Skip to content
EU VETTED

DACH compliance-driven SMB

20-to-100-person Mittelstand with a Datenschutzbeauftragte on staff, NIS2 + DORA on the docket, and a procurement process that asks for the C5 testat before the trial starts.

Stack members · 20

Disclosure: Some links on this site are affiliate links. We may earn a commission at no extra cost to you. Editorial signals and rankings are never influenced by affiliate relationships.

  1. STACKIT

    Cloud & hosting

    German sovereign cloud built by Schwarz Digits (Lidl/Kaufland parent), 4 EU DCs, EU Cloud III €180M winner with SEAL-3 highest rating.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: Yes Public DPA: Yes Sub-processors: No Open source: No Certified: Yes
    Visit site
    Alternative swaps · 3

  2. T Cloud Public (formerly Open Telekom Cloud)

    Cloud & hosting

    Deutsche Telekom's OpenStack public cloud (T-Systems), Biere + Magdeburg DCs, ISO 27001 + BSI C5 + TISAX; rebranded from Open Telekom Cloud.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: Yes Public DPA: Yes Sub-processors: Yes Open source: No Certified: Yes
    Visit site
    Alternative swaps · 3

  3. centralstationCRM

    CRM

    Cologne-based German SMB CRM (42he GmbH), all-German hosting on Hetzner + Core-Backbone + Telekom, free tier for 3 users.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: Yes Public DPA: Yes Sub-processors: Yes Open source: No Certified: No
    Visit site
    Alternative swaps · 3

  4. combit CRM

    CRM

    Konstanz-based German CRM (combit Software, since 1989), founder-owned, on-prem + cloud, German Mittelstand vendor.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: Yes Public DPA: Not assessed Sub-processors: Yes Open source: No Certified: No
    Visit site
    Alternative swaps · 3

  5. Inxmail

    Email marketing

    Freiburg-based premium German enterprise email marketing platform with ISO 27001 (TÜV Rheinland) and EU-only hosting.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: Not assessed Public DPA: No Sub-processors: No Open source: No Certified: Yes
    Visit site
    Alternative swaps · 3

  6. Maileon

    Email marketing

    German enterprise email marketing (XQueue GmbH, Offenbach, 2002), ISO 27001, EU data centres, 3k+ customers, 10 offices worldwide.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: Yes Public DPA: Yes Sub-processors: No Open source: No Certified: Yes
    Visit site
    Alternative swaps · 3

  7. factro

    Project management

    German PM software (factro by Schuchert Managementberatung, Bochum), 100% Made in Germany, free tier for up to 3 users.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: Yes Public DPA: Not assessed Sub-processors: No Open source: No Certified: No
    Visit site
    Alternative swaps · 3

  8. Stackfield

    Project management

    Munich collaboration suite (Stackfield GmbH, 2012) with per-room end-to-end encryption; ISO 27001 + BSI C5, German data centres, on-premise edition.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: Yes Public DPA: Not assessed Sub-processors: Yes Open source: No Certified: Yes
    Visit site
    Alternative swaps · 3

  9. Nuclino

    Docs & wikis

    Grünwald-based founder-owned lightweight team wiki (Nuclino GmbH, 2015), German data residency, ISO 27001/27018 + SOC 2 Type II, 12,000+ teams incl. NASA, MIT.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: No Public DPA: Not assessed Sub-processors: Yes Open source: No Certified: Yes
    Visit site
    Alternative swaps · 3

  10. HumHub

    Docs & wikis

    Munich-based AGPLv3 open-source enterprise social network + intranet (HumHub GmbH & Co. KG, 2015), 4,500+ organisations, self-hostable on EU infra.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: Yes Public DPA: Not assessed Sub-processors: Yes Open source: Yes Certified: No
    Visit site
    Alternative swaps · 3

  11. luckycloud

    File sharing

    Berlin-based German zero-knowledge cloud (luckycloud GmbH, 2015), own DCs in Berlin/Nuremberg/Frankfurt, ISO 27001 BSI.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: Yes Public DPA: Yes Sub-processors: Yes Open source: No Certified: Yes
    Visit site
    Alternative swaps · 3

  12. Filen

    File sharing

    German zero-knowledge E2E cloud (Filen Cloud Dienste UG, Recklinghausen, 2021), Tier IV ISO 27001 DCs, no US data, open source apps.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: Not assessed Public DPA: No Sub-processors: Yes Open source: Yes Certified: No
    Visit site
    Alternative swaps · 3

  13. Psono

    Password managers

    German Apache-2.0 open-source team password manager (esaqa GmbH), self-hostable on EU infrastructure, Cure53-audited 2026, free up to 10 users.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: No Public DPA: Not assessed Sub-processors: Yes Open source: Yes Certified: Yes
    Visit site
    Alternative swaps · 3

  14. Passbolt

    Password managers

    Luxembourg-incorporated AGPLv3 open-source team password manager (Passbolt SA), SOC 2 Type II, self-hostable, used by LU/FR government.

    LU
    EU hosting: Yes EU operator: Yes No CLOUD Act: No Public DPA: Yes Sub-processors: Yes Open source: Yes Certified: Yes
    Visit site
    Alternative swaps · 3

  15. sipgate

    Video conferencing

    Düsseldorf-based German VoIP + cloud-telephony operator (founded 2004, self-financed), 130 employees, German data centres; the AI layer routes to OpenAI or, by admin choice, to Mistral.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: Not assessed Public DPA: Yes Sub-processors: Yes Open source: No Certified: No
    Visit site
    Alternative swaps · 3

  16. Tixeo

    Video conferencing

    Montpellier-based French secure video conferencing (founded 2003), ANSSI CSPN-certified, hosted on SecNumCloud-qualified infrastructure, defense + government grade.

    FR
    EU hosting: Yes EU operator: Yes No CLOUD Act: Yes Public DPA: Not assessed Sub-processors: Yes Open source: No Certified: Yes
    Visit site
    Alternative swaps · 3

  17. Skribble

    E-signature

    Zurich-based Swiss e-signature platform with dual ZertES + eIDAS QES via Swisscom partnership; ISO 27001, 4,000+ DACH customers.

    CH
    EU hosting: Yes EU operator: Yes No CLOUD Act: Not assessed Public DPA: Yes Sub-processors: Yes Open source: No Certified: Yes
    Visit site
    Alternative swaps · 3

  18. Youtrust

    E-signature

    Caen/Paris-based French QTSP (eIDAS-qualified, ANSSI-supervised), B Corp, profitable, 30k+ customers; rebranded from Yousign to Youtrust in July 2026.

    FR
    EU hosting: Yes EU operator: Yes No CLOUD Act: No Public DPA: Yes Sub-processors: Yes Open source: No Certified: No
    Visit site
    Alternative swaps · 3

  19. Aleph Alpha

    Sovereign AI

    Heidelberg-based sovereign-AI lab (Pharia platform); merger with Canadian Cohere announced April 2026: Aleph Alpha shareholders to receive ~10% of combined ~$20B entity.

    DE
    EU hosting: Yes EU operator: Yes No CLOUD Act: No Public DPA: No Sub-processors: No Open source: No Certified: No
    Visit site
    Alternative swaps · 3

  20. LightOn

    Sovereign AI

    Paris-based enterprise GenAI (Paradigm platform), Europe's first publicly-listed GenAI company on Euronext Growth Paris, on-premise-first.

    FR
    EU hosting: Yes EU operator: Yes No CLOUD Act: Not assessed Public DPA: No Sub-processors: No Open source: No Certified: Yes
    Visit site
    Alternative swaps · 3