CRM with explicit German data residency, multi-ISO certifications, and broad e-commerce-marketplace integrations. The AVV/DPA is publicly downloadable as a bilingual DE/EN PDF, so the friction for a procurement-grade buyer is the processor chain rather than the paperwork: confirm the AWS role in the production path and the Frankfurt / Karlsruhe contractual commitments before signing.

Unterauftragsverarbeiter-Karte · 16

Quelle
  • Akamai Technologies Netherlands B.V. US
    Niederlande

    DDoS and cyber-attack protection (via Exact)

  • Amazon Web Services EMEA SARL US
    Luxemburg

    Production storage and processing (via Exact; data in Frankfurt)

  • DigitalOcean LLC US
    Vereinigte Staaten

    Hosting for weclapp webpages and knowledge base (processed in Frankfurt am Main)

  • Intercom R&D Unlimited Company US
    Irland

    Chat feature for customer communications

  • Microsoft B.V. US
    Niederlande

    Microsoft Defender status monitoring (via Exact)

  • Microsoft Ireland Operations Ltd. US
    Irland

    Storage/processing of mail, files, SharePoint, Teams (via Exact)

  • Secureworks Inc. US
    Vereinigte Staaten

    24/7 Security Operations Center (via Exact)

  • ServiceNow Nederland B.V. US
    Niederlande

    IT process/service management and monitoring (via Exact)

  • Splunk Inc. US
    Vereinigte Staaten

    Monitoring AWS cloud infrastructure (via Exact)

  • CLOUDIWAY SASU EU
    Frankreich

    Migration of mail, files, SharePoint, Teams (via Exact)

  • DevOn India-NL B.V. non-US
    Indien

    Migration and cloud environment operation support, located in India (via Exact)

  • Doxis AI Solutions B.V. EU
    Niederlande

    OCR text recognition and automated data extraction from customer documents

  • Exact B.V. EU
    Niederlande

    Support services to operate the MS Office suite

  • Exact Cloud Development Benelux B.V. EU
    Niederlande

    Service configuration, security monitoring, performance tracking

  • fiskaly Germany GmbH EU
    Deutschland

    Fiscalisation solution for KassenSichV

  • Product Fruits s.r.o. EU
    Tschechien

    Product tours, surveys and in-app support

Quelle: veröffentlichte Unterauftragsverarbeiter-Liste des Anbieters, gelesen am 26 Aug 2026.

9 von 16 Unterauftragsverarbeitern sind in US-Eigentum oder haben ihren Sitz in den USA. CLOUD-Act-Risiko anwendbar.

Rahmenwerke & Zertifizierungen

ISO/IEC 27001
Aktiv
ISO/IEC 27018
Aktiv

Funktionsmatrix

Tabelle 2Funktionen von weclapp

Sales-Pipeline Ja
E-Mail-Sync Ja
Workflow-Automatisierung Ja
Lead-Erfassung Ja
E-Mail-Kampagnen Nein
Angebote / Rechnungen Ja
Telefonie Nein
Mobile App Nein
Gratis-Tarif Nein

Integration & Zugriff

REST API Ja
SSO (SAML / OIDC) Ja

Compliance & Governance

Audit log Ja
Self-host / on-prem option Nein

Preise & Tarife

ab 39 €/Monat
Kostenpflichtig
Preisseite ansehen

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    www.weclapp.com/en…
    Öffnen
  • Liste der Unterauftragsverarbeiter
    www.weclapp.com/en…
    Öffnen

Alternativen in dieser Kategorie

  • Capsule CRM
    Vereinigtes Königreich
    EU-gehostet
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
  • centralstationCRM
    Deutschland · 24 €/Mt.
    EU-souverän
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
  • combit CRM
    Deutschland
    EU-souverän
    Öffentl. AVV: Nicht bewertet Subprozessoren: Ja Open Source: Nein
Alle crm-Alternativen ansehen