U.S. CLOUD Act (2018)
Under certain conditions, obliges US companies to hand over stored data – even if it is located in Europe.
A CRM without US dependency.
German company · Hosting in Germany · No US parent company.
GDPR-compliant
Data processing exclusively under German and European law.
Hosting in Germany
No transfers to third countries – personal data stays within German jurisdiction.
CLOUD Act & FISA 702
US providers may be subject to US laws – regardless of where their servers are located.
Digital sovereignty
Independence from US corporations and a clear compliance structure.
In concrete terms
What does a GDPR-compliant CRM mean?
Personal data is processed and stored exclusively in Germany. Any development or support activities outside Germany take place without access to personal data.
Hosting in German data centres Data processing on behalf of the controller under Art. 28 GDPR Documented technical and organisational measures Transparent data structure Support for data subject rights (access, rectification, erasure, data export under Art. 15–20 GDPR)
BackgroundUS laws and risks with international providers
FISA Section 702 & Executive Order 12333
Allow access to data of non-US citizens in the interest of national security. They were central to the CJEU’s Schrems II ruling.
Schrems II & EU-US Data Privacy Framework
The Privacy Shield was declared invalid in 2020. The new Data Privacy Framework is under legal review – long-term legal certainty is not guaranteed.
International providers vs. business manager
| International providers | business manager |
|---|---|
No installation · Full functionality · Support included
Looking for a CRM without US dependency?
Talk to us about a privacy-compliant CRM solution from Germany – or try the business manager free for 30 days right away.