Risk indicator, not a GDPR compliance verdict. Point-in-time assessment based on public web stack signals.Methodology & LimitationsCorrect listing / submit response
Jurisdiction
US-Anbieter: GDPR Assessment & Vendor List
US-Anbieter unterliegen dem CLOUD Act und FISA 702. Staatlicher Zugriff bleibt rechtlich möglich, auch wenn Daten in der EU gehostet werden. Standard Contractual Clauses und ein Transfer Impact Assessment sind seit Schrems II erforderlich.
247 curated profiles402 total detectedJurisdiktion USA · CLOUD Act betroffen
Last updated:
Vendors
Sorted by category
Each entry links to a dedicated profile with GDPR verdict, ownership chain, data categories, migration plan and FAQ.
15 providers · Online-Terminbuchung & Scheduling-Tools
- DPF🇺🇸Acuity SchedulingSquarespace Inc.
- 🇺🇸AddEventAddEvent, Inc.
- 🇺🇸AppointletAppointlet LLC
- 🇺🇸AppointyAppointy Software Inc.
- 🇺🇸Book Like A BossBook Like A Boss LLC
- 🇺🇸Cal.comCal.com Inc.
- DPF🇺🇸CalendlyCalendly Inc.
- DPF🇺🇸Google Appointment SchedulesAlphabet Inc.
- 🇺🇸KoalendarKoalendar Inc.
- DPF🇺🇸Microsoft BookingsMicrosoft Corp.
- 🇺🇸SavvyCalSavvyCal Inc.
- 🇺🇸SetmoreSetmore Appointments LLC
- 🇺🇸SprintfulSprintful LLC
- 🇺🇸Square AppointmentsBlock Inc. (Square)
- 🇺🇸TidyCalSumo Group Inc.
7 providers · Inbound-Lead-Routing mit Terminbuchung
18 providers · Customer Relationship Management
- 🇺🇸6sense6Sense Insights, Inc.
- 🇺🇸AiTrillionAAAecommerce, Inc.
- 🇺🇸AivaElm Street Technology, LLC
- 🇺🇸Alchemer MobileAlchemer LLC
- 🇺🇸BirdeyeBirdEye, Inc.
- 🇺🇸Clearbit RevealHubSpot, Inc. (Clearbit)
- 🇺🇸DemandbaseDemandbase, Inc.
- 🇺🇸Genesys CloudGenesys Telecommunications Laboratories, Inc.
- DPF🇺🇸HubSpotHubSpot Inc.
- 🇺🇸Keap (Infusionsoft)Keap (fka Infusionsoft Inc.)
- 🇺🇸Kommo (amoCRM)QSOFT LLC (Kommo/amoCRM)
- 🇺🇸MarketoAdobe Inc. (Marketo)
- 🇺🇸Optimizely CommerceOptimizely North America Inc.
- 🇺🇸Pardot (Marketing Cloud Account Engagement)Salesforce Inc.
- DPF🇺🇸PipedrivePipedrive OÜ
- DPF🇺🇸SalesforceSalesforce Inc.
- 🇺🇸vcitavcita Inc.
- 🇺🇸ZoomInfoZoomInfo Technologies Inc.
17 providers · Formular-Builder & Lead-Captures
- 🇺🇸Airtable FormsFormagrid Inc. (Airtable)
- 🇺🇸FilloutFillout, Inc.
- 🇺🇸FormstackFormstack LLC
- 🇺🇸IterateIterate, Inc.
- DPF🇺🇸JotformJotform Inc.
- 🇺🇸Kno CommerceKno Commerce, Inc.
- 🇺🇸OpinionLab (Verint)Verint Systems Inc.
- 🇺🇸Poll EverywherePoll Everywhere, Inc.
- 🇺🇸Pulse InsightsPulse Insights, Inc.
- 🇺🇸QualarooQualaroo, Inc. (Tochter von ProProfs)
- 🇺🇸QualtricsQualtrics LLC
- 🇺🇸Service Management Group (SMG)Service Management Group, LLC
- 🇺🇸SheerIDSheerID, Inc.
- 🇺🇸SprigSprig, Inc. (ehem. UserLeap)
- DPF🇺🇸SurveyMonkeyMomentive Global Inc.
- 🇺🇸UserVoiceUserVoice, Inc.
- 🇺🇸WufooSurveyMonkey (Momentive)
5 providers · Elektronische Unterschriften & eIDAS
1 providers · Deal Rooms & Sales-Content-Plattformen
53 providers · Web-Analytics & Tracking-Tools
- 🇺🇸33Across33Across, Inc.
