Pipedrive
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted This listing EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Estonian-rooted sales CRM with a 300+ Tallinn engineering hub, but US-PE-controlled (Vista Equity) and AWS-hosted across EU and US regions.
Pipedrive offers EU hosting in Estonia, but a US parent or sub-processor leaves material CLOUD Act exposure. It is listed under CRM.
Assessment notes
Estonian-rooted CRM with a 300+ Tallinn engineering hub and a named sub-processors page, but Vista Equity Partners (US private equity) has held the majority since November 2020 and customer accounts are hosted on AWS across Europe and the United States. AWS is a US-owned hyperscaler regardless of region, and customers may end up on US-region infrastructure depending on signup geography; the combination of US-PE majority ownership and AWS hosting triggers material CLOUD Act exposure and places ownership at eu_hq_us_funded rather than eu_owned.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded This listing EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- 25 · 18 US
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: No
-
Public DPA: Yes
-
Sub-processors disclosed: Yes
-
Open-source clients: No
-
Third-party certification: Yes
Jump to
About Pipedrive
Pipedrive is an Estonian-rooted sales CRM founded in Tallinn in 2010 by Timo Rein, Urmas Purde, Ragnar Sass, Martin Henk, and Martin Tajur. The product targets SMB and mid-market sales teams with pipeline management, deal automation, AI assistants, and a 400+ integration ecosystem; the company reports more than 100,000 paying customers across 179 countries, with the engineering and product hub still based in Tallinn (300+ employees from 30+ nationalities) and global operations spanning Lisbon, Prague, Berlin, New York, and Florida.
For an EU-sovereignty-focused directory, Pipedrive is a tricky listing because the brand identity (Estonian unicorn) is in tension with the cap-table reality. In November 2020, Vista Equity Partners, a US private-equity firm headquartered in Austin, Texas, took a majority investment, valuing the company at US$1.5 billion. Earlier investors (Bessemer Venture Partners, Insight Partners, Atomico, DTCP, Rembrandt Venture Partners) remained as minority shareholders. Customer data is hosted on Amazon Web Services in regions across Europe AND the United States: Pipedrive's own support docs confirm that "Pipedrive accounts are hosted in AWS data centers in Europe and the US" with new sign-ups assigned by region, and historical Rackspace data centres in Frankfurt, Chicago, and London have been migrated under AWS management. Per our strict CLOUD Act stance (parent jurisdiction matters per Schrems II / Microsoft Ireland v US), this triggers material CLOUD Act exposure despite the EU-rooted brand and an ISO 27001, ISO 27701 and SOC 2-attested security program: US-PE-majority ownership (eu_hq_us_funded) combined with AWS hosting across EU and US regions are the two key sovereignty gaps here.
Pricing in 2026 is published directly in EUR and starts at the Lite plan, renamed from Essential in the July 2025 rebrand, at €14/user/month billed annually (€24 billed monthly), with Growth at €39, Premium at €59 and Ultimate at €79 on annual billing; a 14-day no-credit-card free trial is offered and there is no permanent free tier. The product is in 25+ languages including English, Estonian, German, French, Spanish, Portuguese, Italian, Russian, and Polish. Best fit: SMB and mid-market sales teams that want a polished pipeline-CRM and either tolerate a US-PE-controlled vendor on AWS or specifically want EU-sourced engineering. Procurement teams with strict EU-sovereignty requirements should look at centralstationCRM (DE) or combit CRM (DE) instead, listed below in this category; the other European vendors here, Teamleader, Salesflare, weclapp and SuperOffice, each disclose a US-owned hyperscaler or a US private-equity layer of their own.
