SaaS made in Germany
Germany has one of Europe's deepest benches of independent SaaS: Hetzner, IONOS and STACKIT in cloud infrastructure; Nextcloud, luckycloud and STRATO HiDrive in storage; Tuta, Mailbox.org and Posteo in private email; and Lexware in accounting. These are all companies headquartered in Germany, but origin is only one signal. Ownership, hosting region and CLOUD Act exposure are recorded separately on each listing, because a German company can still route data through a US sub-processor.
The products on this page are SaaS companies headquartered or incorporated in Germany. That origin matters for buyers who weigh German jurisdiction or a preference for German-owned vendors. But on EU Vetted, origin is deliberately kept separate from two other signals you should evaluate alongside it: where the service actually hosts data, and its exposure to the US CLOUD Act. A German company that routes data through a US CDN or managed-database layer can re-introduce exposure, so we record ownership, hosting region and CLOUD Act exposure as distinct fields on every listing. Hetzner, for instance, is German-owned and hosts in Germany (CLOUD Act exposure: None). The German catalog spans cloud infrastructure, storage, private email, accounting, CRM, email marketing, web analytics and sovereign AI, one of the broadest national selections in the directory.
Accounting
-
Lexware
EU-HostedLexware Office: cloud accounting from Haufe Group (German family-owned), DSGVO + GoBD + TÜV, 400K+ DACH customers.
DE Public DPA: Yes Sub-processors: Yes Open source: No €7.90 /mo -
sevdesk
EU-HostedGerman DACH-focused SMB accounting / invoicing SaaS (Offenburg, est. 2013); now a Cegid Company under a Silver Lake-controlled French parent.
DE Public DPA: Yes Sub-processors: Yes Open source: No €11.90 /mo
CAPTCHA & bot protection
-
CaptchaFox
EU-BasedScoria Labs GmbH, Fokkerstr. 2, 85399 Hallbergmoos, Germany (HRB 283108, Munich Local Court)Munich-area CAPTCHA (Scoria Labs GmbH) with a published two-name sub-processor chain for the widget: Hetzner and bunny.net, both EU, from 15 EUR/month.
DE Public DPA: Not assessed Sub-processors: Yes Open source: No €15 /mo -
TrustCaptcha
EU-BasedTrustcaptcha GmbH, Hans-Böckler-Straße 32, 80995 Munich, Germany (HRB 287710, Munich Local Court)Munich proof-of-work CAPTCHA (Trustcaptcha GmbH) on Hetzner Nuremberg, from 8 EUR/month, with audit logs but no published DPA or sub-processor list.
DE Public DPA: Not assessed Sub-processors: No Open source: No €8 /mo -
Friendly Captcha
EU-HostedFriendly Captcha GmbH, Wörthsee, Germany (HRB 260542, Munich Local Court)German cookie-free proof-of-work CAPTCHA (Friendly Captcha GmbH) from 9 EUR/month, but the DPA and its sub-processor list are password-protected and EU-only hosting is a paid tier.
Public DPA: No Sub-processors: No Open source: No €9 /mo
Cloud & hosting
-
Hetzner
EU-SovereignHetzner Online GmbHFamily-founded German hyperscaler alternative (1997), EU DCs in Falkenstein, Nuremberg, Helsinki; ISO 27001 + BSI C5 Type 2; from €5.49/month.
DE Public DPA: Yes Sub-processors: Yes Open source: No €5.49 /mo -
IONOS
EU-SovereignGerman publicly-listed cloud (IONOS Group SE, Frankfurt + Berlin DCs), first DE provider with both BSI C5 + IT-Grundschutz, Gaia-X member.
DE Public DPA: Yes Sub-processors: Yes Open source: No €5.04 /mo -
STACKIT
EU-SovereignGerman sovereign cloud built by Schwarz Digits (Lidl/Kaufland parent), 4 EU DCs, EU Cloud III €180M winner with SEAL-3 highest rating.
DE Public DPA: Yes Sub-processors: No Open source: No -
T Cloud Public (formerly Open Telekom Cloud)
EU-SovereignDeutsche Telekom's OpenStack public cloud (T-Systems), Biere + Magdeburg DCs, ISO 27001 + BSI C5 + TISAX; rebranded from Open Telekom Cloud.
