TrustCaptcha is a CAPTCHA built on dynamic proof-of-work, operated by Trustcaptcha GmbH in Munich and sold under the wider TrustComponent brand, which also covers a status page product and a VAT-ID checker. Rather than asking a visitor to identify traffic lights or profiling their behaviour against a global signal graph, the widget makes the browser compute a small cryptographic puzzle whose difficulty adapts to the assessed risk. That design choice is the reason it can work without a behavioural profile of the visitor, and it pairs with honeypot verification, bot detection and risk scoring, IP allow and block lists, custom access rules and geoblocking, bypass keys, environments, team seats with roles, and audit logs on the higher tiers.
On jurisdiction it is a simple read: a German GmbH registered in Munich, with the service resolving to Hetzner infrastructure in Nuremberg, so operator and servers are both in Germany. Every plan is marketed as "GDPR, EU hosted & DPA", and there is a 99.9% uptime commitment from the entry tier upwards.
The gap is documentation. There is no publicly reachable DPA and no named sub-processor list: the privacy policy lists recipients by function (hosting providers, error logging, accounting service providers, IT service providers, analytics, data storage, payment processors, advertising networks) without naming any of them. The named third parties we could confirm are Stripe Payments Europe Ltd. in Ireland for payments, a Google Ads click identifier stored as an optional advertising cookie, and an OpenReplay session-replay cookie, the last two on the vendor's own marketing site rather than in the widget path: Minor. Pricing is the most accessible in the category, starting at €8 per month for 1,000 verifications and one website, then Advanced at 36 EUR (10,000 verifications, 5 websites) and Team at 168 EUR (50,000 verifications). Best fit: German and EU teams that want a cheap, EU-hosted, non-profiling CAPTCHA and can live without published compliance documents.