Sub-processor map · 25
-
Amazon Web Services, Inc. USUnited States
Hosting and CDN services in Europe and the USA
-
Anthropic, PBC USUnited States
AI features and functionality (all Client Data used in AI features)
-
Cloudflare, Inc. USUnited States
Content distribution, security, abuse prevention, DNS
-
Forge Technology, Inc. (Paragon) USUnited States
Embedded integration platform for Marketplace apps
-
Hyperdoc Inc. (Recall.ai) USUnited States
AI meeting intelligence (audio, video, meeting metadata)
-
Intercom R&D Unlimited Company USIreland
Customer support conversations processor
-
OpenAI Ireland Limited USIreland
AI features (email summarization and generation)
-
Pipedrive Germany GmbH USGermany
Pipedrive affiliate sub-processor
-
Pipedrive Inc. USUnited States
Pipedrive affiliate sub-processor
-
Pipedrive Ireland Ltd USIreland
Pipedrive affiliate sub-processor
-
Pipedrive Latvia SIA USLatvia
Pipedrive affiliate sub-processor
-
Pipedrive OÜ USEstonia
Pipedrive affiliate sub-processor
-
Pipedrive Portugal Sociedade Unipessoal, Lda USPortugal
Pipedrive affiliate sub-processor
-
Pipedrive Prague s.r.o. USCzechia
Pipedrive affiliate sub-processor
-
Pipedrive UK Ltd USUnited Kingdom
Pipedrive affiliate sub-processor
-
Rackspace GmbH USSwitzerland
Support services for AWS
-
Twilio SendGrid, Inc. USUnited States
Smart Email BCC feature provider
-
Zight, Inc. USUnited States
Screenshot and recording sharing in customer support
-
Amplify5 ltd non-USUnited Kingdom
Customer support conversations processor
-
Atlassian PTY Ltd. (Loom) non-USAustralia
Image/video/attachment sharing in customer support
-
Dealfront Finland Oy EUFinland
Web Visitors feature provider
-
Fullview ApS EUDenmark
Screen sharing and co-browsing for support
-
Growster SAS (Surfe) EUFrance
Data enrichment and lead intelligence
-
Messagebird UK Ltd. (Bird) non-USUnited Kingdom
Live Chat feature in LeadBooster
-
Tet SIA EULatvia
Hosting services for the Campaigns feature
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| Amazon Web Services, Inc. | United States | Hosting and CDN services in Europe and the USA | US |
| Anthropic, PBC | United States | AI features and functionality (all Client Data used in AI features) | US |
| Cloudflare, Inc. | United States | Content distribution, security, abuse prevention, DNS | US |
| Forge Technology, Inc. (Paragon) | United States | Embedded integration platform for Marketplace apps | US |
| Hyperdoc Inc. (Recall.ai) | United States | AI meeting intelligence (audio, video, meeting metadata) | US |
| Intercom R&D Unlimited Company | Ireland | Customer support conversations processor | US |
| OpenAI Ireland Limited | Ireland | AI features (email summarization and generation) | US |
| Pipedrive Germany GmbH | Germany | Pipedrive affiliate sub-processor | US |
| Pipedrive Inc. | United States | Pipedrive affiliate sub-processor | US |
| Pipedrive Ireland Ltd | Ireland | Pipedrive affiliate sub-processor | US |
| Pipedrive Latvia SIA | Latvia | Pipedrive affiliate sub-processor | US |
| Pipedrive OÜ | Estonia | Pipedrive affiliate sub-processor | US |
| Pipedrive Portugal Sociedade Unipessoal, Lda | Portugal | Pipedrive affiliate sub-processor | US |
| Pipedrive Prague s.r.o. | Czechia | Pipedrive affiliate sub-processor | US |
| Pipedrive UK Ltd | United Kingdom | Pipedrive affiliate sub-processor | US |
| Rackspace GmbH | Switzerland | Support services for AWS | US |
| Twilio SendGrid, Inc. | United States | Smart Email BCC feature provider | US |
| Zight, Inc. | United States | Screenshot and recording sharing in customer support | US |
| Amplify5 ltd | United Kingdom | Customer support conversations processor | non-US |
| Atlassian PTY Ltd. (Loom) | Australia | Image/video/attachment sharing in customer support | non-US |
| Dealfront Finland Oy | Finland | Web Visitors feature provider | EU |
| Fullview ApS | Denmark | Screen sharing and co-browsing for support | EU |
| Growster SAS (Surfe) | France | Data enrichment and lead intelligence | EU |
| Messagebird UK Ltd. (Bird) | United Kingdom | Live Chat feature in LeadBooster | non-US |
| Tet SIA | Latvia | Hosting services for the Campaigns feature | EU |
Source: the vendor’s published sub-processor list, read 26 Aug 2026.
Frameworks & certifications
Capability matrix
Table 2Capabilities of Pipedrive
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
United KingdomEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Germany · €24/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
GermanyEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Not assessed Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
|
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
— |
|
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€24/mo |
|
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Not assessed
Sub-processors: Yes
Open source: No
|
— |