DE Public DPA: Yes Sub-processors: Yes Open source: No -
netcup
EU-BasedGerman budget VPS and dedicated-server host (netcup GmbH, Karlsruhe; part of Austria's founder-owned Anexia group since 2016); ISO 27001/27701; from €1.84/month.
DE Public DPA: Yes Sub-processors: No Open source: No €1.84 /mo -
Contabo
EU-HostedMunich-based budget VPS / dedicated hosting (Contabo GmbH); KKR + Oakley-owned since 2022; 11 global DCs; VPS from €5.50/month on a 24-month term.
DE Public DPA: No Sub-processors: No Open source: No €5.50 /mo (billed annually)
Cookie consent
-
ConsentManager
EU-SovereignEU-hosted CMP on Plusserver (DE) and UpCloud (FI) with no US processor in its published chain; IAB TCF v2.3 ID 31, 100K+ websites, from €23/mo; now a subsidiary of iubenda.
DE Public DPA: Yes Sub-processors: Yes Open source: No €23 /mo -
Usercentrics
EU-HostedMunich-based CMP (founded 2017); 2.4M sites / 8.8B monthly consents; merged with Cookiebot in September 2021; ISO 27001 + SOC 2, runs on Google Cloud (Frankfurt and Belgium).
DE Public DPA: Yes Sub-processors: Yes Open source: No €7 /mo
CRM
-
centralstationCRM
EU-SovereignCologne-based German SMB CRM (42he GmbH), all-German hosting on Hetzner + Core-Backbone + Telekom, free tier for 3 users.
DE Public DPA: Yes Sub-processors: Yes Open source: No €24 /mo -
combit CRM
EU-SovereignKonstanz-based German CRM (combit Software, since 1989), founder-owned, on-prem + cloud, German Mittelstand vendor.
DE Public DPA: Not assessed Sub-processors: Yes Open source: No -
weclapp
EU-HostedGerman cloud ERP + CRM (weclapp SE), Frankfurt and Karlsruhe data centres, ISO 27001/27018, part of the Dutch Exact Group under US private-equity control.
DE Public DPA: Yes Sub-processors: Yes Open source: No €39 /mo
Docs & wikis
-
HumHub
EU-SovereignMunich-based AGPLv3 open-source enterprise social network + intranet (HumHub GmbH & Co. KG, 2015), 4,500+ organisations, self-hostable on EU infra.
DE Public DPA: Not assessed Sub-processors: Yes Open source: Yes €144 /mo -
Nuclino
EU-HostedGrünwald-based founder-owned lightweight team wiki (Nuclino GmbH, 2015), German data residency, ISO 27001/27018 + SOC 2 Type II, 12,000+ teams incl. NASA, MIT.
DE Public DPA: Not assessed Sub-processors: Yes Open source: No
Email marketing
-
Maileon
EU-SovereignGerman enterprise email marketing (XQueue GmbH, Offenbach, 2002), ISO 27001, EU data centres, 3k+ customers, 10 offices worldwide.
DE Public DPA: Yes Sub-processors: No Open source: No -
CleverReach
EU-HostedGerman email marketing platform with EU-only customer data storage in Germany and Ireland and a permanently free Lite tier.
DE Public DPA: Yes Sub-processors: Yes Open source: No €15 /mo -
Keila
EU-Basedself-host EU-SovereignKeila GmbH, Hauptstraße 10, 95517 Seybothenreuth, Germany; HRB 8676 (Amtsgericht Bayreuth); VAT DE815236863; Managing Director Philipp SchmiederGerman open-source (AGPLv3) newsletter platform; public DPA + sub-processors, EU-only data (Hetzner DE + Scaleway FR), self-hostable. A privacy-first Mailchimp alternative.
DE Public DPA: Yes Sub-processors: Yes Open source: Yes €8 /mo -
rapidmail
EU-SovereignFreiburg-based German email marketing tool hosting customer data exclusively on German servers, no public-cloud hyperscaler.
