Teamleader
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted This listing EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Ghent-based Belgian SMB CRM + invoicing + project tool, owned by Norwegian Visma Group; from €37.50/user/month.
Teamleader offers EU hosting in Ireland, but a US parent or sub-processor leaves material CLOUD Act exposure. It is listed under CRM.
Assessment notes
Belgian SaaS scale-up (Ghent) for SMB CRM + invoicing, owned by Norwegian Visma Group since June 2022. Visma is EEA-incorporated but its own cap table includes US PE (TPG) alongside Hg Capital (majority, ~70% with co-investors), Cinven, GIC and ICG. Hosting is now positively disclosed: the publicly readable DPA (February 2024) states that Teamleader's web application, communication and database servers sit in Amazon Web Services data centres in Ireland, and the public sub-processor list names twelve processors of which AWS, Datadog, Sentry (Functional Software), Mailgun, SendGrid, Twilio and Zendesk are US-owned. A US-owned hyperscaler holding customer data at rest plus a US-PE stake at group level keeps the CLOUD Act flag at material.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned EU-incorporated and EU-controlled; no significant US ownership.
-
European This listing Swiss/EEA-owned, with no significant US ownership; treated as European.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
- Sub-processors
- — not disclosed
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: No
-
Public DPA: Yes
-
Sub-processors disclosed: Yes
-
Open-source clients: No
-
Third-party certification: No
Jump to
About Teamleader
Teamleader is a Ghent-based Belgian business-management SaaS founded in 2012, combining CRM, quotations, invoicing, expense tracking, and project planning into a single tool for small and mid-sized European businesses. The company reports more than 34,000 customers across Belgium, the Netherlands, Germany, France, Spain, and Italy and ships four product lines: Teamleader Focus (entrepreneurs and small teams), Teamleader Orbit (premium agencies, 20+ employees), Teamleader One (e-invoicing for self-employed and small companies in BE/NL), and Dexxter (automated bookkeeping for Belgian sole proprietors).
In June 2022 Teamleader was acquired by Visma Group, the Oslo-headquartered Norwegian software conglomerate. Norway is an EEA member with full GDPR alignment, so transfers to Norway do not require SCCs; this keeps Teamleader broadly EU/EEA-aligned. The complication is one layer up: Visma's own cap table is a private-equity consortium that historically includes Hg Capital (UK), Cinven (UK), TPG (US), GIC (Singapore), and Intermediate Capital Group (UK), so beneath the Norwegian wrapper there is meaningful US private-equity exposure (TPG), enough to mention in a procurement-grade audit even though the direct parent is EEA. Pre-acquisition investors include Fortino Capital, Sage Capital Partners, PMV (Participatiemaatschappij Vlaanderen), Keen Venture Partners, and Altered Capital, all European.
Pricing in EUR: the SMART plan starts at €37.50 per user/month with GROW and FLOW above it, 17% off on annual billing, a 14-day no-credit-card free trial and no permanent free tier. The disclosure gaps recorded in May have since closed. The publicly readable DPA (February 2024) states that Teamleader's web application, communication and database servers sit in Amazon Web Services data centres in Ireland, and the public sub-processor list names twelve processors, of which AWS, Datadog, Sentry, Mailgun, SendGrid, Twilio and Zendesk are US-owned at parent level. A US-owned hyperscaler holding customer data at rest is what keeps CLOUD Act exposure at Material despite the Irish region. Best fit: Belgian and Dutch SMBs, agencies, and self-employed professionals who want an end-to-end CRM-plus-invoicing tool from a Ghent-rooted vendor, and who can accept a Norwegian-owned Visma parent with mixed EU/UK/US private-equity sponsorship at the group level. Procurement-led buyers requiring both an EU-only ownership chain and an EU-only processor chain should look at centralstationCRM (DE) or combit CRM (DE) instead, listed below; Salesflare is founder-owned in Belgium but names Google Cloud Storage as its backend, and weclapp is German but sits under the Dutch Exact Group with Amazon Web Services in the production path.
Sub-processor map · not disclosed
Frameworks & certifications · none listed
Capability matrix
Table 1Capabilities of Teamleader
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
United KingdomEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Germany · €24/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
GermanyEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Not assessed Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Capsule CRM
United Kingdom
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
— |
centralstationCRM
Germany
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€24/mo |
combit CRM
Germany
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Not assessed
Sub-processors: Yes
Open source: No
|
— |