# EU Vetted

> Directory of EU and privacy-first SaaS alternatives to US software. Each listing exposes ownership signal, hosting country, sub-processors, CLOUD Act exposure, and factual compliance signals (public DPA, sub-processor disclosure, end-to-end encryption, third-party certifications) as independent signals.

## How to read a listing

Two parallel signals are exposed per listing — never conflated:

- `ownership_signal`: eu_owned, eu_hq_us_funded, us_owned, other
- factual compliance signals: each listing exposes EU/adequacy hosting, EU ownership, CLOUD Act exposure, public DPA, sub-processor disclosure, end-to-end encryption, and third-party certifications, each marked verified / not / not-assessed

CLOUD Act exposure is a third independent signal. A US-incorporated entity is `direct`. EU-incorporated with US parent or US hyperscaler primary storage is `material`. EU-hosted with one or two US transient sub-processors (Cloudflare CDN, Stripe billing) without data-at-rest exposure is `minor`. EU-hosted with no US sub-processors of consequence is `none`.

## Categories

- [Password managers](https://euvetted.com/category/password-managers)
- [File sharing](https://euvetted.com/category/file-sharing)
- [Private email](https://euvetted.com/category/private-email)
- [VPN](https://euvetted.com/category/vpn)
- [Email marketing](https://euvetted.com/category/email-marketing)
- [CRM](https://euvetted.com/category/crm)
- [Payments](https://euvetted.com/category/payments)
- [Cloud & hosting](https://euvetted.com/category/cloud-hosting)
- [Web analytics](https://euvetted.com/category/web-analytics)
- [Accounting](https://euvetted.com/category/accounting)
- [Forms & surveys](https://euvetted.com/category/forms-surveys)
- [Project management](https://euvetted.com/category/project-management)
- [Helpdesk](https://euvetted.com/category/helpdesk)
- [Calendar booking](https://euvetted.com/category/calendar-booking)
- [Docs & wikis](https://euvetted.com/category/docs-wikis)
- [Video conferencing](https://euvetted.com/category/video-conferencing)
- [E-signature](https://euvetted.com/category/e-signature)
- [HR & people](https://euvetted.com/category/hr)
- [Cookie consent](https://euvetted.com/category/cookie-consent)
- [Headless CMS](https://euvetted.com/category/headless-cms)
- [E-commerce](https://euvetted.com/category/e-commerce)
- [Sovereign AI](https://euvetted.com/category/sovereign-ai)

## Key pages

- Alternatives to US tools: https://euvetted.com/alternatives — side-by-side comparisons of European alternatives, with factual compliance signals
- Scoring methodology: https://euvetted.com/how-we-score — how the factual compliance signals and CLOUD Act exposure tiers are assigned
- Editorial standards: https://euvetted.com/editorial — what is editorial, what is paid, and how conflicts of interest are handled
- Funding transparency: https://euvetted.com/transparency — how the site is funded, what money can never buy, and the current list of affiliate partnerships

## Methodology

- Hosting country is determined by data-center IP ASN, not corporate HQ. Cloudflare US in front of an EU SaaS counts as US data exposure for plain HTTP.
- Sub-processors matter more than the SaaS itself. A "European" CRM that pipes data to Segment (US) → AWS US for analytics is not Schrems-safe.
- DPA must be publicly linked. A DPA only available on enterprise plans is marked as not publicly available.
- The factual compliance signals are independent of paid placement. Featured listings are paid; the signals never are.
- Re-verification quarterly with visible "last verified" timestamps on every listing.

## Languages

Available in English, German, and French. URL prefix denotes locale: `/de/...` for German, `/fr/...` for French. English is the default (no prefix).

## Crawler policy

AI crawlers are explicitly permitted — search/citation (OAI-SearchBot, ChatGPT-User, PerplexityBot, Perplexity-User, Claude-SearchBot, Claude-User) and training (GPTBot, ClaudeBot, Google-Extended, Applebot-Extended, CCBot). Machine-readable policy: https://euvetted.com/robots.txt.

## Contact

- Website: https://euvetted.com
- Sitemap: https://euvetted.com/sitemap.xml
- Full content dump for LLMs (single-file, per llmstxt.org spec): https://euvetted.com/llms-full.txt