Procurement filter

EU SaaS with no US ownership

Software vendors whose corporate ownership is not subject to the US CLOUD Act — no US parent company, no US subsidiary holding production data, no US controlling shareholder.

25 listed tools

Why corporate ownership matters under the CLOUD Act

The US Clarifying Lawful Overseas Use of Data Act (2018) compels US-based companies to hand over data they control, regardless of where the data is stored. A vendor with EU-only servers but a US parent company can still receive a CLOUD Act warrant. For data classified as sensitive, special category (GDPR Art. 9), or covered by sectoral rules like HDS, this exposure is a procurement red flag.

The Court of Justice of the EU's Schrems II ruling (Case C-311/18) reinforced that EU controllers must conduct a Transfer Impact Assessment for any processor exposed to non-EU government access — including indirect exposure through corporate parentage.

How we classify ownership

No US ownership — the legal entity processing your data is incorporated in the EU/EEA/UK/Switzerland with no US parent or majority US shareholder.
Indirect exposure — EU operations but a US parent or significant US investor.
Direct exposure — US-headquartered or US-controlled vendor, even with EU regions.

Every entry on this page is verified against the vendor's public corporate filings or company registry before being added. Where ownership is unclear or evolving, we leave the field unset rather than guess.

Vendors with no US ownership

Sorted with featured tools first, then alphabetically. Each profile links to the trust center and corporate registry where available.

Marketing

Brevo

Email, SMS, automation, and CRM in one product for teams that want a European growth stack.

EU European Union

Useful when you want lifecycle marketing without stitching together five separate tools. View profile →

Code Hosting & DevOps

Codeberg

Non-profit code hosting platform run by a German Verein, built on the open-source Forgejo software fork.

EU Germany

Best when you want collaborative code hosting without a US corporate dependency at the centre of your engineering stack. View profile →

Customer Support

Crisp

Shared inbox, live chat, help center, campaigns, and AI support features from a French company with EU-hosted data.

EU Netherlands and Germany for core data storage

Strong fit for SaaS teams that want one customer conversation layer instead of multiple stitched tools. View profile →

Surveys & Feedback

Formbricks

Website, in-app, and link surveys for teams that want a modern feedback stack with open-source control options.

EU Managed cloud or self-hosted

One of the cleanest Qualtrics and Typeform alternatives for privacy-aware product teams. View profile →

Hosting & Cloud

Hetzner

One of the most practical EU infrastructure defaults for startups that want predictable costs and regional clarity.

EU Germany and Finland

Strong infrastructure base for self-hosted or managed sovereign stacks. View profile →

AI & LLM (EU-hosted)

Mistral AI

European LLM provider offering managed inference APIs and open-weight models that can be self-hosted inside any EU infrastructure.

EU European Union

Best when AI features need to ship without sending prompts and outputs to US-headquartered model providers. View profile →

Collaboration

Nextcloud

File sync, document collaboration, chat, and calendar capabilities with strong deployment control.

EU Self-hosted or partner-hosted in chosen region

Best when your team needs sovereign collaboration without defaulting to Microsoft 365. View profile →

Password & Secrets

Passbolt

End-to-end encrypted password manager built for teams, with strong open-source roots and a Luxembourg legal entity.

EU Self-hosted or managed cloud

Strong fit for security and DevOps teams that want a transparent, self-hostable vault rather than another US SaaS dependency. View profile →

Accounting & Invoicing

Pennylane

Accounting, invoicing, expense management, and financial reporting platform designed for French and broader European compliance.

EU European Union

Strong fit for SMBs and accounting firms that need a finance platform aligned with French and EU regulatory frameworks. View profile →

Analytics

Plausible Analytics

Privacy-friendly analytics with a simple dashboard, custom events, and an open-source self-hosted edition.

EU Falkenstein, Germany

Ideal when you want website analytics without consent-banner complexity. View profile →

Proton Mail

Secure email for teams and individuals with open-source apps, custom domains, and privacy-first defaults.

