SaaS made in Germany
In short Germany has one of Europe's deepest benches of independent SaaS: Hetzner, IONOS and STACKIT in cloud infrastructure; Nextcloud, luckycloud and STRATO HiDrive in storage; Tuta, Mailbox.org and Posteo in private email; and Lexware in accounting. These are all companies headquartered in Germany, but origin is only one signal. Ownership, hosting region and CLOUD Act exposure are recorded separately on each listing, because a German company can still route data through a US sub-processor.
The products on this page are SaaS companies headquartered or incorporated in Germany. That origin matters for buyers who weigh German jurisdiction or a preference for German-owned vendors. But on EU Vetted, origin is deliberately kept separate from two other signals you should evaluate alongside it: where the service actually hosts data, and its exposure to the US CLOUD Act. A German company that routes data through a US CDN or managed-database layer can re-introduce exposure, so we record ownership, hosting region and CLOUD Act exposure as distinct fields on every listing. Hetzner, for instance, is German-owned and hosts in Germany (CLOUD Act exposure: None). The German catalog spans cloud infrastructure, storage, private email, accounting, CRM, email marketing, web analytics and sovereign AI, one of the broadest national selections in the directory.
Accounting
-
Lexware
EU-HOSTEDLexware Office: cloud accounting from Haufe Group (German family-owned), DSGVO + GoBD + TÜV, 400K+ DACH customers.
DE Public DPA Sub-processors Open source 0 sub-procs €7.9 /mo -
sevdesk
EU-HOSTEDGerman DACH-focused SMB accounting / invoicing SaaS (Offenburg, est. 2013); now a Cegid Company under a Silver Lake-controlled French parent.
DE Public DPA Sub-processors Open source 0 sub-procs €11.9 /mo
CAPTCHA & bot protection
-
CaptchaFox
EU-BASEDScoria Labs GmbH, Fokkerstr. 2, 85399 Hallbergmoos, Germany (HRB 283108, Munich Local Court)Munich-area CAPTCHA (Scoria Labs GmbH) with a published two-name sub-processor chain for the widget: Hetzner and bunny.net, both EU, from 15 EUR/month.
DE Public DPA Sub-processors Open source 0 sub-procs €15 /mo -
TrustCaptcha
EU-BASEDTrustcaptcha GmbH, Hans-Böckler-Straße 32, 80995 Munich, Germany (HRB 287710, Munich Local Court)Munich proof-of-work CAPTCHA (Trustcaptcha GmbH) on Hetzner Nuremberg, from 8 EUR/month, with audit logs but no published DPA or sub-processor list.
DE Public DPA Sub-processors Open source 0 sub-procs €8 /mo -
Friendly Captcha
EU-HOSTEDFriendly Captcha GmbH, Wörthsee, Germany (HRB 260542, Munich Local Court)German cookie-free proof-of-work CAPTCHA (Friendly Captcha GmbH) from 9 EUR/month, but the DPA is password-protected, no sub-processors are named and EU-only hosting is a paid tier.
Public DPA Sub-processors Open source 0 sub-procs €9 /mo
Cloud & hosting
-
Hetzner
EU-SOVEREIGNHetzner Online GmbHFamily-founded German hyperscaler alternative (1997), EU DCs in Falkenstein, Nuremberg, Helsinki; ISO 27001 + BSI C5 Type 2; from €5.49/month.
DE Public DPA Sub-processors Open source 0 sub-procs €5.49 /mo -
IONOS
EU-SOVEREIGNGerman publicly-listed cloud (IONOS Group SE, Frankfurt + Berlin DCs), first DE provider with both BSI C5 + IT-Grundschutz, Gaia-X member.
DE Public DPA Sub-processors Open source 0 sub-procs €5.04 /mo -
STACKIT
EU-SOVEREIGNGerman sovereign cloud built by Schwarz Digits (Lidl/Kaufland parent), 4 EU DCs, EU Cloud III €180M winner with SEAL-3 highest rating.
DE Public DPA Sub-processors Open source 0 sub-procs -
T Cloud Public (formerly Open Telekom Cloud)
EU-SOVEREIGNDeutsche Telekom's OpenStack public cloud (T-Systems), Biere + Magdeburg DCs, ISO 27001 + BSI C5 + TISAX; rebranded from Open Telekom Cloud.