- 🇺🇸Acquia Customer Data PlatformAcquia, Inc.
- 🇺🇸Acquia PersonalizationAcquia, Inc.
- 🇺🇸Ad LightningAd Lightning, Inc.
- 🇺🇸AdaraAdara, Inc.
- 🇺🇸AddShoppersAddShoppers, Inc.
- 🇺🇸AddToAnyAddToAny LLC (Pat Diven II)
- 🇺🇸Adobe AnalyticsAdobe Inc.
- 🇺🇸Adobe Audience ManagerAdobe Inc.
- 🇺🇸AdRollNextRoll, Inc.
- 🇺🇸AdThrive (Raptive)Raptive (vormals AdThrive)
- 🇺🇸AlgoliaAlgolia Inc.
- 🇺🇸Amazon AdvertisingAmazon.com, Inc.
- 🇺🇸Amazon AssociatesAmazon.com Services LLC
- 🇺🇸AmbassadorAmbassador Software Inc.
- 🇺🇸AmplitudeAmplitude Inc.
- 🇺🇸Bazaarvoice CurationBazaarvoice, Inc. (ehem. Curalate)
- 🇺🇸Bazaarvoice ReviewsBazaarvoice, Inc.
- 🇺🇸ChartbeatChartbeat, Inc.
- 🇺🇸Cloudflare TurnstileCloudflare Inc.
- 🇺🇸ComscoreComscore, Inc.
- 🇺🇸Google Ads Conversion TrackingGoogle LLC
- DPF🇺🇸Google AnalyticsAlphabet Inc.
- 🇺🇸Google Analytics Enhanced eCommerceGoogle LLC
- 🇺🇸Google Call Conversion TrackingGoogle LLC
- 🇺🇸Google OptimizeGoogle LLC
- 🇺🇸Google Publisher TagGoogle LLC
- 🇺🇸Google reCAPTCHAAlphabet Inc.
- DPF🇺🇸Google Tag ManagerAlphabet Inc.
- 🇺🇸hCaptchaIntuition Machines Inc.
- DPF🇺🇸LinkedIn Insight TagMicrosoft Corp.
- 🇺🇸LiveRamp DPMLiveRamp Holdings, Inc.
- 🇺🇸LyticsLytics, Inc.
- DPF🇺🇸Meta-PixelMeta Platforms Inc.
- 🇺🇸MGIDMGID, Inc.
- 🇺🇸Microsoft AdvertisingMicrosoft Corporation
- 🇺🇸Microsoft ClarityMicrosoft Corp.
- 🇺🇸MixpanelMixpanel Inc.
- 🇺🇸MonsterInsightsAwesome Motive, Inc.
- 🇺🇸mParticlemParticle, Inc.
- 🇺🇸OneTrustOneTrust LLC
- 🇺🇸OptimizelyOptimizely North America Inc.
- 🇺🇸OutbrainOutbrain Inc.
- 🇺🇸PayPal Marketing SolutionsPayPal Holdings, Inc.
- 🇺🇸Pinterest Conversion TagPinterest, Inc.
- 🇺🇸PostHog CloudPostHog Inc.
- 🇺🇸PowerReviewsPowerReviews, Inc. (Tochter von Syndigo LLC)
- 🇺🇸RudderStackRudderStack, Inc.
- 🇺🇸ShareThisShareThis, Inc. (Tochter von Predactiv, Inc.)
- 🇺🇸TaboolaTaboola, Inc.
- 🇺🇸The Trade DeskThe Trade Desk, Inc.
- 🇺🇸Treasure DataTreasure Data, Inc. (arm Technology)
- 🇺🇸UserZoomUserZoom Technologies, Inc. (Tochter von Zoom Video Communications)
7 providers · Tag Manager & Customer Data Platforms
6 providers · Session-Aufzeichnung & UX-Analyse
29 providers · Newsletter, Transaktions-E-Mail & Versand
- 🇺🇸Acquia Campaign FactoryAcquia, Inc.
- 🇺🇸Act-OnAct-On Software, Inc.
- 🇺🇸ActiveCampaignActiveCampaign LLC
- 🇺🇸AimtellAimtell, Inc.
- 🇺🇸AirshipAirship Group, Inc.
- DPF🇺🇸Amazon SESAmazon Web Services Inc.
