Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Pennylane

VERIFIED
Accounting · France
Founded 2020 · pennylane.com ↗

French unicorn accounting + financial-management platform for SMEs and accountants; €4.3B valuation (Nov 2025), heavily US-VC-funded.

Why this score?

Pennylane (Paris, France, founded 2020) is ISO 27001 certified and a French-government-approved electronic-invoicing platform; however the company has raised $770M+ of mostly US capital — Sequoia Capital, DST Global, CapitalG (Alphabet), Meritech Capital, TCV, Blackstone Growth — making it the most US-VC-funded French SaaS in the accounting space; ownership signal flips to eu_hq_us_funded and CLOUD Act exposure to material via investor influence.

SCORE
3.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
— not disclosed
JUMP TO
OVERVIEW

About Pennylane

**Pennylane** (Paris, France, founded 2020) has rapidly become one of Europe's most-talked-about accounting platforms — over **1 million users** including freelancers, SMEs (PME/ETI), and accounting firms, with a French-government-certified e-invoicing capability ahead of the 2026 PPF mandate. ISO 27001 certified. The product is genuinely French-built and French-operated, but the cap table is heavily US: **Sequoia Capital**, **DST Global**, **CapitalG** (Alphabet's growth fund), **Meritech Capital**, **TCV**, and **Blackstone Growth** are all on the books, with $770M+ raised across 8 rounds and a $4.3B valuation as of November 2025. For procurement-grade buyers this is the canonical "Made in France, capitalised in the USA" case study.
SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications

ISO/IEC 27001
ACTIVE
FEATURES

Capability matrix

INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement — this caps the compliance score (see How we score).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
ALTERNATIVES

Alternatives in this category

Lexware
Germany

Lexware Office: cloud accounting from Haufe Group (German family-owned), DSGVO + GoBD + TÜV, 400K+ DACH customers.
Sage Accounting
United Kingdom

UK-public accounting incumbent (FTSE 100, Newcastle, est. 1981); Sage Accounting cloud product for SMB.
sevdesk
Germany

German DACH-focused SMB accounting / invoicing SaaS (Offenburg, est. 2013); now a Cegid Company under KKR-controlled French parent.
See all accounting alternatives →