combit CRM
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign This listing EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Konstanz-based German CRM (combit Software, since 1989), founder-owned, on-prem + cloud, German Mittelstand vendor.
combit CRM is an EU-owned service hosted in Germany, with no identified CLOUD Act exposure. It is listed under CRM.
Assessment notes
combit Software GmbH (Konstanz, Germany; founded 1989 by Peter and Christiane Bertl, still founder-owned and -led; current management Björn Eggstein + Jochen Bartlau + Brita Dannenmann) is a long-running independent German Mittelstand vendor with two products, List & Label (reporting tool) and combit CRM Relationship Manager, both offered as on-premise installation alongside cloud, no external VC/PE ownership, kununu Top Company 2025-2026; on-prem deployment delivers full customer-controlled sovereignty by construction.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned This listing EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- 14 · 7 US
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Yes
-
Public DPA: Not assessed
-
Sub-processors disclosed: Yes
-
Open-source clients: No
-
Third-party certification: No
Jump to
About combit CRM
combit Software GmbH (Buecklestrasse 3-5, 78467 Konstanz, Germany) is a long-running independent German software vendor founded in 1989 by Peter Bertl with Christiane Bertl involved from the beginning. The company remains founder-owned and -led with current management by Björn Eggstein, Jochen Bartlau, and Brita Dannenmann. combit ships two flagship products: the List & Label reporting toolkit (widely embedded by other German software vendors) and combit CRM Relationship Manager, a flexible customer-relationship product with on-premise installation as a first-class deployment option alongside cloud.
For procurement-grade EU buyers combit has the strongest verified sovereignty signals in the category: German GmbH, founder-controlled, no external VC/PE, on-prem deployment available (full customer-controlled data sovereignty by construction), multi-decade operating history, no CLOUD Act exposure, and the kununu Top Company 2025-2026 employee-satisfaction signal. Pricing tiered across product editions; specific EUR amounts not captured at audit.
Sub-processor map · 14
-
Google Ireland Limited USIreland
Analytics, Ads, Maps, reCAPTCHA; ancillary (marketing-site tracking, not core CRM data)
-
jsDelivr USUnited States
Content delivery network for the marketing site; ancillary (not core CRM data)
-
LinkedIn Ireland Unlimited Company USIreland
Social analytics; ancillary (marketing-site tracking, not core CRM data)
-
Meta Platforms Ireland Limited USIreland
Social media analytics; ancillary (marketing-site tracking, not core CRM data)
-
Microsoft Corporation USUnited States
Advertising / UET tracking; ancillary (marketing-site tracking, not core CRM data)
-
Reddit, Inc. USUnited States
Marketing and conversion tracking; ancillary (marketing-site tracking, not core CRM data)
-
Twitter International Company USIreland
Social media integration; ancillary (marketing-site tracking, not core CRM data)
-
communiteq.com EUNetherlands
Web hosting
-
Inxmail GmbH EUGermany
Newsletter services
-
OVH GmbH EUGermany
Web hosting
-
Personio GmbH & Co. KG EUGermany
HR / recruitment management
-
Smartsupp.com, s.r.o. EUCzechia
Live chat services
-
TERRA Cloud GmbH EUGermany
Web hosting
-
WORTMANN AG EUGermany
Web hosting
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| Google Ireland Limited | Ireland | Analytics, Ads, Maps, reCAPTCHA; ancillary (marketing-site tracking, not core CRM data) | US |
| jsDelivr | United States | Content delivery network for the marketing site; ancillary (not core CRM data) | US |
| LinkedIn Ireland Unlimited Company | Ireland | Social analytics; ancillary (marketing-site tracking, not core CRM data) | US |
| Meta Platforms Ireland Limited | Ireland | Social media analytics; ancillary (marketing-site tracking, not core CRM data) | US |
| Microsoft Corporation | United States | Advertising / UET tracking; ancillary (marketing-site tracking, not core CRM data) | US |
| Reddit, Inc. | United States | Marketing and conversion tracking; ancillary (marketing-site tracking, not core CRM data) | US |
| Twitter International Company | Ireland | Social media integration; ancillary (marketing-site tracking, not core CRM data) | US |
| communiteq.com | Netherlands | Web hosting | EU |
| Inxmail GmbH | Germany | Newsletter services | EU |
| OVH GmbH | Germany | Web hosting | EU |
| Personio GmbH & Co. KG | Germany | HR / recruitment management | EU |
| Smartsupp.com, s.r.o. | Czechia | Live chat services | EU |
| TERRA Cloud GmbH | Germany | Web hosting | EU |
| WORTMANN AG | Germany | Web hosting | EU |
Source: the vendor’s published sub-processor list, read 26 Aug 2026.
Frameworks & certifications · none listed
Capability matrix
Table 2Capabilities of combit CRM
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
United KingdomEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Germany · €24/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
SwedenEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Capsule CRM
United Kingdom
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
— |
centralstationCRM
Germany
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€24/mo |
Lime CRM
Sweden
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
— |