Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Lucca

VERIFIED
HR & people · France
Founded 2002 · lucca.fr ↗

French sovereign-cloud HR platform (Nantes / Paris, est. 2002); SecNumCloud + ISO 27001; 1M+ users incl. AXA, Deezer.

In short

Lucca, in the HR & people category, is an EU-owned service with France as its hosting location and no identified CLOUD Act exposure.

Assessment notes

Lucca (Nantes / Paris FR, founded 2002, 20+ years operational) is one of the very few procurement-grade HR platforms in this catalogue holding SecNumCloud (ANSSI France) certification alongside ISO 27001 and Qualiopi; 1M+ users including Deezer / AXA / Pernod Ricard; no US-VC ownership identified; EU-owned and FR-hosted with no CLOUD Act exposure, the cleanest French sovereign-cloud story in the HR set.

CLOUD ACT
OWNERSHIP
SUB-PROCS
0 none disclosed
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Lucca

Lucca (Nantes and Paris, France, founded 2002) is a 20-year-old French HR-tech vendor with arguably the cleanest sovereignty profile in this catalogue's HR set: SecNumCloud (ANSSI France's sovereign-cloud certification, required for French government and OIV/OSE contracts) + ISO 27001 + Qualiopi. The modular product covers payroll (Pagga), time and absences (Timmi), talent and performance (Poplee), compensation, and expenses (Cleemy). 1M+ users including enterprise clients like AXA, Deezer, and Pernod Ricard. No US VC ownership identified; mostly profitable-and-bootstrapped trajectory. For French and European procurement audiences with a strict CLOUD-Act preference, this is a flagship pick.

SUB-PROCESSORS

Sub-processor map · none disclosed

Source ↗
Vendor discloses zero sub-processors. All data processing happens in-house.
CERTIFICATIONS

Frameworks & certifications

ISO/IEC 27001
ACTIVE
SecNumCloud
ACTIVE
FEATURES

Capability matrix

Payroll No
Time tracking Yes
Employee records Yes
Time-off / leave Yes
Recruiting (ATS) Yes
Onboarding Yes
Performance reviews Yes
Org chart Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

DPA accessibility is not scored for this listing. Self-hosted or local software, vendors that are not data processors, and products carrying a SecNumCloud, EUCS or BSI C5 certification are not assessed on DPA accessibility. See How we assess.
  • Data Processing Addendum (DPA)
    — not assessed
    n/a
  • Sub-processors list
    www.lucca.fr/rgpd…
    Open ↗
ALTERNATIVES

Alternatives in this category

Factorial
Spain · Founded 2016
EU-HOSTED

Spanish HR + payroll + finance SaaS (Barcelona, est. 2016); 16K+ customers, ISO 27001 + SOC 2 + AWS EU, US-VC-funded.

Public DPA Sub-processors Open source
FROM
€7/mo
CLOUD ACT
MATERIAL
View profile →
HiBob
United Kingdom · Founded 2015
EU-HOSTED

Israeli-founded modern HRIS for mid-market (Tel Aviv + London); 5,000+ customers, heavy US VC, mostly listed for completeness.

Public DPA Sub-processors Open source
FROM
—
CLOUD ACT
MATERIAL
View profile →
Personio
Germany · Founded 2015
EU-HOSTED

Munich-based HR flagship for European SMBs (founded 2015); ISO 27001 + SOC 2 + TISAX; ~$770M US-VC-funded.

Public DPA Sub-processors Open source
FROM
—
CLOUD ACT
MATERIAL
View profile →
See all hr & people alternatives →