Aller au contenu

weclapp

Fondé en 2008 · weclapp.com

German cloud ERP + CRM (weclapp SE), Frankfurt and Karlsruhe data centres, ISO 27001/27018, part of the Dutch Exact Group under US private-equity control.

weclapp propose un hébergement européen en Allemagne, mais une maison mère ou un sous-traitant américain laisse une exposition matérielle au CLOUD Act. Référencé dans la catégorie CRM.

Notes d’évaluation

German Societas Europaea (weclapp SE) running customer ERP/CRM data on a Frankfurt data centre with Karlsruhe backup, both certified ISO 9001/27001/27018/27701/22301/20000-1/PCI-DSS/CSA STAR/SSAE16. Two facts cap the score. First, ownership: weclapp SE has been part of the Dutch Exact Group since 2022, and Exact is a KKR portfolio company (majority since 2019) with Silver Lake co-invested since 2021, so the ultimate control sits with US private equity and the signal is eu_hq_us_funded, not eu_owned. Second, the processor chain: the sub-processor list (verified 2026-08-26, page dated 13 August 2026) shows production storage and processing running on Amazon Web Services via the operations partner Exact Cloud Development Benelux, with Microsoft, Splunk, Akamai, ServiceNow and Secureworks (all US-owned) for monitoring and security. CLOUD Act exposure is material despite the German data region. The AVV/DPA itself is publicly downloadable as a PDF.

Constats

CLOUD Act
Actionnariat
Sous-traitants
16 · 9 US

Signaux vérifiés

Juridiction
  • Hébergement UE / adéquation: Oui
  • Opérateur UE / adéquation: Oui
  • Aucune exposition au CLOUD Act: Non
Transparence
  • DPA public: Oui
  • Sous-traitants divulgués: Oui
  • Clients open source: Non
  • Certification tierce: Oui
Aller à

À propos de weclapp

weclapp is a German cloud ERP + CRM platform operated by weclapp SE, a Societas Europaea legal form adopted to support international expansion, with offices in Frankfurt am Main, Marburg, Kitzingen, and Karlsruhe. Since September 2022 weclapp has been part of the Dutch Exact Group, which is itself a KKR portfolio company with Silver Lake co-invested as a minority since 2021, so ultimate control sits with US private equity and the ownership signal is recorded as Siège UE, financement US. Founded in 2008, the platform combines CRM, sales pipelines, quotations, invoicing, accounting, project management, and full inventory/warehouse management for SMBs and mid-market companies, with strong integrations into German marketplaces, payment providers, and shipping platforms (Amazon, eBay, Shopify, etc.). The product has won "ERP-System des Jahres" multiple times and is positioned as the first German cloud ERP with TÜV-certified data protection.

For procurement-grade EU buyers the data region is clear but the processor chain is not EU-only. Customer ERP/CRM data is stored on a Frankfurt am Main data centre with a Karlsruhe backup; both facilities carry an exceptional certification stack (ISO 9001, ISO 27001, ISO 27018, ISO 27701, ISO 22301, ISO 20000-1, PCI-DSS, CSA STAR CCM v4.0, SSAE16 / ISAE3402), while weclapp itself holds ISO 27001 and ISO 27018. The dedicated sub-processor page (last updated 13 August 2026) shows production storage and processing running on Amazon Web Services via the operations partner Exact Cloud Development Benelux, with Microsoft, Splunk, Akamai, ServiceNow and Secureworks in the monitoring and security path, so a US-owned hyperscaler does sit in the customer-data path and CLOUD Act exposure is recorded as Significative despite the German data region. Doxis AI Solutions B.V. (NL) performs OCR and automated extraction from customer documents. Google, Intercom, Productboard, Meta and LinkedIn are scoped to marketing-site analytics, advertising pixels, customer chat and product roadmapping, with SCCs cited under Art. 46 GDPR for onward transfers. Brevo (FR) handles newsletters and Personio (DE) handles application data.

