factro
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign This listing EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
German PM software (factro by Schuchert Managementberatung, Bochum), 100% Made in Germany, free tier for up to 3 users.
factro is an EU-owned service hosted in Germany, with no identified CLOUD Act exposure. It is listed under Project management.
Assessment notes
factro is operated by Schuchert Managementberatung GmbH & Co. KG in Bochum, Germany with explicit '100% Made in Germany' positioning: all customer data stored in German data centres, DSGVO + BDSG-neu compliant, EU-owned, no CLOUD Act exposure; serves 5,000+ organisations and 100,000+ users across 30+ industries with particular strength in German public-administration sectors. The DPA gap is the main caveat: factro does not publish a publicly accessible DPA; a data-processing agreement is available on request for paid-plan customers only rather than as a self-serve download. No formal ISO 27001 certification is publicly advertised.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned This listing EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- — not disclosed
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Yes
-
Public DPA: Not assessed
-
Sub-processors disclosed: No
-
Open-source clients: No
-
Third-party certification: No
Jump to
About factro
factro is a German project-management product operated by Schuchert Managementberatung GmbH & Co. KG in Bochum, Germany. The brand positions itself explicitly around "100% Made in Germany": all customer data is stored on German servers, the product is DSGVO and BDSG-neu compliant, and the operating entity is a founder-led management-consulting firm with no external venture-capital or private-equity involvement on the cap table. The product covers projects, tasks, time tracking, document management, and reporting with particular adoption in the German public administration sector and across 30+ industries.
factro serves more than 5,000 organisations and 100,000 users and offers a free Basic tier covering up to 3 users with no credit card required and no subscription obligation, down from 10 users at the May 2026 audit. Paid tiers are Business at €19.99 and Professional at €29.99 per user/month on monthly billing, both from three users up, with a Government tier by quote. The German-only hosting, DSGVO compliance, EU ownership, and no CLOUD Act exposure are strong signals; the main gap is that the DPA is not publicly downloadable: it is provided on request to paid-plan customers only.
Best fit: German and DACH SMBs, public administration, and mid-market teams that want a German-rooted PM alternative to Asana / Monday / Trello with explicit DSGVO posture and free-tier evaluation path. Together with Stackfield and MeisterTask, factro forms a three-pillar German-rooted PM shortlist.
Sub-processor map · not disclosed
Frameworks & certifications · none listed
Capability matrix
Table 1Capabilities of factro
Integration & access
Compliance & governance
Pricing & tiers
Public documents
-
on requestData Processing Addendum (DPA)— on request
-
missingSub-processors list— missing
-
OpenTerms of Servicewww.factro.de/agb…
Alternatives in this category
-
Netherlands · $10/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: No Open source: Yes -
-
Germany · €99/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: Yes Open source: No -
-
Denmark · $29/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Baserow
Netherlands
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: No
Open source: Yes
|
$10/mo |
HansaChat
Germany
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: Yes
Open source: No
|
€99/mo |
Hourtick
Denmark
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
$29/mo |