Visma eAccounting
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted This listing EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Nordic ERP + accounting group (Oslo, 1996); 170+ company portfolio, 2.4M customers, Hg-majority + TPG co-invested.
Visma eAccounting offers EU hosting in the Netherlands, but a US parent or sub-processor leaves material CLOUD Act exposure. It is listed under Accounting.
Assessment notes
Visma Group (Oslo, Norway) is the Nordic ERP / accounting incumbent (170+ companies, 15,400 employees, 2.4M customers, €19B valuation), ISO 27001 and ISAE 3402 Type II attested; ownership is Hg majority (UK PE, ~70% with co-investors) since 2017 with TPG (US PE), GIC (Singapore) and CPP (Canada Pension) alongside, so US PE exposure is material via TPG even though the group is Norwegian-operating, flipping the signal to eu_hq_us_funded. The hosting picture is the sharper caveat: Visma's own trust centre puts eAccounting on Microsoft Azure in the Netherlands and Sweden, a US-owned hyperscaler holding customer data at rest, with SendGrid in the United States for outbound mail, so this is not the self-hosted Nordic estate the Oslo address suggests. No self-serve DPA is published for the product.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded This listing EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- — not disclosed
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: No
-
Public DPA: No
-
Sub-processors disclosed: Yes
-
Open-source clients: No
-
Third-party certification: Yes
Jump to
About Visma eAccounting
Visma Group (Oslo, Norway, founded 1996) is the Nordic-region ERP / accounting / business-software incumbent: 170+ operating companies, 15,400 employees, 2.4 million customers across 28 countries. The flagship cloud SMB product is Visma eAccounting with country-specific brands (Visma Spcs in Sweden, Visma e-conomic in Denmark, Visma Mamut). Hosting is not the self-hosted Nordic estate the Oslo address suggests: Visma's own trust centre puts eAccounting on Microsoft Azure in the Netherlands and Sweden, with SendGrid in the United States for outbound mail. The group is ISO 27001 certified. Ownership history: KKR (US) acquired majority in 2010, exited in 2017 to Hg Capital (UK PE) who retains majority; current co-investors include TPG (US PE), ICG (UK), GIC (Singapore), CPP Investments (Canada Pension), and Visma management. The TPG presence is the procurement-grade caveat: material US PE influence on a Norwegian operating group.
Sub-processor map · not disclosed
Frameworks & certifications
Capability matrix
Table 1Capabilities of Visma eAccounting
Integration & access
Compliance & governance
Public documents
-
missingData Processing Addendum (DPA)— missing
-
OpenSub-processors listwww.visma.com/trust-centre-products…
Alternatives in this category
-
Norway · €9/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Norway · €20/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Germany · €7.90/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Conta
Norway
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€9/mo |
Fiken
Norway
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€20/mo |
Lexware
Germany
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€7.90/mo |