Skip to content
Independently verified · Quarterly re-audit
EU VETTED

SuperOffice

VERIFIED
CRM · Norway
Founded 1989 · superoffice.com ↗

Long-running Norwegian Nordic-enterprise CRM (SuperOffice AS, Oslo) with EU/EEA hosting and on-premise edition; Axcel-owned with Carlyle backing.

In short

SuperOffice, in the CRM category, offers EU hosting with Norway as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.

Assessment notes

Long-running Norwegian Nordic-enterprise CRM (SuperOffice AS, Oslo) with subsidiaries across NO/SE/DK/DE/NL/CH/LT and customer data hosted 'in Europe', but the privacy statement still references the invalidated Privacy Shield framework (last updated May 2023), the underlying hosting provider is not publicly named, and the 2025 continuation-fund round was led by Carlyle AlpInvest with US Carlyle as ultimate parent. Together these produce material CLOUD Act exposure: US-PE ownership at the fund layer, an unnamed hosting provider, and an outdated transfer-mechanism reference are the three verified gaps.

CLOUD ACT
OWNERSHIP
SUB-PROCS
7 · 4 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About SuperOffice

SuperOffice is one of the longest-running European CRM vendors, founded in 1989 in Oslo and operated by SuperOffice AS (Wergelandsveien 27, 0167 Oslo, Norway) with subsidiaries in Sweden, Denmark, Germany, the Netherlands, Switzerland, and Lithuania. The product targets Nordic enterprise B2B with three modules: Sales (deal management and forecasting), Marketing (campaign management and lead generation), Service (customer support), plus AI-assisted summaries and content generation, and 1,000+ integrations including Microsoft Dynamics, SharePoint, Slack, Trello, and Zapier. The company emphasises 30+ years of European CRM expertise.

Ownership is layered: in April 2020 Norwegian SuperOffice AS was acquired by Axcel, the Danish private-equity firm; on 3 June 2025 Axcel secured a €266M continuation fund led by Carlyle AlpInvest, with US-headquartered Carlyle as the ultimate parent of the AlpInvest sub-fund. So while the operating entity sits firmly in Norway/EEA and earlier ownership was fully Nordic, the continuation-fund layer adds meaningful US-PE exposure that procurement-grade buyers should understand. CEO as of 2026 is Bjørn Røsten.

Compliance disclosures are partial. The privacy statement (last updated 1 May 2023) names Google Analytics, Facebook, and LinkedIn as marketing-site sub-processors and references a "directory of approved sub-processors" inside the DPA in the Trust Center, not directly resolvable as a public URL at audit. The same statement still cites the EU-U.S. Privacy Shield Framework as an alternative legal basis, which has been invalidated since Schrems II (July 2020) and replaced by the Data Privacy Framework; outdated wording is a transparency red flag. The hosting provider for customer CRM data is described only as "Europe" without a specific provider, region, or city. Per the directory's strict CLOUD Act stance these gaps produce material exposure pending vendor confirmation of the underlying cloud provider and a refreshed transfer-mechanism reference.

Pricing in EUR is enterprise-grade: Sales Essentials starts at €71/user/month with annual billing (monthly, quarterly, semi-annual, and annual cycles available); higher Sales / Service / Marketing tiers above; an interactive demo replaces a self-serve free trial. Best fit: Nordic and DACH mid-market and enterprise B2B teams that want a long-running European CRM with deep Microsoft-stack integration. Procurement-led EU-only buyers should request the Trust Center sub-processors list, the AVV/DPA, and a written commitment on the underlying cloud region before signing.

SUB-PROCESSORS

Sub-processor map · 7

Source ↗
  • Amplitude Inc. US
    United States

    Product analytics and usage statistics (processed in Frankfurt)

  • Mailgun Technologies Inc. US
    United States

    Email service provider for campaigns and ticket replies (processed in Frankfurt)

  • Microsoft Corporation US
    United States

    Azure document storage; SuperOffice AI language analytics (processed in NL and IE)

  • Userflow Inc. US
    United States

    In-product user onboarding and activation

  • i-Centrum AB EU
    Sweden

    App Store applications (Bookmycalendar, Contract Manager, Activity Board, Map4You Pro)

  • InfoBridge B.V. EU
    Netherlands

    Calendar synchronization with Microsoft 365 / Google Workspace

  • Visma IT & Communications AS EU
    Norway

    Hosting and operations of all servers/infrastructure; database storage (Norway)

4 of 7 sub-processors are US-incorporated. CLOUD Act exposure applies.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-11).
FEATURES

Capability matrix

Sales pipeline Yes
Email sync Yes
Workflow automation Yes
Lead capture Yes
Email campaigns Yes
Quotes / invoicing Yes
Telephony No
Mobile app Yes
Free tier No
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option Yes
PRICING

Pricing & tiers

PAID
from €71/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    www.superoffice.com/trust-center…
    Open ↗
  • Sub-processors list
    www.superoffice.com/privacy…
    Open ↗
ALTERNATIVES

Alternatives in this category

Capsule CRM
United Kingdom · Founded 2009
EU-HOSTED

Manchester-based UK CRM (Zestia Ltd) with a free tier, public DPA, and AWS hosting; post-Brexit jurisdiction.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL
centralstationCRM
Germany · Founded 2010
EU-SOVEREIGN

Cologne-based German SMB CRM (42he GmbH), all-German hosting on Hetzner + Core-Backbone + Telekom, free tier for 3 users.

Public DPA Sub-processors Open source
FROM
€24/mo
CLOUD ACT
NONE
combit CRM
Germany · Founded 1989
EU-SOVEREIGN

Konstanz-based German CRM (combit Software, since 1989), founder-owned, on-prem + cloud, German Mittelstand vendor.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE