Skip to content
Independently verified · Quarterly re-audit
EU VETTED
Curated European SaaS stack

DACH compliance-driven SMB

20-to-100-person Mittelstand with a Datenschutzbeauftragte on staff, NIS2 + DORA on the docket, and a procurement process that asks for the C5 testat before the trial starts.

Stack members · 20

DISCLOSURE   Some links on this site are affiliate links. We may earn a commission at no extra cost to you. Editorial signals and rankings are never influenced by affiliate relationships.

  1. Cloud & hosting

    STACKIT

    German sovereign cloud built by Schwarz Digits (Lidl/Kaufland parent), 4 EU DCs, EU Cloud III €180M winner with SEAL-3 highest rating.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  2. Cloud & hosting

    T Cloud Public (formerly Open Telekom Cloud)

    Deutsche Telekom's OpenStack public cloud (T-Systems), Biere + Magdeburg DCs, ISO 27001 + BSI C5 + TISAX; rebranded from Open Telekom Cloud.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  3. CRM

    centralstationCRM

    Cologne-based German SMB CRM (42he GmbH), all-German hosting on Hetzner + Core-Backbone + Telekom, free tier for 3 users.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  4. CRM

    combit CRM

    Konstanz-based German CRM (combit Software, since 1989), founder-owned, on-prem + cloud, German Mittelstand vendor.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  5. Email marketing

    Inxmail

    Freiburg-based premium German enterprise email marketing platform with ISO 27001 (TÜV Rheinland) and EU-only hosting.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  6. Email marketing

    Maileon

    German enterprise email marketing (XQueue GmbH, Offenbach, 2002), ISO 27001, EU data centres, 3k+ customers, 10 offices worldwide.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  7. Project management

    factro

    German PM software (factro by Schuchert Managementberatung, Bochum), 100% Made in Germany, free tier for up to 10 users.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  8. Project management

    Stackfield

    Munich-based E2E-encrypted collaboration suite (Stackfield GmbH, 2012); ISO 27001 + BSI C5, DE data centres, AES-256 in browser.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  9. Docs & wikis

    Nuclino

    Munich-based founder-owned lightweight team wiki (Nuclino GmbH, 2015), all-German hosting, SOC 2 Type II, 12,000+ teams incl. NASA, MIT.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  10. Docs & wikis

    HumHub

    Munich-based AGPLv3 open-source enterprise social network + intranet (HumHub GmbH & Co. KG, 2015), 4,500+ organisations, self-hostable on EU infra.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  11. File sharing

    luckycloud

    Berlin-based German zero-knowledge cloud (luckycloud GmbH, 2015), own DCs in Berlin/Nuremberg/Frankfurt, ISO 27001 BSI.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  12. File sharing

    Filen

    German zero-knowledge E2E cloud (Filen Cloud Dienste UG, Recklinghausen, 2021), Tier IV ISO 27001 DCs, no US data, open source apps.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  13. Password managers

    Psono

    German Apache-2.0 open-source team password manager (esaqa GmbH), self-hostable on EU infrastructure, Cure53-audited 2026, free up to 10 users.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  14. Password managers

    Passbolt

    Luxembourg-incorporated AGPLv3 open-source team password manager (Passbolt SA), SOC 2 Type II, self-hostable, used by LU/FR government.

    LU
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  15. Video conferencing

    sipgate

    Düsseldorf-based German VoIP + cloud-telephony operator (founded 2004, self-financed), 130 employees, all-German infrastructure.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  16. Video conferencing

    Tixeo

    Montpellier-based French secure video conferencing (founded 2003), ANSSI CSPN-certified, SecNumCloud-qualified, defense + government grade.

    FR
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  17. E-signature

    Skribble

    Zurich-based Swiss e-signature platform with dual ZertES + eIDAS QES via Swisscom partnership; ISO 27001, 4,000+ DACH customers.

    CH
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  18. E-signature

    Yousign

    Caen/Paris-based French QTSP (eIDAS-qualified, ANSSI-supervised), B Corp, profitable, 30k+ customers; rebranding to Youtrust in 2026.

    FR
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  19. Sovereign AI

    Aleph Alpha

    Heidelberg-based sovereign-AI lab (Pharia platform); merger with Canadian Cohere announced April 2026: Aleph Alpha shareholders to receive ~10% of combined ~$20B entity.

    DE
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3
  20. Sovereign AI

    LightOn

    Paris-based enterprise GenAI (Paradigm platform), Europe's first publicly-listed GenAI company on Euronext Growth Paris, on-premise-first.

    FR
    EU hosting EU operator No CLOUD Act Public DPA Sub-processors Open source Certified
    Visit site →
    Alternative swaps · 3