DE Public DPA: Yes Sub-processors: Yes Open source: No -
Inxmail
EU-BasedFreiburg-based premium German enterprise email marketing platform with ISO 27001 (TÜV Rheinland) and EU-only hosting.
DE Public DPA: No Sub-processors: No Open source: No €200 /mo
File sharing
-
Nextcloud
EU-SovereignGerman open-source content-collaboration platform (Nextcloud GmbH, Stuttgart, 2016); fully self-hostable + managed Nextcloud One hosted in DE.
DE Public DPA: Not assessed Sub-processors: Yes Open source: Yes €6 /mo (billed annually) -
luckycloud
EU-SovereignBerlin-based German zero-knowledge cloud (luckycloud GmbH, 2015), own DCs in Berlin/Nuremberg/Frankfurt, ISO 27001 BSI.
DE Public DPA: Yes Sub-processors: Yes Open source: No -
Filen
EU-BasedGerman zero-knowledge E2E cloud (Filen Cloud Dienste UG, Recklinghausen, 2021), Tier IV ISO 27001 DCs, no US data, open source apps.
DE Public DPA: No Sub-processors: Yes Open source: Yes €2 /mo -
STRATO HiDrive
EU-SovereignGerman cloud storage (STRATO GmbH, United Internet/IONOS group), two German data centres, ISO 27001 + Trusted Cloud, optional zero-knowledge E2E.
DE Public DPA: Yes Sub-processors: Yes Open source: No €6 /mo -
leitzcloud
EU-SovereignLC by vBoxx GmbHGerman-operated (LC by vBoxx GmbH) Leitz-branded business cloud on the group's own hardware: primary site near Frankfurt, backup site in the Netherlands since May 2026, AVV through the customer portal.
DE Public DPA: Not assessed Sub-processors: Yes Open source: No €9.90 /mo -
Hetzner Storage Share
EU-SovereignHetzner Online GmbHHetzner Online GmbH's managed Nextcloud, single data centre in Falkenstein, Germany; ISO 27001 + BSI C5 Type 2 certified, from €4.29/month for 1 TB, no annual contract.
DE Public DPA: Yes Sub-processors: Yes Open source: No €4.29 /mo
Forms & surveys
-
LimeSurvey
EU-Basedself-host EU-SovereignGerman GPL-licensed open-source survey platform (LimeSurvey GmbH Hamburg, project since 2003), self-host first.
DE Public DPA: Not assessed Sub-processors: Yes Open source: Yes €34 /mo -
Formbricks
EU-Hostedself-host EU-BasedGerman open-source experience-management platform (Formbricks GmbH, Kiel) for link, website and in-product surveys; AGPLv3, self-hostable.
DE Public DPA: Yes Sub-processors: Yes Open source: Yes €63 /mo
Git hosting
-
Codeberg
EU-SovereignCodeberg e.V. (eingetragener Verein), Berlin, GermanyBerlin non-profit (Codeberg e.V.) running the open-source Forgejo forge: free, EU-hosted, community-governed GitHub alternative.
DE Public DPA: No Sub-processors: No Open source: Yes -
Planio
EU-SovereignPlanio GmbH, Berlin, GermanyBerlin-based hosted Redmine (Planio GmbH) with unlimited Git and SVN repositories, on the company's own German servers; account-gated Art. 28 DPA.
DE Public DPA: No Sub-processors: No Open source: No €19 /mo
Password managers
-
heylogin
EU-SovereignGerman passwordless zero-knowledge password manager (heylogin GmbH, Braunschweig), all-German sub-processor stack, ISO 27001:2022, no CLOUD Act exposure.
DE Public DPA: Yes Sub-processors: Yes Open source: No €4 /mo -
KeePassXC
EU-SovereignGPLv3 fully-offline desktop password manager (KeePassXC Team, Weimar DE, est. 2016): no cloud, no servers, no telemetry; structurally zero CLOUD Act exposure.
Public DPA: Not assessed Sub-processors: No Open source: Yes -
LC-Pass
EU-SovereignLC by vBoxx GmbHEU-hosted business password manager from LC by vBoxx GmbH (primary site near Frankfurt); collections, group sharing, central management, unlimited devices; a 1Password / LastPass alternative.
DE Public DPA: Not assessed Sub-processors: No Open source: No €3.99 /mo -
Padloc
EU-Hostedself-host EU-SovereignGerman AGPLv3 open-source password manager (MaKleSoft, Bavaria), audited 3×, self-hostable, but hosted cloud uses Stripe + defunct Privacy Shield ref.
Public DPA: No Sub-processors: No Open source: Yes €3 /mo -
Psono
EU-Hostedself-host EU-SovereignGerman Apache-2.0 open-source team password manager (esaqa GmbH), self-hostable on EU infrastructure, Cure53-audited 2026, free up to 10 users.
DE Public DPA: Not assessed Sub-processors: Yes Open source: Yes €0 /mo
Private email
-
Tuta
EU-SovereignHannover-based end-to-end encrypted mail (formerly Tutanota); post-quantum crypto, own servers in ISO 27001 certified German data centres.
DE E2E: Yes Public DPA: No Sub-processors: Yes Open source: No €3 /mo (billed annually) -
Mailbox.org
EU-SovereignBerlin-based private email + drive + meet + office bundle (Heinlein Support GmbH); ISO 27001 + BSI C5, €1/mo entry.
DE E2E: No Public DPA: Not assessed Sub-processors: Yes Open source: No €1 /mo -
Posteo
EU-SovereignBerlin one-person-shop privacy email at €1/mo (Posteo e.K., since 2009); anonymous signup, BSI TR-03108 certified.
DE E2E: No Public DPA: Not assessed Sub-processors: Yes Open source: No €1 /mo -
LC-Connect
EU-SovereignLC by vBoxx GmbHBusiness email, calendar, contacts, tasks, notes and video meetings from LC by vBoxx GmbH, on the group's own hardware near Frankfurt with a Dutch backup site; an integrated Microsoft 365 / Outlook alternative (TLS, not E2E).
DE E2E: No Public DPA: Not assessed Sub-processors: No Open source: No €4.99 /mo
Project management
-
SeaTable
EU-SovereignGerman no-code database + spreadsheet hybrid (SeaTable GmbH, Mainz, HRB 49723), all-EU hosting on Exoscale + Hetzner, public DPA, self-hostable.
DE Public DPA: Yes Sub-processors: Yes Open source: No €7 /mo (billed annually) -
Stackfield
EU-SovereignMunich collaboration suite (Stackfield GmbH, 2012) with per-room end-to-end encryption; ISO 27001 + BSI C5, German data centres, on-premise edition.
DE Public DPA: Not assessed Sub-processors: Yes Open source: No €9 /mo (billed annually) -
factro
EU-SovereignGerman PM software (factro by Schuchert Managementberatung, Bochum), 100% Made in Germany, free tier for up to 3 users.
DE Public DPA: Not assessed Sub-processors: No Open source: No €19.99 /mo -
HansaChat
EU-BasedSole proprietorship of Igor Tverdokhleb (no GmbH/HRB/VAT shown in imprint), Barkentinenstr. 20, 23558 Lübeck, GermanyLübeck-based company chat with flat per-workspace pricing (not per-seat); Hetzner DE hosting only, all-EU sub-processors, SSO on all plans, a Slack alternative.
DE Public DPA: No Sub-processors: Yes Open source: No €99 /mo -
MeisterTask
EU-HostedGerman Kanban + tasks + docs (MeisterLabs, Munich-area, since 2006), hosted on Google Cloud in Frankfurt, ISO 27001, 10k+ companies including Allianz / LBBW.
DE Public DPA: Yes Sub-processors: Yes Open source: No €12.50 /mo (billed annually)
Sovereign AI
-
Aleph Alpha
EU-Hostedself-host EU-BasedHeidelberg-based sovereign-AI lab (Pharia platform); merger with Canadian Cohere announced April 2026: Aleph Alpha shareholders to receive ~10% of combined ~$20B entity.