Pricing in EUR: ERP Starter €39/user/month, ERP Services €86/user/month, ERP Trade €163/user/month, Enterprise custom for 10+ licences. A 30-day free trial requires no credit card and auto-cancels. Best fit: German and DACH SMBs and mid-market companies that need an integrated ERP + CRM with explicit German data residency, multi-ISO certifications, and broad e-commerce-marketplace integrations. The AVV/DPA is publicly downloadable as a bilingual DE/EN PDF, so the friction for a procurement-grade buyer is the processor chain rather than the paperwork: confirm the AWS role in the production path and the Frankfurt / Karlsruhe contractual commitments before signing.

Carte des sous-traitants · 16

Source
  • Akamai Technologies Netherlands B.V. US
    Pays-Bas

    DDoS and cyber-attack protection (via Exact)

  • Amazon Web Services EMEA SARL US
    Luxembourg

    Production storage and processing (via Exact; data in Frankfurt)

  • DigitalOcean LLC US
    États-Unis

    Hosting for weclapp webpages and knowledge base (processed in Frankfurt am Main)

  • Intercom R&D Unlimited Company US
    Irlande

    Chat feature for customer communications

  • Microsoft B.V. US
    Pays-Bas

    Microsoft Defender status monitoring (via Exact)

  • Microsoft Ireland Operations Ltd. US
    Irlande

    Storage/processing of mail, files, SharePoint, Teams (via Exact)

  • Secureworks Inc. US
    États-Unis

    24/7 Security Operations Center (via Exact)

  • ServiceNow Nederland B.V. US
    Pays-Bas

    IT process/service management and monitoring (via Exact)

  • Splunk Inc. US
    États-Unis

    Monitoring AWS cloud infrastructure (via Exact)

  • CLOUDIWAY SASU EU
    France

    Migration of mail, files, SharePoint, Teams (via Exact)

  • DevOn India-NL B.V. non-US
    Inde

    Migration and cloud environment operation support, located in India (via Exact)

  • Doxis AI Solutions B.V. EU
    Pays-Bas

    OCR text recognition and automated data extraction from customer documents

  • Exact B.V. EU
    Pays-Bas

    Support services to operate the MS Office suite

  • Exact Cloud Development Benelux B.V. EU
    Pays-Bas

    Service configuration, security monitoring, performance tracking

  • fiskaly Germany GmbH EU
    Allemagne

    Fiscalisation solution for KassenSichV

  • Product Fruits s.r.o. EU
    Tchéquie

    Product tours, surveys and in-app support

Source : liste publiée des sous-traitants de l’éditeur, lue le 26 août 2026.

9 sous-traitants sur 16 sont détenus par des capitaux américains ou établis aux États-Unis. Exposition au CLOUD Act applicable.

Référentiels & certifications

ISO/IEC 27001
Active
ISO/IEC 27018
Active

Matrice de fonctionnalités

Tableau 2Fonctionnalités de weclapp

Pipeline commercial Oui
Sync e-mail Oui
Automatisation Oui
Capture de leads Oui
Campagnes e-mail Non
Devis / facturation Oui
Téléphonie Non
Application mobile Non
Offre gratuite Non

Intégration & accès

REST API Oui
SSO (SAML / OIDC) Oui

Conformité & gouvernance

Audit log Oui
Self-host / on-prem option Non

Tarifs & paliers

à partir de 39 €/mois
Payant
Voir la page tarifs

Documents publics

  • Contrat de sous-traitance (DPA)
    www.weclapp.com/en…
    Ouvrir
  • Liste des sous-traitants
    www.weclapp.com/en…
    Ouvrir

Alternatives dans cette catégorie

  • Royaume-Uni
    Hébergé UE
    DPA public: Oui Sous-traitants: Oui Open source: Non
  • Allemagne · 24 €/mois
    Souverain UE
    DPA public: Oui Sous-traitants: Oui Open source: Non
  • Allemagne
    Souverain UE
    DPA public: Non évalué Sous-traitants: Oui Open source: Non