Talkspirit
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based This listing EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Paris-based French enterprise social network + intranet (Talkspirit SAS, 2004); OVH-hosted France; ISO 27001, SecNumCloud in progress; 900+ organisations.
Talkspirit is a European service hosted in France, with at most minor, transient US exposure under the CLOUD Act. It is listed under Docs & wikis.
Assessment notes
Talkspirit SAS (Paris, France; 72 rue du Faubourg Saint-Honoré; SIRET 479 109 332) is a French-founded enterprise social network and intranet platform hosted on OVH in Roubaix, France, with the homepage now stating hosting in France and Switzerland. The homepage claims ISO 27001 certification and marks SecNumCloud as en cours (in progress, not held); governing law is French. Privacy policy acknowledges some US sub-processors covered by SCCs. Signals: EU-owned (French SAS), EU-hosted (OVH Roubaix, France), ISO 27001 claimed, SecNumCloud in progress and not yet awarded, French governing law. Gaps: no separate DPA download link: the Terms of Service confirm the processor role only and direct buyers to request a contract; some US sub-processors managed under SCCs (minor exposure).
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned This listing EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- — not disclosed
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Not assessed
-
Public DPA: Not assessed
-
Sub-processors disclosed: No
-
Open-source clients: No
-
Third-party certification: Yes
Jump to
About Talkspirit
Talkspirit is a Paris-headquartered French enterprise social network and organisational operating system operated by Talkspirit SAS and founded in 2004 by Philippe Pinault and Olivier Ricard. The platform is designed as a complete replacement for Meta's Workplace, combining three core modules: Structure (dynamic org-chart, role clarity, OKR management), Collaboration (projects, documents, shared workspaces), and Communication (chat, video meetings, news feed). The product reports 900+ organisations and 150,000+ users with 160+ partners.
For EU-sovereignty procurement Talkspirit is one of the cleaner French-SaaS listings in the docs-wikis/intranet category. The legal entity is Talkspirit SAS (Société par Actions Simplifiée, capital €16,000, SIRET 479 109 332, registered at the Paris Commercial Registry, 60 rue François 1er, Paris 75008). Data is hosted on OVH infrastructure in Roubaix, France per the legal notice, and the homepage now additionally claims hosting in France and Switzerland with no dependency on non-European infrastructure, a Swiss leg worth confirming with the vendor before signing. The homepage claims ISO 27001 and EUCS compliance and marks SecNumCloud as "en cours", a qualification the company has chosen to pursue rather than one it holds; Talkspirit does not appear on the ANSSI list of qualified providers. Governing law is explicitly French (Article 8 of ToS), with disputes under the Paris Commercial Court.
The privacy policy acknowledges some US sub-processors covered by Standard Contractual Clauses, which is what holds CLOUD Act exposure at Minor, structurally managed through French governing law and French data residency. No public DPA download link was found at audit time; procurement teams should request the AVV/DPA directly. Pricing is sales-engaged: the public pricing page has been withdrawn and every pricing path now routes to a demo request, so no EUR tier figure is published by the vendor. Best fit: French companies and EU public-sector buyers wanting a Workplace from Meta replacement with French data residency, French governing law and ISO 27001 evidence; organisations requiring French-law governance; teams needing org-chart, OKR, and project management in one platform alongside chat and news feed.
Sub-processor map · not disclosed
Frameworks & certifications
Capability matrix
Table 1Capabilities of Talkspirit
Integration & access
Compliance & governance
Public documents
-
on requestData Processing Addendum (DPA)— on request
-
missingSub-processors list— missing
-
OpenTerms of Servicewww.talkspirit.com/terms-of-service…
Alternatives in this category
-
SwitzerlandEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: Yes Open source: Yes -
-
United Kingdom · €0/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Not assessed Sub-processors: No Open source: Yes -
-
United Kingdom · €3/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: No Open source: Yes -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Anytype
Switzerland
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: Yes
Open source: Yes
|
— |
BookStack
United Kingdom
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Not assessed
Sub-processors: No
Open source: Yes
|
€0/mo |
Collabora Online
United Kingdom
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: No
Open source: Yes
|
€3/mo |