How we score

Each product is checked on six criteria. Each one is pass,partial, fail orunknown. A pass is 1 point, a partial is half a point. Unknown is 0: if we cannot find a source, the product does not get the benefit of the doubt.

The score is computed by code from the sourced facts. Nobody types it in, and sponsorship has no effect on it.

1. Jurisdiction

The ultimate parent company is incorporated in the EU or EEA. Switzerland and the UK are European but not EU: partial.

2. Foreign-law exposure

No company in the ownership chain sits outside the EU/EEA, where it could be compelled under the US CLOUD Act or similar laws. Swiss or UK links: partial.

3. Data residency

Customer data is stored and processed in the EU by default. Only one of the two: partial.

4. Subprocessors

There is a public subprocessor list, and no non-EU subprocessor in core processing.

5. DPA

A GDPR Article 28 data processing agreement is available, or the terms commit to providing one.

6. Lock-in

At least one way out: the vendor's own software is open source, you can host it yourself, or you can export your core data yourself in a usable form.

Sources

We prefer the vendor's own legal pages, contracts and documentation, then company registers. Press and third-party sources are used only when nothing else exists, and are marked. Each vendor source is labelled: from the contract, from vendor documentation, or a website statement only. A criterion that rests on website statements alone scores partial at most. Every fact shows the date we last checked it. Facts older than 90 days are flagged.