DE Public DPA Sub-processors Open source 0 sub-procs -
netcup
EU-BASEDGerman budget VPS and dedicated-server host (netcup GmbH, Karlsruhe; part of Austria's founder-owned Anexia group since 2016); ISO 27001/27701; from €1.84/month.
DE Public DPA Sub-processors Open source 0 sub-procs €1.84 /mo -
Contabo
EU-HOSTEDMunich-based budget VPS / dedicated hosting (Contabo GmbH); KKR + Oakley-owned since 2022; 11 global DCs; VPS from €5.50/month on a 24-month term.
DE Public DPA Sub-processors Open source 0 sub-procs €5.5 /mo (billed annually)
Cookie consent
-
ConsentManager
EU-SOVEREIGNEU-hosted CMP on Plusserver (DE) and UpCloud (FI) with no US processor in its published chain; IAB TCF v2.3 ID 31, 100K+ websites, from €23/mo; now a subsidiary of iubenda.
DE Public DPA Sub-processors Open source 0 sub-procs €23 /mo -
Usercentrics
EU-HOSTEDMunich-based CMP (founded 2017); 2.4M sites / 8.8B monthly consents; merged with Cookiebot in September 2021; ISO 27001 + SOC 2, runs on Google Cloud (Frankfurt and Belgium).
DE Public DPA Sub-processors Open source 0 sub-procs €7 /mo
CRM
-
centralstationCRM
EU-SOVEREIGNCologne-based German SMB CRM (42he GmbH), all-German hosting on Hetzner + Core-Backbone + Telekom, free tier for 3 users.
DE Public DPA Sub-processors Open source 0 sub-procs €24 /mo -
combit CRM
EU-SOVEREIGNKonstanz-based German CRM (combit Software, since 1989), founder-owned, on-prem + cloud, German Mittelstand vendor.
DE Public DPA Sub-processors Open source 0 sub-procs -
weclapp
EU-HOSTEDGerman cloud ERP + CRM (weclapp SE), Frankfurt and Karlsruhe data centres, ISO 27001/27018, part of the Dutch Exact Group under US private-equity control.
DE Public DPA Sub-processors Open source 0 sub-procs €39 /mo
Docs & wikis
-
HumHub
EU-SOVEREIGNMunich-based AGPLv3 open-source enterprise social network + intranet (HumHub GmbH & Co. KG, 2015), 4,500+ organisations, self-hostable on EU infra.
DE Public DPA Sub-processors Open source 0 sub-procs €144 /mo -
Nuclino
EU-HOSTEDGrünwald-based founder-owned lightweight team wiki (Nuclino GmbH, 2015), German data residency, ISO 27001/27018 + SOC 2 Type II, 12,000+ teams incl. NASA, MIT.
DE Public DPA Sub-processors Open source 0 sub-procs
Email marketing
-
Maileon
EU-SOVEREIGNGerman enterprise email marketing (XQueue GmbH, Offenbach, 2002), ISO 27001, EU data centres, 3k+ customers, 10 offices worldwide.
DE Public DPA Sub-processors Open source 0 sub-procs -
CleverReach
EU-HOSTEDGerman email marketing platform with EU-only customer data storage in Germany and Ireland and a permanently free Lite tier.
DE Public DPA Sub-processors Open source 0 sub-procs €15 /mo -
Keila
EU-BASEDself-host EU-SovereignKeila GmbH, Hauptstraße 10, 95517 Seybothenreuth, Germany; HRB 8676 (Amtsgericht Bayreuth); VAT DE815236863; Managing Director Philipp SchmiederGerman open-source (AGPLv3) newsletter platform; public DPA + sub-processors, EU-only data (Hetzner DE + Scaleway FR), self-hostable. A privacy-first Mailchimp alternative.
DE Public DPA Sub-processors Open source 0 sub-procs €8 /mo -
rapidmail
EU-SOVEREIGNFreiburg-based German email marketing tool hosting customer data exclusively on German servers, no public-cloud hyperscaler.
DE Public DPA Sub-processors Open source 0 sub-procs -
Inxmail
EU-BASEDFreiburg-based premium German enterprise email marketing platform with ISO 27001 (TÜV Rheinland) and EU-only hosting.
DE Public DPA Sub-processors Open source 0 sub-procs €200 /mo
File sharing
-
Nextcloud
EU-SOVEREIGNGerman open-source content-collaboration platform (Nextcloud GmbH, Stuttgart, 2016); fully self-hostable + managed Nextcloud One hosted in DE.
