HansaChat
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based This listing EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Sole proprietorship of Igor Tverdokhleb (no GmbH/HRB/VAT shown in imprint), Barkentinenstr. 20, 23558 Lübeck, Germany
Lübeck-based company chat with flat per-workspace pricing (not per-seat); Hetzner DE hosting only, all-EU sub-processors, SSO on all plans, a Slack alternative.
HansaChat is a European service hosted in Germany, with at most minor, transient US exposure under the CLOUD Act. It is listed under Project management.
Assessment notes
HansaChat (sole proprietorship of Igor Tverdokhleb, Lübeck, Germany, no GmbH/HRB/VAT in the imprint) is a flat-priced company chat hosted exclusively on Hetzner in Germany (Falkenstein/Nuremberg) with a fully EU sub-processor set publicly listed in its privacy policy (Hetzner DE hosting, EmailLabs/Vercom S.A. PL email, Creem/Armitage Labs OÜ EE merchant-of-record billing); the score is capped at 3/5 because there is no separate customer-signable DPA/AVV and no third-party certification (ISO 27001 / BSI C5), with minor CLOUD Act exposure via Sentry (US) error monitoring (stated no PII, migration to self-hosted planned) and an early-stage maturity caveat. The vendor's own security page states there are no backups or disaster recovery as of Feb 2026; not end-to-end encrypted.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned This listing EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- 4 · 1 US
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Not assessed
-
Public DPA: No
-
Sub-processors disclosed: Yes
-
Open-source clients: No
-
Third-party certification: No
Jump to
About HansaChat
HansaChat is a German internal-communication platform, a company chat positioned as a fixed-price alternative to Slack and Microsoft Teams. It is operated as a sole proprietorship by Igor Tverdokhleb from Lübeck (Barkentinenstr. 20, 23558 Lübeck); the imprint lists no GmbH/UG legal form, Handelsregister (HRB) number, or VAT ID, so it is an early-stage, founder-run product rather than an incorporated company.
Its core differentiator is pricing: HansaChat charges per workspace, not per user. Paid plans run €99/month (Starter: unlimited users and messages, 25 GB), €199/month (Company: 100 GB, webhooks/integrations, audio-video calls) and €299/month (Business: admin controls, advanced search), plus storage add-ons and a limited free Demo (2,000 messages, 1 GB, deleted after 30 days of inactivity). For teams that have outgrown Slack's per-seat math the flat model can be dramatically cheaper at scale; the founder's own framing, which readers can keep in mind, is "a company chat without per-user pricing plans." SSO is included on every plan.
On sovereignty the stack is deliberately tight and all-European. Core application data, databases and file storage run exclusively on Hetzner Cloud in Germany (Falkenstein and Nuremberg) on a private Kubernetes cluster, with TLS in transit and encryption at rest (encrypted Longhorn volumes for MySQL, encrypted MinIO for files). Sub-processors are publicly enumerated in the privacy policy and are all EU: Hetzner (DE, hosting), EmailLabs / Vercom S.A. (PL, transactional email) and Creem / Armitage Labs OÜ (EE, merchant-of-record billing). The only US touch-point is Sentry for error monitoring (stated to carry no PII and being migrated to self-hosted Loki/Grafana), giving minor CLOUD Act exposure. There is no end-to-end encryption (operators retain technical access to workspace content) and as of February 2026 the vendor's security page states backups and disaster recovery are not yet in place, a real maturity caveat for procurement.
Best fit: small DACH teams that want a transparent, EU-hosted Slack replacement at a predictable flat price and don't need certifications or a signable DPA today. No public ISO 27001 / BSI C5 certification and no separate customer-signable DPA exist yet, which caps the compliance score; both would be the obvious additions as the product matures.
Sub-processor map · 4
-
Sentry (Functional Software, Inc.) USUnited States
Error monitoring; per security page, stated no PII; migration to self-hosted Loki/Grafana planned. Not in the privacy-policy §6 register.
-
Creem (Armitage Labs OÜ) EUEstonia
Payment processing / merchant-of-record billing, invoices, subscriptions
-
EmailLabs (Vercom S.A.) EUPoland
Transactional & service email delivery
-
Hetzner Online GmbH EUGermany
Hosting; core application data, databases, file storage (Falkenstein + Nuremberg)
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| Sentry (Functional Software, Inc.) | United States | Error monitoring; per security page, stated no PII; migration to self-hosted Loki/Grafana planned. Not in the privacy-policy §6 register. | US |
| Creem (Armitage Labs OÜ) | Estonia | Payment processing / merchant-of-record billing, invoices, subscriptions | EU |
| EmailLabs (Vercom S.A.) | Poland | Transactional & service email delivery | EU |
| Hetzner Online GmbH | Germany | Hosting; core application data, databases, file storage (Falkenstein + Nuremberg) | EU |
Source: the vendor’s published sub-processor list, read 16 Jun 2026.
Frameworks & certifications · none listed
Capability matrix
Table 2Capabilities of HansaChat
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
Netherlands · $10/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: No Open source: Yes -
-
Germany · €19.99/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Not assessed Sub-processors: No Open source: No -
-
Denmark · $29/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Baserow
Netherlands
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: No
Open source: Yes
|
$10/mo |
factro
Germany
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Not assessed
Sub-processors: No
Open source: No
|
€19.99/mo |
Hourtick
Denmark
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
$29/mo |