Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Capsule CRM

VERIFIED
Founded 2009 · capsulecrm.com ↗

Manchester-based UK CRM (Zestia Ltd) with a free tier, public DPA, and AWS hosting; post-Brexit jurisdiction.

In short

Capsule CRM, in the CRM category, offers EU hosting with United States as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.

Assessment notes

Manchester-based UK CRM (Zestia Limited, company 06418281) with a publicly-accessible DPA and sub-processors page and a permanent free tier (2 users, 250 contacts), but customer data is hosted on Amazon Web Services and a separate US entity (Capsulecrm Inc.) is Data Privacy Framework certified for transatlantic transfers: UK post-Brexit jurisdiction, AWS hosting, and a US legal entity contracting with non-EU customers together produce material CLOUD Act exposure.

CLOUD ACT
OWNERSHIP
SUB-PROCS
10 · 10 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Capsule CRM

Capsule CRM is a Manchester-headquartered UK customer relationship management product operated by Zestia Limited (Companies House number 06418281, registered office 20 Dale St, Manchester, M1 1EZ). The platform is positioned for SMBs combining contact management, sales pipelines, project management, workflow automation, an AI-powered enrichment toolset, and 100+ integrations across Zapier, Slack, Google, Microsoft, QuickBooks, FreeAgent, Xero, Shopify, Typeform, and LinkedIn. The product reports a 4.7/5 G2 rating across 400+ reviews and is one of the longer-running independent UK CRMs.

Compliance disclosures are unusually transparent for a vendor of this size: the DPA is publicly accessible at /dpa with a sub-processors annex maintained at a dedicated URL, sub-processor changes are notified at least 30 days in advance, the privacy policy was refreshed on 21 August 2025, and a sister legal entity (Capsulecrm, Inc.) carries EU-U.S. Data Privacy Framework certification along with the UK Extension and the Swiss-U.S. DPF for cross-Atlantic transfers. Where the listing weakens for a strict-CLOUD-Act buyer is in two places: (1) all customer data is hosted on Amazon Web Services, a US-owned hyperscaler, with no published commitment to a specific EU region only; (2) the existence of a US legal entity for non-EU customers means part of the customer base contracts with Capsulecrm Inc. directly. Per our strict-ownership stance these together produce material CLOUD Act exposure: UK post-Brexit jurisdiction, AWS hosting with no EU-only region commitment, and a US contracting entity are the three sovereignty gaps.

Pricing is freemium and EU-buyer-friendly: a permanent Free plan covers 2 users, 250 contacts, 1 sales pipeline, and 5 custom fields; paid Starter / Growth / Advanced / Ultimate tiers scale by contact count, automation depth, and number of pipelines/project boards, with up to 15% discount on annual billing and a 14-day no-credit-card trial. Best fit: UK and EU SMBs that want a polished pipeline CRM with a free tier and a public DPA, and can accept a UK post-Brexit jurisdiction plus AWS hosting. Procurement-led EU-only buyers should prefer weclapp (DE, Frankfurt + Karlsruhe DC), Teamleader (BE/Visma), or Salesflare (BE) instead.

SUB-PROCESSORS

Sub-processor map · 10

Source ↗
  • Amazon Web Services, Inc. US
    United States

    Hosting (customer data, application logs)

  • APIHub Inc. (Clearbit) US
    United States

    Business and contact data enrichment

  • CapsuleCRM Inc. US
    United States

    Customer support services

  • Datadog Inc. US
    United States

    Log aggregation and performance monitoring

  • Google Inc. US
    United States

    Email (support communications and customer emails)

  • Help Scout PBC US
    United States

    Support help desk for customer queries

  • OpenAI LLC US
    United States

    AI processing (summarization, content generation, insights)

  • Pendo.io Inc. US
    United States

    In-app guidance and product analytics

  • SolarWinds Worldwide LLC US
    United States

    Log aggregation and performance monitoring

  • Twilio Inc. (SendGrid) US
    United States

    Transactional / system emails

10 of 10 sub-processors are US-incorporated. CLOUD Act exposure applies.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-10).
FEATURES

Capability matrix

Sales pipeline Yes
Email sync Yes
Workflow automation Yes
Lead capture Yes
Email campaigns Yes
Quotes / invoicing No
Telephony No
Mobile app Yes
Free tier Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

FREEMIUM
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    capsulecrm.com/dpa…
    Open ↗
  • Sub-processors list
    capsulecrm.com/sub-processors…
    Open ↗
  • Terms of Service
    capsulecrm.com/terms…
    Open ↗
ALTERNATIVES

Alternatives in this category

centralstationCRM
Germany · Founded 2010
EU-SOVEREIGN

Cologne-based German SMB CRM (42he GmbH), all-German hosting on Hetzner + Core-Backbone + Telekom, free tier for 3 users.

Public DPA Sub-processors Open source
FROM
€24/mo
CLOUD ACT
NONE
combit CRM
Germany · Founded 1989
EU-SOVEREIGN

Konstanz-based German CRM (combit Software, since 1989), founder-owned, on-prem + cloud, German Mittelstand vendor.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE
Lime CRM
Sweden · Founded 1990
EU-BASED

Swedish public-listed Nordic + DACH CRM (Lime Technologies, since 1990), 1M+ users, vertical-tailored, agnostic to single-vendor lock-in.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MINOR