DE Public DPA: No Sub-processors: No Open source: No -
Black Forest Labs
EU-Hostedself-host EU-BasedFreiburg-based German image-generation lab (FLUX models, Stable Diffusion creators), but heavily US-VC-funded; open-weight FLUX [schnell] under Apache 2.0.
Public DPA: No Sub-processors: No Open source: Yes -
DeepL
EU-HostedDeepL SE (Amtsgericht Köln HRB 104617, Cologne, Germany), contracting party for DeepL Pro and the DeepL API; group entities include DeepL AI GmbH (Cologne), DeepL US Inc. (Delaware) and DeepL Japan GKCologne-built AI translation, writing and speech-translation platform (Translator, Write, Voice, API) with C5 and ISO 27001; paid content runs on AWS by default unless the EU residency add-on is bought.
SE Public DPA: Not assessed Sub-processors: No Open source: No €7.49 /mo (billed annually) -
KugelAudio
EU-Hostedself-host EU-BasedKugelAudio GmbH (Amtsgericht Charlottenburg HRB 277989 B, Berlin, Germany), wholly owned since April 2026 by KugelAudio Inc. (Delaware corporation, file no. 10592822, San Francisco, USA)Berlin-built real-time text-to-speech API (39 languages, voice cloning, MIT open-weights model); GPU providers established in the EU by default, but the GmbH is a German operating company wholly owned by a US parent, KugelAudio Inc. (Delaware).
FI Public DPA: Yes Sub-processors: Yes Open source: Yes -
Langdock
EU-Hostedself-host EU-SovereignLangdock GmbH (Amtsgericht Charlottenburg HRB 254499 B, Berlin, Germany), wholly owned since 11 August 2026 by Langdock Holding SE (HRB 283041 B, Berlin); previously by Langdock Inc. (Delaware)Berlin-built enterprise AI workspace (chat, agents, workflows, API) for OpenAI, Anthropic, Google and Mistral models; EU regions by default on Azure Frankfurt, parent moved from Delaware to a Berlin SE in 2026.
DE Public DPA: Yes Sub-processors: Yes Open source: No €23.20 /mo (billed annually) -
MeinGPT
EU-HostedSelectCode GmbH (Amtsgericht München HRB 234337, Oskar-von-Miller-Straße 11, 82008 Unterhaching, Germany; managing directors Florian Baader and Reiner Conrad; no parent company found)AI workspace for German SMEs by SelectCode GmbH (Munich area): multi-model chat, assistants, RAG and API on Hetzner Germany; default prompts go to Azure OpenAI and Google Vertex EU regions.
DE Public DPA: Yes Sub-processors: Yes Open source: No €18 /mo (billed annually) -
Privatemode
EU-Basedself-host EU-SovereignEdgeless Systems GmbH (Amtsgericht Bochum HRB 18566, Stadionring 1, 44791 Bochum, Germany); founder-controlled, no parent companyConfidential AI chat and OpenAI-compatible API from Bochum: open models run in attested, memory-encrypted GPU enclaves on Scaleway and Lyceum in the EU, with prompts unreadable to the operator.
FR Public DPA: Yes Sub-processors: Yes Open source: Yes
Web analytics
-
Pirsch Analytics
EU-SovereignGerman cookieless server-side web analytics on Hetzner Gunzenhausen with bilingual public DPA and Schrems II-aligned posture.
DE Public DPA: Yes Sub-processors: Yes Open source: No $6 /mo -
TelemetryDeck
EU-HostedGerman privacy-first mobile + web app analytics with on-device anonymisation, EN/DE DPA, and a transparent sub-processors list.
DE Public DPA: Yes Sub-processors: Yes Open source: No €9 /mo -
Trackboxx
EU-BasedGerman sole-proprietor cookieless analytics, B2B-only, with daily-rotating anonymisation and BunnyCDN script delivery.
DE Public DPA: Yes Sub-processors: Yes Open source: No €5 /mo -
Wide Angle Analytics
EU-SovereignBerlin-based privacy-first web analytics on a European (OVHcloud Open Trusted Cloud) stack with strict GDPR posture.
FR Public DPA: Yes Sub-processors: Yes Open source: No €10 /mo