Sovereignty Scan
Scan
Sovereignty Scan/Vendors/Anbieterprüfung
Risk indicator, not a GDPR compliance verdict. Point-in-time assessment based on public web stack signals.Methodology & LimitationsCorrect listing / submit response

Jurisdiction

Anbieterprüfung: GDPR Assessment & Vendor List

Anbieter, deren Konzernstruktur oder Datenverarbeitungsstandort sich nicht aus öffentlichen Quellen eindeutig bestimmen lässt. Vor Vertragsschluss manuell verifizieren.

72 curated profiles2,324 total detectedJurisdiktion noch nicht eindeutig bestimmt

Last updated:

Vendors

Sorted by category

Each entry links to a dedicated profile with GDPR verdict, ownership chain, data categories, migration plan and FAQ.

Tag Management & CDPs

All Tag Management & CDPs vendors

1 providers · Tag Manager & Customer Data Platforms

Zahlungen

All Zahlungen vendors

1 providers · Payment-Provider & Zahlungsabwicklung

Other jurisdictions:EU- & EWR-AnbieterUK & SchweizUS-Anbieter

Frequently asked questions

Anbieterprüfung: in brief

Why is the jurisdiction unclear for these providers?

We set ‘Provider review required’ when the corporate structure or data processing location cannot be clearly derived from public sources — for example because the legal notice is incomplete, multiple parent companies are listed, or the subprocessor list is not publicly accessible. For DACH B2B purchases, these providers should be manually verified before signing a contract.

How can I verify a provider’s jurisdiction myself?

Four sources: a commercial register extract of the parent company, the legal notice and privacy policy of the provider’s website, the DPA and its annex listing subprocessors, and on request the hosting region. A DPF entry (for US providers) is publicly verifiable on the DPF list. With US subprocessors within an EU provider, the CLOUD Act applies indirectly.

How did the Sovereignty Scan determine the jurisdiction?

We check the registered seat and parent company (commercial register, legal notice, privacy policy), the contractual partner for EU customers, the hosting region, and the subprocessor list. For multi-level structures (EU contractual partner + US parent), we label the primary jurisdiction and additionally flag ‘third-country transfer check required’.

Also by category

Vendor overview by application area

Terminbuchung26Lead-Routing & Terminbuchung8CRM33Formulare & Lead-Erfassung39E-Signatur7Sales-Content / Deal Rooms2Analytics & Tracking119Tag Management & CDPs20Session-Replay & Heatmaps9E-Mail-Marketing & Versand44Office & Kommunikation13Live-Chat & Support33Video-Konferenzen14Zahlungen20CDN17Hosting / Compute25DNS-Provider6Error-Tracking4

Next Step

Which Anbieterprüfung are running on your website?

60 seconds, no login. The Sovereignty Scan lists all detected tools with jurisdiction, ownership chain and matching EU alternative.

Start Sovereignty ScanBack to vendor directoryMethodology