Aller au contenu
Vérifié indépendamment · Ré-audit trimestriel
EU VETTED

Whereby

VéRIFIé
Visioconférence · Norway
Fondé en 2013 · whereby.com ↗

Norwegian browser-based WebRTC video (ex-appear.in, Videonor-owned), no-install meetings + Embedded SDK; ISO 27001 + GDPR + HIPAA.

En bref

Whereby, dans la catégorie Visioconférence, est un service européen avec Ireland comme lieu d’hébergement et tout au plus une exposition américaine mineure et transitoire au titre du CLOUD Act.

Notes d’évaluation

Whereby (originally appear.in, spun out of Norwegian telecom Telenor as a summer intern project and now owned by Videonor, a Norwegian entity) is a browser-based WebRTC video-calling platform without installs or accounts at the meeting-attendee level; ISO 27001 certified, GDPR and HIPAA compliant, sold as both consumer-style Whereby Meetings and Whereby Embedded (API/SDK for product builders). Norway holds an EU adequacy decision (SCC-free EU↔NO transfers). CLOUD Act flag held at minor reflecting the likely AWS-EU backend (Telenor itself has expanded sovereign-cloud partnerships with AWS) and the absence of explicit hosting-provider disclosure at audit: EU-adequate jurisdiction, ISO 27001 certified, public DPA, but hosting provider not publicly disclosed and no confirmed EU ownership.

CLOUD ACT
OWNERSHIP
SUB-PROCS
0 aucun divulgué
Signaux vérifiés
Juridiction
  • Hébergement UE / adéquation
  • Opérateur UE / adéquation
  • Aucune exposition au CLOUD Act
Transparence
  • DPA public
  • Sous-traitants divulgués
  • Clients open source
  • Certification tierce
JUMP TO
OVERVIEW

À propos de Whereby

Whereby is a Norwegian browser-based video-meeting platform originally launched as appear.in in 2013 as a summer-intern project inside the Norwegian telecom group Telenor. The product grew a strong user base internationally before being spun out and acquired by Videonor (a Norwegian holding entity) with the brand renamed to Whereby. The core proposition is unusual in the video-conferencing category: no installs, no accounts for meeting attendees, just a URL that opens in any modern browser via WebRTC. The product surface is two-tier: Whereby Meetings for individuals and teams (consumer + business plans), and Whereby Embedded, an API/SDK that lets product builders embed Whereby's WebRTC video into their own applications, competing directly with Twilio Video, Daily, Agora, and Zoom SDK.

Compliance posture is solid for a consumer-friendly video tool: ISO/IEC 27001 certified, GDPR-compliant by design, HIPAA-compliant for US-healthcare customers, and a privacy-first product philosophy carried over from the Telenor engineering culture. The legal entity sits in Norway (EEA member, EU adequacy decision under Art. 45 GDPR, SCC-free for EU↔NO transfers). The underlying infrastructure is not publicly named at audit but, given Telenor's well-documented AWS sovereign-cloud partnership (Telenor's Skygard data centre in Oslo runs AWS sovereign-by-design technology), the most-likely scenario is AWS Stockholm or similar EU-region, which keeps the CLOUD Act flag at minor rather than none under the directory's strict-ownership stance.

Pricing is freemium with a long history of generous free tiers (free unlimited 1-on-1, free group meetings up to 45 minutes); paid plans add custom rooms, branding, longer meetings, advanced controls, recording, and analytics. Embedded pricing is usage-based per video-minute. Best fit: agencies and consultancies needing easy no-install client video calls, educational and healthcare workflows that benefit from no-account meetings, developers building video into their own products via Embedded, and Norwegian / Nordic / European buyers who specifically want a Norwegian-rooted EU-friendly alternative to Zoom and Google Meet.

SUB-PROCESSORS

Carte des sous-traitants · aucun divulgué

Source ↗
L'éditeur déclare zéro sous-traitant. Tout le traitement des données se fait en interne.
CERTIFICATIONS

Référentiels & certifications

ISO/IEC 27001
ACTIVE
FEATURES

Matrice de fonctionnalités

Auto-hébergeable Non
Participants max 200 participants
Partage d’écran Oui
Enregistrement Oui
Chiffrement de bout en bout Non
Breakout rooms Oui
Accès navigateur (sans app) Oui
INTéGRATION & ACCèS
REST API Yes
SSO (SAML / OIDC) Yes
CONFORMITé & GOUVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Tarifs & paliers

FREEMIUM
Tarifs sur mesure

Contactez l’éditeur pour les tarifs par palier ou volume.

Voir la page tarifs ↗
PUBLIC DOCUMENTS

Documents publics

  • Contrat de sous-traitance (DPA)
    whereby.com/information…
    Ouvrir ↗
  • Liste des sous-traitants
    whereby.com/information…
    Ouvrir ↗
  • Conditions d'utilisation
    whereby.com/information…
    Ouvrir ↗
ALTERNATIVES

Alternatives dans cette catégorie

Element (Matrix)
United Kingdom · Fondé en 2017
HéBERGé UE

UK-headquartered open-source Matrix protocol commercialisation; powers Bundeswehr BwMessenger + French Tchap + NATO + UN.

DPA public Sous-traitants Open source
FROM
CLOUD ACT
MATERIAL
kMeet (Infomaniak)
Switzerland · Fondé en 1994
SOUVERAIN UE

Free Swiss browser-based video meetings (Infomaniak, Geneva, since 1994); no guest account, own Swiss DCs, ISO 27001, no CLOUD Act.

DPA public Sous-traitants Open source
FROM
CLOUD ACT
NONE
Olvid
France · Fondé en 2019
BASé UE

French E2EE messenger (Olvid SAS, Paris, founded 2019), ANSSI CSPN certified, mandated for French government ministers; no phone number/identifier, content + metadata encrypted.

DPA public Sous-traitants Open source
FROM
€10/mois
CLOUD ACT
MINOR