A single roll-up of ownership and CLOUD Act exposure.
Berlin GraphQL-native headless CMS (formerly GraphCMS, founded 2017); enterprise clients incl. Samsung, LEGO; mostly EU-funded.
Hygraph, in the Headless CMS category, is a European service with Germany as its hosting location and at most minor, transient US exposure under the CLOUD Act.
Hygraph (formerly GraphCMS, Berlin DE, founded 2017) is ISO 27001 + SOC 2 referenced, GraphQL-native federated content platform, enterprise customer base (Samsung, Dr. Oetker, LEGO, Paramount, TED); $30M Series B 2023 led by One Peak (UK PE) with OpenOcean (FI) and SquareOne (DE); mostly European cap table, no US-PE majority, so ownership_signal: eu_owned. Gap: Hygraph does not publish a publicly accessible DPA; data-processing terms and sub-processors are not surfaced in public documentation and access appears to require enterprise contact; verification of DPA and sub-processor disclosure is pending despite the largely EU-aligned ownership and certification posture.
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
Where ultimate control over the operating company sits.
Hygraph (Berlin, Germany, founded 2017; previously GraphCMS until 2021 rebrand) is a GraphQL-native, API-first headless CMS positioned for enterprise teams managing complex multi-brand, multi-region, multi-platform content. Enterprise customers include Samsung, Dr. Oetker, LEGO, Paramount, TED. Compliance: the FAQ states Hygraph is SOC 2 Type 2 compliant and ISO 27001 certified, though the privacy policy attributes both to the data centres rather than to Hygraph itself, and no attestation URL or certificate is published either way. $30M Series B 2023 led by One Peak (UK private equity) with participation from OpenOcean (Finland) and SquareOne (Germany). Its mostly-European cap table makes Hygraph one of the cleanest non-US-funded headless CMS picks in the catalogue, but the disclosure side is thin: Hygraph publishes no DPA and no sub-processor list, its privacy policy names processor categories rather than companies, and it names no hosting provider at all, offering only shared regions (EU, US, APAC) on the self-serve plans. Pricing is quoted in USD: Hobby is free, Growth is USD 199 per month billed monthly, and Enterprise is on quote; the EUR 39 tier recorded in May no longer exists.
Italian developer-friendly headless CMS (Milan); 25K+ businesses; bootstrapped feel, no US PE.
Norwegian headless/hybrid CMS (Oslo, est. 2000); founder-owned, ISO 27001 + 9001 certified; but managed Enonic Cloud runs on Google Cloud + Azure + Fastly.
Paris headless CMS / page-builder (founded 2013); Slice Machine + Next.js / Nuxt / SvelteKit focus; from USD 10 per repository/mo, billed annually.