Skip to content
Independently verified · Quarterly re-audit
EU VETTED

PrestaShop

VERIFIED
E-commerce · France
Founded 2007 · prestashop.com ↗

French open-source e-commerce with hosted SaaS option; parent group Fortidia is an Oaktree Capital portfolio company.

In short

PrestaShop, in the E-commerce category, offers EU hosting with France as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.

Assessment notes

PrestaShop SA (Paris, 82 Avenue du Maine 75014, SIREN 497 916 635, founded 2007) is French-operating but sold to MBE Worldwide (Italy) November 2021; MBE rebranded as Fortidia in 2024, and Fortidia is a portfolio company of Oaktree Capital Management (US asset manager), so ultimate beneficial ownership is US, giving eu_hq_us_funded ownership signal and material CLOUD Act exposure. DPA and sub-processors list are not publicly surfaced and must be requested via sales.

CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
CLOUD Act by deployment

Exposure depends on how you run this product.

Hosted SaaS (default)

Vendor-operated: the sub-processors below apply.

Self-hosted (open-source)

Deploy on your own EU infrastructure and you control hosting and every sub-processor.

Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About PrestaShop

PrestaShop (Paris, est. 2007, 250,000+ live sites per their homepage) is the historical French Magento-equivalent: a free open-source e-commerce platform plus a paid PrestaShop Hosted offering for merchants who want managed hosting. Acquired by MBE Worldwide (Italy) in November 2021; MBE rebranded as Fortidia in 2024; Fortidia is a portfolio company of US-based Oaktree Capital Management. So the operating entity is French and the brand is French, but the ultimate beneficial owner is a US asset manager, relevant for procurement-grade CLOUD Act assessment. Best fit for merchants who want full platform control with French community + ecosystem; PrestaShop Hosted targets those who want the OSS power without the ops burden. Closer to mid-market than to SMB Shopify-Basic class.

SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-12).
FEATURES

Capability matrix

Self-hostable Yes
Recurring / subscriptions Yes
In-person / POS Yes
Multi-currency Yes
Multilingual Yes
Product variants Yes
Abandoned cart recovery Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option Yes
PRICING

Pricing & tiers

FREEMIUM
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    prestashop.com/terms-prestashop-hosted…
    Open ↗
  • Sub-processors list
    prestashop.com/prestashop-account-privacy…
    Open ↗
  • Terms of Service
    www.prestashop.com/en…
    Open ↗
ALTERNATIVES

Alternatives in this category

Shopware
Germany · Founded 2000
EU-HOSTED

German mid-market commerce platform (Schöppingen, est. 2000); Cloud entry €600/mo. PayPal owns ~41% as of Oct 2025.

Public DPA Sub-processors Open source
FROM
€600/mo
CLOUD ACT
MATERIAL
Sylius
Poland · Founded 2011
EU-SOVEREIGN

Polish open-source Symfony e-commerce framework (MIT); commercial Plus modules from €800/yr GMV-based.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE
MyCashflow
Finland · Founded 2007
EU-SOVEREIGN

Finnish all-in-one e-commerce SaaS with own Helsinki hosting and 0% commission across plans.

Public DPA Sub-processors Open source
FROM
€49/mo
CLOUD ACT
NONE