YetiForce
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign This listing EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Polish open-source CRM + PM (YetiForce, Warsaw, Stohid Technology S.A.), 23k+ deployments, 35+ languages, self-host first.
YetiForce is an EU-owned service hosted in Poland, with no identified CLOUD Act exposure. It is listed under Project management.
Assessment notes
Stohid Technology S.A. (Warsaw, Al. Jana Pawła II 22; KRS 0000940956; NIP 118-000-24-25) operates YetiForce as a fully open-source CRM + project management + business-automation platform with 23,000+ deployments across 100+ countries and 35+ languages; the codebase is open without licence restrictions, the recommended deployment is self-host on customer infrastructure, and a managed YetiForce Cloud + marketplace add-ons provide commercial revenue; EU-owned, with the self-hosted deployment giving the customer full data control and no CLOUD Act exposure on EU infrastructure.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned This listing EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- 0 none disclosed
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Yes
-
Public DPA: Not assessed
-
Sub-processors disclosed: Yes
-
Open-source clients: Yes
-
Third-party certification: No
Jump to
About YetiForce
YetiForce is the open-source CRM + project management + business-automation platform built by Stohid Technology S.A. (Al. Jana Pawła II 22, 00-133 Warsaw, Poland; KRS 0000940956; NIP 118-000-24-25; REGON 008163492). The product is positioned as a Salesforce / Microsoft Dynamics / SugarCRM alternative for SMBs and mid-market, with modules covering CRM, accounting, project management, HR, marketing, support, document management, and inventory. YetiForce reports 23,000+ deployments across 100+ countries with localisation in 35+ languages, a remarkably broad community for an EU-rooted open-source product.
The licensing model is open-source-first: the YetiForce CRM codebase is described as "open software without restrictions" with the full server-side stack available for self-hosted deployment on the customer's own infrastructure (Hetzner / OVHcloud / Scaleway / private DC). Commercial revenue comes from the YetiForce Cloud managed offering, marketplace add-ons (paid modules), and support packages. For procurement-grade EU buyers, self-hosting on EU infrastructure makes the customer the sole data controller with no CLOUD Act exposure. The managed cloud tier's hosting is disclosed as of the current terms: all servers are located at Atman sp. z o.o. in Poland, with the data centre in Warsaw, and the privacy policy independently names Atman as the processor for server room and equipment, so no US-owned party appears in the chain and CLOUD Act exposure is recorded as None.
Best fit: Polish, CEE, and broader EU SMBs and mid-market companies that want an open-source Salesforce alternative with deep customisation and broad language coverage; particularly strong for self-host-friendly engineering teams and customers who already use Polish-software-stack components.
Sub-processor map · none disclosed
Frameworks & certifications · none listed
Capability matrix
Table 1Capabilities of YetiForce
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
Netherlands · $10/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: No Open source: Yes -
-
Germany · €19.99/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Not assessed Sub-processors: No Open source: No -
-
Germany · €99/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Baserow
Netherlands
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: No
Open source: Yes
|
$10/mo |
factro
Germany
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Not assessed
Sub-processors: No
Open source: No
|
€19.99/mo |
HansaChat
Germany
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: Yes
Open source: No
|
€99/mo |