DE Public DPA Sub-processors Open source 0 sub-procs €6 /mo (billed annually) -
luckycloud
EU-SOVEREIGNBerlin-based German zero-knowledge cloud (luckycloud GmbH, 2015), own DCs in Berlin/Nuremberg/Frankfurt, ISO 27001 BSI.
DE Public DPA Sub-processors Open source 0 sub-procs -
Filen
EU-BASEDGerman zero-knowledge E2E cloud (Filen Cloud Dienste UG, Recklinghausen, 2021), Tier IV ISO 27001 DCs, no US data, open source apps.
DE Public DPA Sub-processors Open source 0 sub-procs €2 /mo -
STRATO HiDrive
EU-SOVEREIGNGerman cloud storage (STRATO GmbH, United Internet/IONOS group), two German data centres, ISO 27001 + Trusted Cloud, optional zero-knowledge E2E.
DE Public DPA Sub-processors Open source 0 sub-procs €6 /mo -
leitzcloud
EU-SOVEREIGNGerman-operated (LC by vBoxx GmbH, Frankfurt) Leitz-branded business cloud on its own German data centres (Frankfurt + Mannheim), ISO 27001 (TÜV Nord), AVV available on request.
DE Public DPA Sub-processors Open source 0 sub-procs €8.8 /mo -
Hetzner Storage Share
EU-SOVEREIGNHetzner Online GmbHHetzner Online GmbH's managed Nextcloud, single data centre in Falkenstein, Germany; ISO 27001 + BSI C5 Type 2 certified, from €4.29/month for 1 TB, no annual contract.
DE Public DPA Sub-processors Open source 0 sub-procs €4.29 /mo
Forms & surveys
-
LimeSurvey
EU-BASEDself-host EU-SovereignGerman GPL-licensed open-source survey platform (LimeSurvey GmbH Hamburg, project since 2003), self-host first.
DE Public DPA Sub-processors Open source 0 sub-procs €34 /mo -
Formbricks
EU-HOSTEDself-host EU-BasedGerman open-source experience-management platform (Formbricks GmbH, Kiel) for link, website and in-product surveys; AGPLv3, self-hostable.
DE Public DPA Sub-processors Open source 0 sub-procs €63 /mo
Git hosting
-
Codeberg
EU-SOVEREIGNCodeberg e.V. (eingetragener Verein), Berlin, GermanyBerlin non-profit (Codeberg e.V.) running the open-source Forgejo forge: free, EU-hosted, community-governed GitHub alternative.
DE Public DPA Sub-processors Open source 0 sub-procs -
Planio
EU-SOVEREIGNPlanio GmbH, Berlin, GermanyBerlin-based hosted Redmine (Planio GmbH) with unlimited Git and SVN repositories, on the company's own German servers; account-gated Art. 28 DPA.
DE Public DPA Sub-processors Open source 0 sub-procs €19 /mo
Password managers
-
heylogin
EU-SOVEREIGNGerman passwordless zero-knowledge password manager (heylogin GmbH, Braunschweig), all-German sub-processor stack, ISO 27001:2022, no CLOUD Act exposure.
DE Public DPA Sub-processors Open source 0 sub-procs €4 /mo -
KeePassXC
EU-SOVEREIGNGPLv3 fully-offline desktop password manager (KeePassXC Team, Weimar DE, est. 2016): no cloud, no servers, no telemetry; structurally zero CLOUD Act exposure.
Public DPA Sub-processors Open source 0 sub-procs -
LC-Pass
EU-SOVEREIGNGerman-hosted business password manager from LC by vBoxx GmbH; collections, group sharing, central management, unlimited devices; an EU-hosted 1Password / LastPass alternative.
DE Public DPA Sub-processors Open source 0 sub-procs €3.99 /mo -
Padloc
EU-HOSTEDself-host EU-SovereignGerman AGPLv3 open-source password manager (MaKleSoft, Bavaria), audited 3×, self-hostable, but hosted cloud uses Stripe + defunct Privacy Shield ref.
Public DPA Sub-processors Open source 0 sub-procs €3 /mo -
Psono
EU-HOSTEDself-host EU-SovereignGerman Apache-2.0 open-source team password manager (esaqa GmbH), self-hostable on EU infrastructure, Cure53-audited 2026, free up to 10 users.
DE Public DPA Sub-processors Open source 0 sub-procs €0 /mo
Private email
-
Tuta
EU-SOVEREIGNHannover-based end-to-end encrypted mail (formerly Tutanota); post-quantum crypto, own servers in ISO 27001 certified German data centres.
DE E2E Public DPA Sub-processors Open source 0 sub-procs €3 /mo (billed annually) -
Mailbox.org
EU-SOVEREIGNBerlin-based private email + drive + meet + office bundle (Heinlein Support GmbH); ISO 27001 + BSI C5, €1/mo entry.
DE E2E Public DPA Sub-processors Open source 0 sub-procs €1 /mo -
Posteo
EU-SOVEREIGNBerlin one-person-shop privacy email at €1/mo (Posteo e.K., since 2009); anonymous signup, BSI TR-03108 certified.
DE E2E Public DPA Sub-processors Open source 0 sub-procs €1 /mo -
LC-Connect
EU-SOVEREIGNGerman-hosted business email + calendar, contacts, tasks, notes and video meetings from LC by vBoxx GmbH; an integrated Microsoft 365 / Outlook alternative (TLS, not E2E).
DE E2E Public DPA Sub-processors Open source 0 sub-procs
Project management
-
MeisterTask
EU-SOVEREIGNGerman Kanban + tasks + docs (MeisterLabs, Munich-area, since 2006), DE hosting, ISO 27001, 10k+ companies including Allianz / LBBW.
DE Public DPA Sub-processors Open source 0 sub-procs €12.5 /mo (billed annually) -
SeaTable
EU-SOVEREIGNGerman no-code database + spreadsheet hybrid (SeaTable GmbH, Mainz, HRB 49723), all-EU hosting on Exoscale + Hetzner, public DPA, self-hostable.
DE Public DPA Sub-processors Open source 0 sub-procs €7 /mo (billed annually) -
Stackfield
EU-SOVEREIGNMunich-based E2E-encrypted collaboration suite (Stackfield GmbH, 2012); ISO 27001 + BSI C5, DE data centres, AES-256 in browser.
DE Public DPA Sub-processors Open source 0 sub-procs €9 /mo (billed annually) -
factro
EU-SOVEREIGNGerman PM software (factro by Schuchert Managementberatung, Bochum), 100% Made in Germany, free tier for up to 3 users.
DE Public DPA Sub-processors Open source 0 sub-procs €19.99 /mo -
HansaChat
EU-BASEDSole proprietorship of Igor Tverdokhleb (no GmbH/HRB/VAT shown in imprint), Barkentinenstr. 20, 23558 Lübeck, GermanyLübeck-based company chat with flat per-workspace pricing (not per-seat); Hetzner DE hosting only, all-EU sub-processors, SSO on all plans, a Slack alternative.
DE Public DPA Sub-processors Open source 0 sub-procs €99 /mo
Sovereign AI
-
Aleph Alpha
EU-HOSTEDself-host EU-BasedHeidelberg-based sovereign-AI lab (Pharia platform); merger with Canadian Cohere announced April 2026: Aleph Alpha shareholders to receive ~10% of combined ~$20B entity.
DE Public DPA Sub-processors Open source 0 sub-procs -
Black Forest Labs
EU-HOSTEDself-host EU-BasedFreiburg-based German image-generation lab (FLUX models, Stable Diffusion creators), but heavily US-VC-funded; open-weight FLUX [schnell] under Apache 2.0.
Public DPA Sub-processors Open source 0 sub-procs
Web analytics
-
Pirsch Analytics
EU-SOVEREIGNGerman cookieless server-side web analytics on Hetzner Gunzenhausen with bilingual public DPA and Schrems II-aligned posture.
DE Public DPA Sub-processors Open source 0 sub-procs $6 /mo -
TelemetryDeck
EU-HOSTEDGerman privacy-first mobile + web app analytics with on-device anonymisation, EN/DE DPA, and a transparent sub-processors list.
DE Public DPA Sub-processors Open source 0 sub-procs €9 /mo -
Trackboxx
EU-BASEDGerman sole-proprietor cookieless analytics, B2B-only, with daily-rotating anonymisation and BunnyCDN script delivery.
DE Public DPA Sub-processors Open source 0 sub-procs €5 /mo -
Wide Angle Analytics
EU-SOVEREIGNBerlin-based privacy-first web analytics on a European (OVHcloud Open Trusted Cloud) stack with strict GDPR posture.
FR Public DPA Sub-processors Open source 0 sub-procs €10 /mo