Skip to content
Independently verified · Quarterly re-audit
EU VETTED

weclapp

VERIFIED
CRM · Germany
Founded 2008 · weclapp.com ↗

German cloud ERP + CRM (weclapp SE), Frankfurt and Karlsruhe data centres, ISO 27001/27018/27701, banking-grade encryption.

In short

weclapp, in the CRM category, offers EU hosting with Germany as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.

Assessment notes

German Societas Europaea (weclapp SE) running customer ERP/CRM data exclusively on a Frankfurt data centre with Karlsruhe backup, both certified ISO 9001/27001/27018/27701/22301/20000-1/PCI-DSS/CSA STAR/SSAE16; however, the verified sub-processor list (2026-06) shows production storage and processing run on Amazon Web Services (a US-owned hyperscaler) via its operations partner Exact Cloud Development Benelux, with Microsoft, Splunk, Akamai, ServiceNow and Secureworks (all US) for monitoring and security, so CLOUD Act exposure is material despite the EU data region; a public DPA URL was not resolvable at audit. (An earlier assessment understated the US footprint as marketing-site-only; the dedicated sub-processor page shows AWS as the production host.)

CLOUD ACT
OWNERSHIP
SUB-PROCS
15 · 9 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About weclapp

weclapp is a German cloud ERP + CRM platform operated by weclapp SE, a Societas Europaea legal form adopted to support international expansion, with offices in Frankfurt am Main, Marburg, Kitzingen, and Karlsruhe. Founded in 2008, the platform combines CRM, sales pipelines, quotations, invoicing, accounting, project management, and full inventory/warehouse management for SMBs and mid-market companies, with strong integrations into German marketplaces, payment providers, and shipping platforms (Amazon, eBay, Shopify, etc.). The product has won "ERP-System des Jahres" multiple times and is positioned as the first German cloud ERP with TÜV-certified data protection.

For procurement-grade EU buyers the hosting story is among the strongest in this directory. Customer ERP/CRM data is stored exclusively on a Frankfurt am Main data centre with a Karlsruhe backup; both facilities carry an exceptional certification stack (ISO 9001, ISO 27001, ISO 27018, ISO 27701, ISO 22301, ISO 20000-1, PCI-DSS, CSA STAR CCM v4.0, SSAE16 / ISAE3402). No US-owned hyperscaler sits in the customer-data path. The privacy policy (last updated September 2024) names sub-processors transparently; the US-resident ones (Google, Microsoft, Intercom, Productboard, Meta, LinkedIn) are scoped to marketing-site analytics, advertising pixels, customer chat, and product roadmapping rather than customer business records, with SCCs cited under Art. 46 GDPR for any onward transfers. Brevo (FR) handles newsletters and Personio (DE) handles application data.

Pricing in EUR: ERP Starter €39/user/month, ERP Services €86/user/month, ERP Trade €163/user/month, Enterprise custom for 10+ licences. A 30-day free trial requires no credit card and auto-cancels. Best fit: German and DACH SMBs and mid-market companies that need an integrated ERP + CRM with explicit German data residency, multi-ISO certifications, and broad e-commerce-marketplace integrations. The lack of an obvious public DPA URL is the primary friction for a fully procurement-grade buyer: request the AVV directly and confirm the Frankfurt / Karlsruhe DC contractual commitments before signing.

SUB-PROCESSORS

Sub-processor map · 15

Source ↗
  • Akamai Technologies Netherlands B.V. US
    Netherlands

    DDoS and cyber-attack protection (via Exact)

  • Amazon Web Services EMEA SARL US
    Luxembourg

    Production storage and processing (via Exact; data in Frankfurt)

  • DigitalOcean LLC US
    United States

    Hosting for weclapp webpages and knowledge base

  • Intercom R&D Unlimited Company US
    Ireland

    Product tours, surveys and chat for customer communications

  • Microsoft B.V. US
    Netherlands

    Microsoft Defender status monitoring (via Exact)

  • Microsoft Ireland Operations Ltd. US
    Ireland

    Storage/processing of mail, files, SharePoint, Teams (via Exact)

  • Secureworks Inc. US
    United States

    24/7 Security Operations Center (via Exact)

  • ServiceNow Nederland B.V. US
    Netherlands

    IT process/service management and monitoring (via Exact)

  • Splunk Inc. US
    United States

    Monitoring AWS cloud infrastructure (via Exact)

  • CLOUDIWAY SASU EU
    France

    Migration of mail, files, SharePoint, Teams (via Exact)

  • DevOn India-NL B.V. EU
    Netherlands

    Migration/operation support with onward sub-processing in India (via Exact)

  • Exact Cloud Development Benelux B.V. EU
    Netherlands

    Service configuration, security monitoring, performance tracking

  • Exact Group B.V. EU
    Netherlands

    Support services to operate the MS Office suite

  • fiskaly Germany GmbH EU
    Germany

    Fiscalisation solution for KassenSichV

  • Product Fruits s.r.o. EU
    Czechia

    Product tours, surveys and in-app support

9 of 15 sub-processors are US-incorporated. CLOUD Act exposure applies.
CERTIFICATIONS

Frameworks & certifications

ISO/IEC 27001
ACTIVE
ISO/IEC 27018
ACTIVE
FEATURES

Capability matrix

Sales pipeline Yes
Email sync Yes
Workflow automation Yes
Lead capture Yes
Email campaigns No
Quotes / invoicing Yes
Telephony No
Mobile app No
Free tier No
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
from €39/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    www.weclapp.com/en…
    Open ↗
  • Sub-processors list
    www.weclapp.com/en…
    Open ↗
ALTERNATIVES

Alternatives in this category

Capsule CRM
United Kingdom · Founded 2009
EU-HOSTED

Manchester-based UK CRM (Zestia Ltd) with a free tier, public DPA, and AWS hosting; post-Brexit jurisdiction.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL
centralstationCRM
Germany · Founded 2010
EU-SOVEREIGN

Cologne-based German SMB CRM (42he GmbH), all-German hosting on Hetzner + Core-Backbone + Telekom, free tier for 3 users.

Public DPA Sub-processors Open source
FROM
€24/mo
CLOUD ACT
NONE
combit CRM
Germany · Founded 1989
EU-SOVEREIGN

Konstanz-based German CRM (combit Software, since 1989), founder-owned, on-prem + cloud, German Mittelstand vendor.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE