Skip to content
Independently verified · Quarterly re-audit
EU VETTED

combit CRM

VERIFIED
CRM · Germany
Founded 1989 · combit.net ↗

Konstanz-based German CRM (combit Software, since 1989), founder-owned, on-prem + cloud, German Mittelstand vendor.

In short

combit CRM, in the CRM category, is an EU-owned service with Germany as its hosting location and no identified CLOUD Act exposure.

Assessment notes

combit Software GmbH (Konstanz, Germany; founded 1989 by Peter and Christiane Bertl, still founder-owned and -led; current management Björn Eggstein + Jochen Bartlau + Brita Dannenmann) is a long-running independent German Mittelstand vendor with two products, List & Label (reporting tool) and combit CRM Relationship Manager, both offered as on-premise installation alongside cloud, no external VC/PE ownership, kununu Top Company 2025-2026; on-prem deployment delivers full customer-controlled sovereignty by construction.

CLOUD ACT
OWNERSHIP
SUB-PROCS
10 · 3 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About combit CRM

combit Software GmbH (Buecklestrasse 3-5, 78467 Konstanz, Germany) is a long-running independent German software vendor founded in 1989 by Peter Bertl with Christiane Bertl involved from the beginning. The company remains founder-owned and -led with current management by Björn Eggstein, Jochen Bartlau, and Brita Dannenmann. combit ships two flagship products: the List & Label reporting toolkit (widely embedded by other German software vendors) and combit CRM Relationship Manager, a flexible customer-relationship product with on-premise installation as a first-class deployment option alongside cloud.

For procurement-grade EU buyers combit has the strongest verified sovereignty signals in the category: German GmbH, founder-controlled, no external VC/PE, on-prem deployment available (full customer-controlled data sovereignty by construction), multi-decade operating history, no CLOUD Act exposure, and the kununu Top Company 2025-2026 employee-satisfaction signal. Pricing tiered across product editions; specific EUR amounts not captured at audit.

SUB-PROCESSORS

Sub-processor map · 10

Source ↗
  • Google Ireland Limited US
    Ireland

    Analytics, Ads, Maps, reCAPTCHA; ancillary (marketing-site tracking, not core CRM data)

  • LinkedIn Ireland Unlimited Company US
    Ireland

    Social analytics; ancillary (marketing-site tracking, not core CRM data)

  • Microsoft Corporation US
    United States

    Advertising / UET tracking; ancillary (marketing-site tracking, not core CRM data)

  • communiteq.com EU
    Netherlands

    Web hosting

  • Inxmail GmbH EU
    Germany

    Newsletter services

  • OVH GmbH EU
    Germany

    Web hosting

  • Personio GmbH & Co. KG EU
    Germany

    HR / recruitment management

  • Smartsupp.com, s.r.o. EU
    Czechia

    Live chat services

  • TERRA Cloud GmbH EU
    Germany

    Web hosting

  • WORTMANN AG EU
    Germany

    Web hosting

3 of 10 sub-processors are US-incorporated. These are ancillary processors that do not hold protected customer data, so they do not change the assessment. CLOUD Act exposure is rated none.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-18).
FEATURES

Capability matrix

Sales pipeline Yes
Email sync Yes
Workflow automation Yes
Lead capture Yes
Email campaigns Yes
Quotes / invoicing Yes
Telephony Yes
Mobile app No
Free tier No
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option Yes
PRICING

Pricing & tiers

PAID
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

DPA accessibility is not scored for this listing. Self-hosted or local software, vendors that are not data processors, and products carrying a SecNumCloud, EUCS or BSI C5 certification are not assessed on DPA accessibility. See How we assess.
  • Data Processing Addendum (DPA)
    — not assessed
    n/a
  • Sub-processors list
    www.combit.net/datenschutz…
    Open ↗
  • Terms of Service
    www.combit.net/agb…
    Open ↗
ALTERNATIVES

Alternatives in this category

Capsule CRM
United Kingdom · Founded 2009
EU-HOSTED

Manchester-based UK CRM (Zestia Ltd) with a free tier, public DPA, and AWS hosting; post-Brexit jurisdiction.

Public DPA Sub-processors Open source
FROM
—
CLOUD ACT
MATERIAL
View profile →
centralstationCRM
Germany · Founded 2010
EU-SOVEREIGN

Cologne-based German SMB CRM (42he GmbH), all-German hosting on Hetzner + Core-Backbone + Telekom, free tier for 3 users.

Public DPA Sub-processors Open source
FROM
€24/mo
CLOUD ACT
NONE
View profile →
Lime CRM
Sweden · Founded 1990
EU-BASED

Swedish public-listed Nordic + DACH CRM (Lime Technologies, since 1990), 1M+ users, vertical-tailored, agnostic to single-vendor lock-in.

Public DPA Sub-processors Open source
FROM
—
CLOUD ACT
MINOR
View profile →
See all crm alternatives →