- 🇺🇸BrazeBraze, Inc.
- 🇺🇸Campaign MonitorMarigold (CM Group)
- 🇺🇸Constant ContactNewfold Digital, Inc.
- 🇺🇸Customer.ioPeaberry Software Inc.
- 🇺🇸dmarciandmarcian Inc. / dmarcian EU
- 🇺🇸DripDrip LLC
- 🇺🇸EasyDMARCEasyDMARC Inc.
- DPF🇺🇸Google Mail SendingAlphabet Inc.
- 🇺🇸IterableIterable, Inc.
- 🇺🇸KartraGenesis Digital LLC
- 🇺🇸Kit (ConvertKit)ConvertKit, LLC
- 🇺🇸KlaviyoKlaviyo Inc.
- DPF🇺🇸MailchimpIntuit Inc.
- DPF🇺🇸MailgunSinch (Mailgun)
- 🇺🇸ManyChatManyChat, Inc.
- DPF🇺🇸Microsoft Mail SendingMicrosoft Corp.
- 🇺🇸OmnisendOmnisend Inc.
- 🇺🇸Oracle EloquaOracle Corporation
- 🇺🇸PostmarkActiveCampaign (Postmark)
- 🇺🇸Sailthru (Marigold)Marigold (CM Group)
- 🇺🇸SendGridTwilio (SendGrid)
- 🇺🇸SendlaneSendlane, Inc.
- 🇺🇸ValimailValimail Inc.
9 providers · Office-Suites & Team-Kommunikation
24 providers · Live-Chat, Helpdesk & Customer-Support
- 🇺🇸42ChatSciensio LLC dba 42Chat
- 🇺🇸Acquire Live ChatAcquire.io, Inc.
- 🇺🇸ActivEngageActivEngage, Inc.
- 🇺🇸AkiaAkia, Inc.
- 🇺🇸Alive5Alive Technologies, Inc.
- DPF🇺🇸DriftDrift (Salesloft)
- 🇺🇸Facebook Chat PluginMeta Platforms, Inc.
- 🇺🇸Five9Five9, Inc.
- 🇺🇸FreshchatFreshworks Inc.
- 🇺🇸FrontFrontApp Inc.
- 🇺🇸GladlyGladly, Inc.
- 🇺🇸Help ScoutHelp Scout PBC
- DPF🇺🇸IntercomIntercom Inc.
- 🇺🇸KustomerMeta Platforms, Inc. (Kustomer)
- 🇺🇸LivePersonLivePerson, Inc.
- 🇺🇸OlarkHabla Inc.
- 🇺🇸PodiumPodium Corporation, Inc.
- 🇺🇸QualifiedQualified.com Inc.
- 🇺🇸TalkdeskTalkdesk, Inc.
- 🇺🇸Tawk.totawk.to inc.
- 🇺🇸TidioTidio LLC
- DPF🇺🇸WhatsApp Business / Meta BusinessMeta Platforms Inc.
- DPF🇺🇸ZendeskZendesk Inc.
- 🇺🇸ZoomInfo ChatZoomInfo Technologies Inc.
11 providers · Online-Meetings & Video-Konferenzen
- 🇺🇸11Sight11Sight, Inc.
- 🇺🇸BitmovinBitmovin Inc.
- DPF🇺🇸Google MeetAlphabet Inc.
- 🇺🇸GoTo MeetingGoTo Technologies USA Inc.
- 🇺🇸JW PlayerLongTail Ad Solutions, Inc. (JW Player)
- 🇺🇸LoomAtlassian (Loom)
- DPF🇺🇸Microsoft TeamsMicrosoft Corp.
- 🇺🇸VimeoVimeo Inc.
- 🇺🇸WistiaWistia Inc.
- 🇺🇸YouTubeGoogle LLC (Alphabet Inc.)
- DPF🇺🇸ZoomZoom Communications
13 providers · Payment-Provider & Zahlungsabwicklung
- 🇺🇸AffirmAffirm, Inc.
- 🇺🇸Afterpay (Clearpay)Block, Inc. (Afterpay)
- 🇺🇸Amazon PayAmazon.com, Inc.
- 🇺🇸Authorize.NetVisa Inc. (Authorize.Net)
- 🇺🇸BraintreePayPal Holdings, Inc. (Braintree)
- 🇺🇸ChargebeeChargebee Inc.
- 🇺🇸Google PayGoogle LLC
- 🇺🇸Google WalletGoogle LLC
- 🇺🇸PayPalPayPal Holdings Inc.
