Teamwork.com
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted This listing EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Irish project-management + time tracking (Cork, 2007), agency-focused, 20k+ teams, ISO 27001 + SOC 2 Type 2, Bregal-PE-funded; AWS across US and EU regions.
Teamwork.com offers EU hosting in Ireland, but a US parent or sub-processor leaves material CLOUD Act exposure. It is listed under Project management.
Assessment notes
Irish PM platform (Teamwork.com, Cork; founded 2007 by Peter Coppinger and Daniel Mackey, Mackey CEO since Jan 2025) serving 16,000+ businesses with an agency-focused product surface (projects, tasks, time-tracking, billing), SOC 2 Type 2 certified and, since the May 2026 audit, ISO/IEC 27001:2022 certified as well; Bregal Milestone (European growth-PE, Brenninkmeijer family-anchored) led the 2021 $70M round and no ownership change has occurred since. EU-owned with a public DPA and an inline sub-processors schedule, but the hosting question is now answered and answered badly: the security page states "Our servers are with Amazon Web Services AWS and are hosted within the US and the EU", with no published EU-only residency option, and 9 of the 10 named sub-processors are US-owned. EU-incorporated, but customer data sits with US-controlled processors including a US region, so CLOUD Act exposure is material.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned This listing EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- 10 · 9 US
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: No
-
Public DPA: Yes
-
Sub-processors disclosed: Yes
-
Open-source clients: No
-
Third-party certification: Yes
Jump to
About Teamwork.com
Teamwork.com is the Cork-headquartered Irish project-management platform purpose-built for client-services agencies, founded in 2007 by Peter Coppinger and Daniel Mackey and operating as Teamwork Crew Ltd. The product covers projects, tasks, time tracking, billing, resource scheduling, and an integrated chat, distinguishing itself from Asana / Monday by being built specifically for billable-hour workflows. As of January 2025, Daniel Mackey succeeded Peter Coppinger as CEO (Coppinger had served as CEO for 17 years before transitioning to a board director role). The customer base is 20,000+ teams across 170 countries, with offices in Cork, Boston, Belfast, Amsterdam, and Barcelona.
For an EU-sovereignty audit Teamwork presents a mixed signal set. The operating entity is Irish, EU-jurisdiction, and the 2021 $70M growth round was led by Bregal Milestone, a European growth-PE firm whose ultimate backer is Bregal Investments (the Brenninkmeijer family office, the European founders of C&A retail). No US PE/VC dominance on the cap table at audit time. The product is SOC 2 Type 2 certified and, since the May 2026 audit, ISO/IEC 27001:2022 certified as well, publishes a public DPA with an inline sub-processors schedule, and explicitly commits that customer data is never used to train third-party AI models. The hosting question is also answered now, and not in the vendor's favour: the security page states that Teamwork's servers are with Amazon Web Services and are hosted within the US and the EU, with no published EU-only residency option and no named region, and 9 of the 10 sub-processors in Schedule 2 are US-owned. An EU-incorporated vendor whose customer data sits with US-controlled processors including a US region is why CLOUD Act exposure is recorded as Material.
Pricing is quoted in USD rather than EUR: the Free plan covers up to 5 users and 5 projects; Basics $9.99/user/month on annual billing (a stated 29% saving against monthly) raises the project limit and adds AI comment summarisation; Accelerate is $24.99/user/month, with Optimize and Enterprise by quote. The Pro / Grow / Scale ladder recorded in May has been retired. Best fit: client-services agencies, consultancies, marketing teams, and project-driven SMBs across the EU and English-speaking markets that need billable-time-aware PM tooling.
Sub-processor map · 10
-
AWS USUnited States
Cloud Service Provider
-
Datadog USUnited States
Logs & Application Monitoring
-
DigitalOcean USUnited States
Video Messaging
-
LaunchDarkly USUnited States
Feature Version Release Control
-
Mailgun USUnited States
Notification Services
-
Pendo USUnited States
Product Analytics
-
SendGrid USUnited States
Notification Services
-
Sentry USUnited States
Logs & Application Monitoring
-
Zapier USUnited States
Integration Provider
-
Clicktel non-US
Notification Services
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| AWS | United States | Cloud Service Provider | US |
| Datadog | United States | Logs & Application Monitoring | US |
| DigitalOcean | United States | Video Messaging | US |
| LaunchDarkly | United States | Feature Version Release Control | US |
| Mailgun | United States | Notification Services | US |
| Pendo | United States | Product Analytics | US |
| SendGrid | United States | Notification Services | US |
| Sentry | United States | Logs & Application Monitoring | US |
| Zapier | United States | Integration Provider | US |
| Clicktel | — | Notification Services | non-US |
Source: the vendor’s published sub-processor list, read 26 Aug 2026.
Frameworks & certifications
Capability matrix
Table 2Capabilities of Teamwork.com
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
Netherlands · $10/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: No Open source: Yes -
-
Germany · €19.99/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Not assessed Sub-processors: No Open source: No -
-
Germany · €99/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Baserow
Netherlands
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: No
Open source: Yes
|
$10/mo |
factro
Germany
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Not assessed
Sub-processors: No
Open source: No
|
€19.99/mo |
HansaChat
Germany
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: Yes
Open source: No
|
€99/mo |