GPLv3 fully-offline desktop password manager (KeePassXC Team, Weimar DE, est. 2016) — no cloud, no servers, no telemetry; structurally zero CLOUD Act exposure.
- FROM
- —
- CLOUD ACT
- NONE
Synthèse de la propriété et de l’exposition au CLOUD Act.
German-hosted business password manager from LC by vBoxx GmbH; collections, group sharing, central management, unlimited devices; an EU-hosted 1Password / LastPass alternative.
LC-Pass, dans la catégorie Gestionnaires de mots de passe, est un service sous contrôle européen avec Germany comme lieu d’hébergement et aucune exposition identifiée au CLOUD Act.
LC-Pass is the business password manager in the leitzcloud suite, operated by LC by vBoxx GmbH (Frankfurt am Main, HRB 117087; part of the Dutch vBoxx group). It stores and shares credentials, credit-card data, and other secrets for teams, with collections, group sharing and per-item rights, central management and reporting, and unlimited items, devices, and synchronisation. Data is stored in two georedundant German locations on the operator's own infrastructure, ISO/TÜV-certified and DSGVO-oriented, with zero-knowledge encryption per the vendor — EU-owned, EU-hosted, no CLOUD Act exposure. It is positioned as a German-hosted alternative to 1Password / LastPass for organisations that want credential management inside EU infrastructure. The vendor supplied an AVV (DPA + sub-processors + data-residency) on request; no public DPA URL is the documentation gap.
Le degré d'exposition des données clients aux autorités américaines au titre du CLOUD Act.
Où se situe le contrôle ultime de la société exploitante.
LC-Pass is the credential-management component of the leitzcloud suite, operated by LC by vBoxx GmbH (Frankfurt am Main; part of the Dutch vBoxx group). It lets organisations securely store, manage, and share passwords, credit-card details, and other sensitive data, organised into collections with group-based sharing and per-item rights, plus central management and reporting for administrators and unlimited items, devices, and synchronisation. The positioning is a German-hosted alternative to 1Password and LastPass for teams that want their secrets held inside EU infrastructure rather than with a US-based provider.
Data is stored across two georedundant German locations on the group's own infrastructure, ISO/TÜV-certified and DSGVO-oriented, with zero-knowledge encryption stated by the vendor — an EU-owned, EU-hosted, no-CLOUD-Act-exposure posture. The vendor provided an AVV (DPA, sub-processor list, data-residency statement) on request in June 2026; it is not yet published at a public URL, which is the remaining transparency gap. Best fit: DACH SMBs and public-sector-adjacent teams already using or considering leitzcloud who want team credential management under the same German operator and data residency.
GPLv3 fully-offline desktop password manager (KeePassXC Team, Weimar DE, est. 2016) — no cloud, no servers, no telemetry; structurally zero CLOUD Act exposure.
Lithuanian password manager by Nord Security, zero-knowledge XChaCha20, ISO 27001 + SOC 2 — but hosted on AWS (US): material CLOUD Act exposure.
German AGPLv3 open-source password manager (MaKleSoft, Bavaria), audited 3×, self-hostable — but hosted cloud uses Stripe + defunct Privacy Shield ref.