- 🇺🇸RecurlyRecurly, Inc.
- 🇺🇸SquareBlock, Inc.
- DPF🇺🇸StripeStripe Inc.
- 🇺🇸ZuoraZuora, Inc.
10 providers · Content Delivery Networks
- 🇺🇸Acquia Cloud Platform CDNAcquia, Inc.
- 🇺🇸AkamaiAkamai Technologies Inc.
- DPF🇺🇸Amazon CloudFrontAmazon Web Services Inc.
- 🇺🇸cdnjsCloudflare, Inc. (Betreiber + Maintainer)
- DPF🇺🇸CloudflareCloudflare Inc.
- 🇺🇸FastlyFastly Inc.
- 🇺🇸Google Hosted LibrariesGoogle LLC
- 🇺🇸Let's EncryptInternet Security Research Group (ISRG)
- 🇺🇸Microsoft Ajax CDNMicrosoft Corporation
- 🇺🇸Unpkgunpkg (von Michael Jackson, US, betreut)
15 providers · Cloud-Hosting & Compute
- 🇺🇸Acquia Cloud PlatformAcquia, Inc.
- 🇺🇸Acquia Cloud Site FactoryAcquia, Inc.
- DPF🇺🇸Amazon Web ServicesAmazon Web Services Inc.
- 🇺🇸CloudwaysDigitalOcean, LLC (Cloudways)
- 🇺🇸Fly.ioFly.io, Inc.
- DPF🇺🇸Google CloudAlphabet Inc.
- 🇺🇸HerokuSalesforce (Heroku)
- 🇺🇸ImpervaImperva, Inc. (Tochter von Thales SA, FR)
- 🇺🇸Microsoft AzureMicrosoft Corp.
- DPF🇺🇸NetlifyNetlify Inc.
- 🇺🇸PantheonPantheon Systems, Inc.
- 🇺🇸RenderRender Inc.
- DPF🇺🇸VercelVercel Inc.
- 🇺🇸WebflowWebflow Inc.
- 🇺🇸WP EngineWP Engine, Inc.
4 providers · DNS-Hosting & Anycast-DNS
3 providers · Error-Monitoring & Crash-Reporting
Frequently asked questions
US-Anbieter: in brief
Are US providers inherently non-GDPR-compliant?
Are US providers inherently non-GDPR-compliant?
Not automatically. However: US providers are subject to the CLOUD Act and FISA 702. Even with EU hosting, the US parent company remains obligated to hand over data to US authorities on request. After Schrems II, standard contractual clauses alone are insufficient: additional technical and organisational protection measures and a Transfer Impact Assessment (TIA) are also required.
What does the EU-US Data Privacy Framework (DPF) change?
What does the EU-US Data Privacy Framework (DPF) change?
The DPF (in force since July 2023) is an adequacy decision for DPF-certified US recipients. It replaces the obligation to use SCCs for contractual arrangements. However: the CLOUD Act and FISA 702 are not repealed by the DPF. Government access remains legally possible. A new Schrems case against the DPF is already pending before the ECJ.
Which US providers are DPF certified?
Which US providers are DPF certified?
Many large US providers have registered on the DPF list (Google, Microsoft, Salesforce, and many others). We flag DPF status on every US profile as an important differentiating factor, but not as a free pass. Processing fully free from government access is only achievable with genuine EU providers.
How did the Sovereignty Scan determine the jurisdiction?
How did the Sovereignty Scan determine the jurisdiction?
We check the registered seat and parent company (commercial register, legal notice, privacy policy), the contractual partner for EU customers, the hosting region, and the subprocessor list. For multi-level structures (EU contractual partner + US parent), we label the primary jurisdiction and additionally flag ‘third-country transfer check required’.
Also by category
Vendor overview by application area
Terminbuchung26Lead-Routing & Terminbuchung8CRM33Formulare & Lead-Erfassung39E-Signatur7Sales-Content / Deal Rooms2Analytics & Tracking119Tag Management & CDPs20Session-Replay & Heatmaps9E-Mail-Marketing & Versand44Office & Kommunikation13Live-Chat & Support33Video-Konferenzen14Zahlungen20CDN17Hosting / Compute25DNS-Provider6Error-Tracking4
Next Step
Which US-Anbieter are running on your website?
60 seconds, no login. The Sovereignty Scan lists all detected tools with jurisdiction, ownership chain and matching EU alternative.