STACKIT

German cloud from Schwarz Group: object storage, Kubernetes, Redis, MongoDB, RabbitMQ and ELK.

Proprietary · https://www.stackit.de · EU legal entity

Cloud platformsVPS hosting

STACKIT cloud

Hosting: EU-hosted SaaS Reviewed

DE/AT datacentres; strong public-sector and retail-group backing.

FES Scores 9

Pillar	Criterion	Score	Evidence
Easy	Day-one UX Can non-technical staff use it without a project?	2	Enterprise onboarding expected. Source
Easy	Operate Admin burden, updates, backups and language coverage.	3	You still run apps on top. Source
Easy	Integrate SSO, mail/CalDAV, APIs and common NGO connectors.	4	Broad managed data services. Source
Fair	Lock-in / exit Can you leave with your data in open formats, at known cost?	3	Rule baseline (rubric_v1): EU SaaS usually allows export, but remapping integrations still costs effort. Source
Fair	Sovereignty EU legal entity, EU hosting, and exposure to extra-EU lawful access?	5	Rule baseline (rubric_v1): EU legal entity + EU-hosted SaaS offering. Source
Fair	Openness Open source or open standards? Are independent implementations possible?	2	Rule baseline (rubric_v1): proprietary / non-OSI license — openness capped unless open standards dominate. Source
Secure	IT security Authentication, encryption, patch cadence and independent audit.	4	Enterprise German cloud posture. Source
Secure	User security 2FA, roles, phishing resistance and safe defaults.	3	Org IAM. Source
Secure	Personal data GDPR fit: DPA, residency, sub-processors and Schrems II posture.	5	German GDPR and sovereignty story. Source

Indicative scores from public information — how we score.

Hosting: EU-hosted SaaS Reviewed

Listed as European VPS/cloud compute option.

FES Scores 9

Pillar	Criterion	Score	Evidence
Easy	Day-one UX Can non-technical staff use it without a project?	2	Typical onboarding for this product category. Source
Easy	Operate Admin burden, updates, backups and language coverage.	3	Vendor operates the hosted service. Source
Easy	Integrate SSO, mail/CalDAV, APIs and common NGO connectors.	4	Integrations vary; check current APIs and connectors. Source
Fair	Lock-in / exit Can you leave with your data in open formats, at known cost?	3	Rule baseline (rubric_v1): EU SaaS usually allows export, but remapping integrations still costs effort. Source
Fair	Sovereignty EU legal entity, EU hosting, and exposure to extra-EU lawful access?	5	Rule baseline (rubric_v1): EU legal entity + EU-hosted SaaS offering. Source
Fair	Openness Open source or open standards? Are independent implementations possible?	2	Rule baseline (rubric_v1): proprietary / non-OSI license — openness capped unless open standards dominate. Source
Secure	IT security Authentication, encryption, patch cadence and independent audit.	4	Security baseline depends on vendor posture and your configuration. Source
Secure	User security 2FA, roles, phishing resistance and safe defaults.	3	Account roles and MFA availability vary by plan. Source
Secure	Personal data GDPR fit: DPA, residency, sub-processors and Schrems II posture.	5	European vendor GDPR posture; still confirm DPA and subprocessors. Source

Indicative scores from public information — how we score.