EU hosting
Which EU-hosted project management tools fit GDPR requirements?
“EU-hosted” can mean the company seat, the data center, or the sub-processors. Stackfield, awork and MeisterTask store data in Germany. OpenProject offers an EU cloud with only EU sub-processors. Businessmap hosts in the USA by default and in the EU on request. Teamhood hosts in the EU on Microsoft Azure.
Last updated: 13 October 2026. By Vidas Vasiliauskas.
What to check
- Company seat. The country where the vendor is registered sets the law it answers to.
- Data location. Ask where the data is stored by default and whether you can choose a region.
- Sub-processors. Email, support chat and payment tools can sit outside the EU even when the main data does not. Ask for the list.
- Data processing agreement (DPA). Ask for it before you sign.
- Whose certification. Some vendors hold their own security certificates. Others cite the certificates of their data center.
- On-premise. Some buyers need the tool on their own servers.
What each vendor documents
| Tool | Company seat | Data location | Certification | On-premise |
|---|
| Businessmap | Sofia, Bulgaria | AWS. USA by default. EU (Ireland) on request. | None found on its DPA or pricing page | Not shown on the pricing page. Enterprise has a dedicated cloud instance. |
|---|
| OpenProject | Berlin, Germany | EU cloud on Scaleway, Paris. Global cloud on AWS. | Cites the ISO certificates of the AWS facilities | Yes |
|---|
| Easy Redmine (Easy8) | Prague, Czech Republic | Region of your choice. EU customers’ data stays in the EU. | Own ISO certificates for information security and cloud security | Yes, also air-gapped |
|---|
| Stackfield | Munich, Germany | Data centers in Germany | Own BSI C5 attestation and ISO certificates | Yes, from 100 users |
|---|
| awork | Hamburg, Germany | Microsoft Azure, Frankfurt and Berlin | Own ISO certificate for information security | Not stated on its pricing or legal pages |
|---|
| MeisterTask | Vaterstetten, Germany | A data center in Germany | Own ISO certificate for information security | Not stated on its security page |
|---|
| Teamhood | Vilnius, Lithuania | Microsoft Azure in the EU. EU, Germany or US on Enterprise. | Cites SOC 2 and ISO 27001 of the Microsoft Azure data centers | Yes, on Enterprise. Also hybrid, with the database on your servers. |
|---|
From each vendor’s own privacy, security, DPA and pricing pages, read 13 October 2026.
Where data can leave the EU
- Businessmap. Its privacy policy says it stores and processes data outside the EU, including in the USA. It names HubSpot, Braintree and Zapier.
- OpenProject. In the EU cloud, all sub-processors are in the EU. The Global cloud sends email through Postmark in the USA.
- awork. Its sub-processor list includes Intercom in the USA for support.
- Stackfield. It says its hosting and email subcontractors are in the EU. A GIF feature that admins can turn on uses Giphy in the USA.
- MeisterTask. Its privacy policy says personal data may be processed outside the European Economic Area.
Where Teamhood fits
Teamhood fits a team that wants Kanban, Gantt and timesheets from an EU company, with data in the EU. UAB Eylean in Vilnius builds and sells it. Each organization’s data is kept separate.
On Enterprise, hybrid hosting keeps the database on your servers and runs the app in Teamhood’s cloud. Your data stays readable over the REST API at any time.
What Teamhood does not do
- The choice of region, and dedicated, hybrid and on-premise hosting, are on Enterprise only.
- Single sign-on (SSO) and SCIM user provisioning are on Enterprise only.
Questions
Which tools keep data in Germany?
Stackfield uses data centers in Germany. awork uses Microsoft Azure in Frankfurt and Berlin. MeisterTask names a data center in Germany. Teamhood offers a Germany region on Enterprise.
Which tools run on-premise?
OpenProject, Easy Redmine (Easy8) and Stackfield. Stackfield’s on-premise version starts at 100 users. Teamhood runs on-premise or hybrid on Enterprise.
Is a tool GDPR compliant because it is hosted in the EU?
Hosting is one part. You also need a signed DPA and a sub-processor list you have checked. Email or support tools can send data outside the EU.
Are Teamhood’s certifications its own?
No. SOC 2 and ISO 27001 are held by the Azure data centers that host Teamhood.
Sources
- Businessmap Data Processing Addendum. Data centers, sub-processors. Read 13 October 2026.
- Businessmap privacy policy. Company seat, transfers outside the EU. Read 13 October 2026.
- Businessmap pricing. Dedicated cloud instance. Read 13 October 2026.
- OpenProject sub-processors. EU and Global cloud. Read 13 October 2026.
- OpenProject GDPR compliance. ISO certificates of the AWS facilities. Read 13 October 2026.
- Easy8 GDPR compliance and Easy8 ISO certifications. Read 13 October 2026.
- Stackfield security and Stackfield on-premise pricing. Read 13 October 2026.
- awork sub-processors and awork pricing. Read 13 October 2026.
- MeisterTask security and MeisterTask privacy policy. Read 13 October 2026.
- Teamhood facts and Teamhood deployment and hosting. Hosting, region, certifications.