Aller au contenu
Vérifié indépendamment · Ré-audit trimestriel
EU VETTED

weclapp

VéRIFIé
CRM · Germany
Fondé en 2008 · weclapp.com ↗

German cloud ERP + CRM (weclapp SE), Frankfurt and Karlsruhe data centres, ISO 27001/27018/27701, banking-grade encryption.

En bref

weclapp, dans la catégorie CRM, propose un hébergement dans l’UE avec Germany comme lieu d’hébergement, mais une maison mère ou un sous-traitant américain laisse une exposition matérielle au CLOUD Act.

Notes d’évaluation

German Societas Europaea (weclapp SE) running customer ERP/CRM data exclusively on a Frankfurt data centre with Karlsruhe backup, both certified ISO 9001/27001/27018/27701/22301/20000-1/PCI-DSS/CSA STAR/SSAE16; however, the verified sub-processor list (2026-06) shows production storage and processing run on Amazon Web Services (a US-owned hyperscaler) via its operations partner Exact Cloud Development Benelux, with Microsoft, Splunk, Akamai, ServiceNow and Secureworks (all US) for monitoring and security, so CLOUD Act exposure is material despite the EU data region; a public DPA URL was not resolvable at audit. (An earlier assessment understated the US footprint as marketing-site-only; the dedicated sub-processor page shows AWS as the production host.)

CLOUD ACT
OWNERSHIP
SUB-PROCS
15 · 9 US
Signaux vérifiés
Juridiction
  • Hébergement UE / adéquation
  • Opérateur UE / adéquation
  • Aucune exposition au CLOUD Act
Transparence
  • DPA public
  • Sous-traitants divulgués
  • Clients open source
  • Certification tierce
JUMP TO
OVERVIEW

À propos de weclapp

weclapp is a German cloud ERP + CRM platform operated by weclapp SE, a Societas Europaea legal form adopted to support international expansion, with offices in Frankfurt am Main, Marburg, Kitzingen, and Karlsruhe. Founded in 2008, the platform combines CRM, sales pipelines, quotations, invoicing, accounting, project management, and full inventory/warehouse management for SMBs and mid-market companies, with strong integrations into German marketplaces, payment providers, and shipping platforms (Amazon, eBay, Shopify, etc.). The product has won "ERP-System des Jahres" multiple times and is positioned as the first German cloud ERP with TÜV-certified data protection.

For procurement-grade EU buyers the hosting story is among the strongest in this directory. Customer ERP/CRM data is stored exclusively on a Frankfurt am Main data centre with a Karlsruhe backup; both facilities carry an exceptional certification stack (ISO 9001, ISO 27001, ISO 27018, ISO 27701, ISO 22301, ISO 20000-1, PCI-DSS, CSA STAR CCM v4.0, SSAE16 / ISAE3402). No US-owned hyperscaler sits in the customer-data path. The privacy policy (last updated September 2024) names sub-processors transparently; the US-resident ones (Google, Microsoft, Intercom, Productboard, Meta, LinkedIn) are scoped to marketing-site analytics, advertising pixels, customer chat, and product roadmapping rather than customer business records, with SCCs cited under Art. 46 GDPR for any onward transfers. Brevo (FR) handles newsletters and Personio (DE) handles application data.

Pricing in EUR: ERP Starter €39/user/month, ERP Services €86/user/month, ERP Trade €163/user/month, Enterprise custom for 10+ licences. A 30-day free trial requires no credit card and auto-cancels. Best fit: German and DACH SMBs and mid-market companies that need an integrated ERP + CRM with explicit German data residency, multi-ISO certifications, and broad e-commerce-marketplace integrations. The lack of an obvious public DPA URL is the primary friction for a fully procurement-grade buyer: request the AVV directly and confirm the Frankfurt / Karlsruhe DC contractual commitments before signing.

SUB-PROCESSORS

Carte des sous-traitants · 15

Source ↗
  • Akamai Technologies Netherlands B.V. US
    Netherlands

    DDoS and cyber-attack protection (via Exact)

  • Amazon Web Services EMEA SARL US
    Luxembourg

    Production storage and processing (via Exact; data in Frankfurt)

  • DigitalOcean LLC US
    United States

    Hosting for weclapp webpages and knowledge base

  • Intercom R&D Unlimited Company US
    Ireland

    Product tours, surveys and chat for customer communications

  • Microsoft B.V. US
    Netherlands

    Microsoft Defender status monitoring (via Exact)

  • Microsoft Ireland Operations Ltd. US
    Ireland

    Storage/processing of mail, files, SharePoint, Teams (via Exact)

  • Secureworks Inc. US
    United States

    24/7 Security Operations Center (via Exact)

  • ServiceNow Nederland B.V. US
    Netherlands

    IT process/service management and monitoring (via Exact)

  • Splunk Inc. US
    United States

    Monitoring AWS cloud infrastructure (via Exact)

  • CLOUDIWAY SASU EU
    France

    Migration of mail, files, SharePoint, Teams (via Exact)

  • DevOn India-NL B.V. EU
    Netherlands

    Migration/operation support with onward sub-processing in India (via Exact)

  • Exact Cloud Development Benelux B.V. EU
    Netherlands

    Service configuration, security monitoring, performance tracking

  • Exact Group B.V. EU
    Netherlands

    Support services to operate the MS Office suite

  • fiskaly Germany GmbH EU
    Germany

    Fiscalisation solution for KassenSichV

  • Product Fruits s.r.o. EU
    Czechia

    Product tours, surveys and in-app support

9 sous-traitants sur 15 sont incorporés aux États-Unis. Exposition au CLOUD Act applicable.
CERTIFICATIONS

Référentiels & certifications

ISO/IEC 27001
ACTIVE
ISO/IEC 27018
ACTIVE
FEATURES

Matrice de fonctionnalités

Pipeline commercial Oui
Sync e-mail Oui
Automatisation Oui
Capture de leads Oui
Campagnes e-mail Non
Devis / facturation Oui
Téléphonie Non
Application mobile Non
Offre gratuite Non
INTéGRATION & ACCèS
REST API Yes
SSO (SAML / OIDC) Yes
CONFORMITé & GOUVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Tarifs & paliers

PAYANT
à partir de €39/mois
Voir la page tarifs ↗
PUBLIC DOCUMENTS

Documents publics

  • Contrat de sous-traitance (DPA)
    www.weclapp.com/en…
    Ouvrir ↗
  • Liste des sous-traitants
    www.weclapp.com/en…
    Ouvrir ↗
ALTERNATIVES

Alternatives dans cette catégorie

Capsule CRM
United Kingdom · Fondé en 2009
HéBERGé UE

Manchester-based UK CRM (Zestia Ltd) with a free tier, public DPA, and AWS hosting; post-Brexit jurisdiction.

DPA public Sous-traitants Open source
FROM
CLOUD ACT
MATERIAL
centralstationCRM
Germany · Fondé en 2010
SOUVERAIN UE

Cologne-based German SMB CRM (42he GmbH), all-German hosting on Hetzner + Core-Backbone + Telekom, free tier for 3 users.

DPA public Sous-traitants Open source
FROM
€24/mois
CLOUD ACT
NONE
combit CRM
Germany · Fondé en 1989
SOUVERAIN UE

Konstanz-based German CRM (combit Software, since 1989), founder-owned, on-prem + cloud, German Mittelstand vendor.

DPA public Sous-traitants Open source
FROM
CLOUD ACT
NONE