CH Switzerland

Strong fit for teams replacing Gmail while keeping a premium user experience. View profile →

Hosting & Cloud

Scaleway

Public cloud and infrastructure platform for teams that want an explicitly European cloud provider with a modern product surface.

EU France and broader European regions

Best when you want a more sovereign cloud story than the hyperscaler defaults provide. View profile →

Analytics

Simple Analytics

Lightweight website analytics focused on aggregated, non-personal data with Dutch hosting and a privacy-led product model.

EU Netherlands

Useful when you want an analytics layer even simpler than Plausible's operating model. View profile →

CMS & Web

Storyblok

Visual headless CMS for composable websites, localization-heavy projects, and teams that need editors and developers to work from one content layer.

EU EU by default on self-service plans

Best when your website stack needs modern APIs without sacrificing editorial usability. View profile →

File Storage & Sync

Tresorit

Encrypted file sync, sharing, and eSign for teams that need zero-knowledge collaboration with Swiss data residency.

CH European Union and Switzerland

Strong fit when client-side encryption and Swiss jurisdiction are both required for the storage layer. View profile →

Tuta Mail

End-to-end encrypted email, calendar, and contacts with German hosting, German company ownership, and a strong privacy stance.

EU Germany

A strong Gmail and Outlook replacement for teams that want a stricter German privacy posture. View profile →

CRM

Twenty

Modern open-source CRM with a flexible data model, customizable views, and a developer-friendly API.

EU Managed cloud in France or self-hosted

Best when you want a CRM you actually own rather than another US SaaS subscription that's painful to leave. View profile →

Video Conferencing

Whereby

Browser-based video meetings and an embeddable WebRTC API, with infrastructure in the EU and a Norwegian legal entity.

EEA European Union

Useful when you want to replace Zoom for general meetings or embed video into a product without taking on a US vendor. View profile →

Identity & SSO

ZITADEL

Open-source IAM for customer and workforce identity with OIDC, SAML, SCIM, and machine identity support.

CH Switzerland and EU regions on managed cloud, or self-hosted

Strong choice when you want a sovereign IAM platform without giving up modern SaaS ergonomics. View profile →

Collaboration

CryptPad

Encrypted documents, polls, whiteboards, kanbans, and shared workspaces for teams that want privacy-first collaboration.

EU cryptpad.fr or self-hosted

Best when collaboration data needs stronger encryption guarantees than mainstream suites provide. View profile →

Collaboration

Infomaniak kSuite

Collaboration and productivity suite for teams that want Swiss hosting and a more integrated operating surface.

CH Switzerland

Useful when you want a hosted suite with a very explicit Swiss infrastructure story. View profile →

Surveys & Feedback

LimeSurvey

Established survey software with deep configurability, hosted plans, and a self-hosted community edition.

EU Hosted service or self-hosted community edition

Useful when you need a more configurable survey engine than lightweight form tools provide. View profile →

mailbox.org

German email and workspace service for teams that want data residency in German data centers.

EU Germany

Good fit for organizations that want a stronger Germany-based email story than the mainstream defaults. View profile →

Mailfence

Secure email, calendar, documents, and groups from a Belgian provider with strong local hosting and legal positioning.

EU Belgium

Good fit for organizations that want Belgium-based hosting and even a licensed on-prem route for larger deployments. View profile →

Localization

Tolgee

Localization workflow platform for product teams that want developers and translators working in one system with self-hosting flexibility.

EU Managed cloud or self-hosted

Strong fit for multilingual apps and websites shipping across European markets. View profile →

Important caveats

No US ownership ≠ no third-country exposure. An EU-owned vendor may still use US sub-processors (CDN, email, error tracking) — check the vendor's sub-processor list.
Ownership can change. Acquisitions, funding rounds, and corporate restructurings happen. Re-verify before renewal.
Schrems II goes beyond ownership. Server location, sub-processor chains, and disclosed government request statistics all matter. Use this page as one input, not the whole assessment.