Customerly
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted This listing EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Dublin-based Italian-founded customer messaging + AI CRM (Customerly Ltd, 2017); EU-only data storage; Aura AI Assistant solves 71% of support volume.
Customerly offers EU hosting in Ireland, but a US parent or sub-processor leaves material CLOUD Act exposure. It is listed under Helpdesk.
Assessment notes
Customerly Limited (Dublin, Ireland; 71 Lower Baggot Street, D02 P593; incorporated 5 October 2017 by Italian entrepreneurs Luca and Daniele after MBA studies at MIP Politecnico di Milano) is a B2C SaaS-focused AI customer-service + CRM product with Aura AI Assistant, live chat, knowledge base, NPS, and chatflows. The corporate page commits explicitly that 'all data is stored in EU only'. Clean Irish ownership with no PE / VC chain visible, EU-only data residency claim, multiple G2 / Capterra / GetApp 'Leader' designations. EU-owned and EU-only data residency verified. The disclosure picture improved since the May audit: a DPA is now linked publicly from customerly.io/gdpr/ and a named sub-processors list is published at customerly.io/subprocessors/ (last updated 7 July 2026). That list is also what raises the CLOUD Act flag to material: the entire platform is hosted on AWS, the Aura AI agent runs on Microsoft Azure OpenAI Service, and vector retrieval runs on Pinecone — all EU-region, but all US-parented and therefore compellable — alongside Stripe (EU and US) and OneSignal (US). The residual gaps are that no AWS region or city is named and that AI conversations are included in every paid plan rather than being opt-in.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned This listing EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- 5 · 5 US
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: No
-
Public DPA: Yes
-
Sub-processors disclosed: Yes
-
Open-source clients: No
-
Third-party certification: No
Jump to
About Customerly
Customerly is a Dublin-headquartered customer-messaging + AI CRM platform operated by Customerly Limited (71 Lower Baggot Street, Dublin D02 P593, Ireland; incorporated on 5 October 2017). The company was founded by Italian entrepreneurs Luca and Daniele, who met in 2012 while completing MBAs in entrepreneurship at MIP Politecnico di Milano and later chose to incorporate in Ireland following mentorship advice that an Irish Limited or US INC structure is the standard scalable SaaS vehicle. The product is built around Aura AI Assistant (the company reports Aura solves 71% of support ticket volume and saves agents ~19 hours per month), AI Live Chat, Help Center, NPS + surveys, Chatflows, Knowledge Base, and workflow automation, positioned for B2C SaaS businesses as an Intercom / Drift / Freshdesk alternative.
For an EU-sovereignty audit the listing is structurally clean on the ownership side: Irish Limited Company, no PE or VC ownership chain visible at audit, Italian founder team, no US legal entity disclosed. The corporate page commits explicitly that "all data is stored in EU only", the most procurement-relevant signal in the category. The product carries Software Advice / Capterra / GetApp "Leader" badges. The disclosure layer has since caught up: customerly.io/gdpr/ links a public un-gated DPA, and a named sub-processor list is published at customerly.io/subprocessors/, last updated 7 July 2026. What that list shows is why the CLOUD Act flag is recorded as Material: the entire platform is hosted on AWS, the Aura AI agent runs on Microsoft Azure OpenAI Service and vector retrieval on Pinecone, all in EU regions but all US-parented, alongside Stripe and OneSignal. The EU-only residency claim holds; every layer that actually holds data is nonetheless operated by a US-parented company. Aura conversations are bundled into every paid plan rather than being opt-in, and no AWS region or city is named.
Pricing is per seat and published in US dollars, with no free plan and a trial only: Core from $19 per seat per month, Growth $69 and Ultimate $99, each carrying an AI-conversation allowance, plus standalone Aura AI at $0.45 per conversation and an AI Companion add-on billed annually per agent. Best fit: B2C SaaS businesses needing AI-augmented customer support with native EU data-residency commitments, Italian / Irish / European SMB and mid-market SaaS teams, and any organisation that prefers a Dublin-incorporated counterparty over a US-incorporated competitor (Intercom, Drift) for category-equivalent features.
Sub-processor map · 5
-
Amazon Web Services (AWS) USUnited States
Cloud hosting, storage, databases and backups for the entire platform; vendor states EU region only
-
Microsoft Azure OpenAI Service USUnited States
Large language model processing for the Aura AI agent; vendor states EU region only. Aura is included in every paid plan, not opt-in
-
OneSignal USUnited States
Push notification delivery to mobile and web; vendor lists United States
-
Pinecone USUnited States
Vector database for AI knowledge retrieval; vendor states EU region only
-
Stripe USUnited States
Payment processing and subscription billing; vendor lists EU and United States
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| Amazon Web Services (AWS) | United States | Cloud hosting, storage, databases and backups for the entire platform; vendor states EU region only | US |
| Microsoft Azure OpenAI Service | United States | Large language model processing for the Aura AI agent; vendor states EU region only. Aura is included in every paid plan, not opt-in | US |
| OneSignal | United States | Push notification delivery to mobile and web; vendor lists United States | US |
| Pinecone | United States | Vector database for AI knowledge retrieval; vendor states EU region only | US |
| Stripe | United States | Payment processing and subscription billing; vendor lists EU and United States | US |
Source: the vendor’s published sub-processor list, read 26 Aug 2026.
Frameworks & certifications · none listed
Capability matrix
Table 2Capabilities of Customerly
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
France · $45/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: Yes Open source: No -
-
Germany · €87/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Poland · $19/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Crisp
France
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: Yes
Open source: No
|
$45/mo |
Userlike (Lime Connect)
Germany
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€87/mo |
LiveChat (Text)
Poland
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
$19/mo |