All profiles in this area in one table, sorted by verdict: verdict, role, company size, EU storage and data processing agreement. The date per row is the last check; details and sources are in the profile.
| Tool | Verdict | Role | Company size | EU storage | DPA | Checked |
|---|---|---|---|---|---|---|
| 1PasswordAgileBits Inc., trading as 1Password, Toronto, Canada | Prevents falling behind | Off-the-shelf product | ● ● ● | EU storage available | DPA available | Aug 2026 |
| Credo AICredo.AI Corp. | Prevents falling behind | Off-the-shelf product | ○ ◐ ● | Storage location unclear | DPA available | Aug 2026 |
| InfisicalInfisical, Inc. | Prevents falling behind | Building block | ● ● ◐ | EU storage available | DPA unclear | Jul 2026 |
| JamfJAMF Software, LLC, Minneapolis, Minnesota | Prevents falling behind | Off-the-shelf product | ◐ ● ● | EU storage available | DPA available | Sept 2026 |
| LangfuseLangfuse GmbH, Berlin (owned by ClickHouse, Inc. since 2026-01-16) | Prevents falling behind | Building block | ● ● ◐ | EU storage available | DPA available | Jul 2026 |
| LiteLLMBerrie AI Incorporated (BerriAI) | Prevents falling behind | Building block | ◐ ● ◐ | EU storage available | DPA unclear | Jul 2026 |
| Nudge SecurityNudge Security, Inc. | Prevents falling behind | Off-the-shelf product | ○ ● ◐ | Storage location unclear | DPA available | Jul 2026 |
| OryOry Corp (EU-Vertretung: Ory Germany GmbH, München) | Prevents falling behind | Building block | ◐ ● ◐ | EU storage available | DPA available | Jul 2026 |
| SnykSnyk Limited, London | Prevents falling behind | Off-the-shelf product | ◐ ◐ ● | EU storage available | DPA available | Sept 2026 |
| TailscaleTailscale US Inc. (Delaware) for contracts from 2024-09-03, before that Tailscale Inc. (Toronto) | Prevents falling behind | Off-the-shelf product | ● ● ◐ | Storage location unclear | DPA available | Jul 2026 |
| UsercentricsUsercentrics GmbH, Munich, Germany | Prevents falling behind | Off-the-shelf product | ● ● ● | EU storage available | DPA available | Sept 2026 |
| VantaVanta, Inc., San Francisco, California, USA | Prevents falling behind | Off-the-shelf product | ○ ● ◐ | No EU storage | DPA available | Sept 2026 |
Company size: ● fits, ◐ with limits, ○ does not fit; order solo, SME, enterprise.
AgileBits Inc., trading as 1Password, Toronto, Canada · credential management
Holds a company’s passwords, keys and credentials in vaults with permissions per person and group, so that access is withdrawn in one place when somebody leaves instead of living on in browsers, spreadsheets and chat histories.
Off-the-shelf productEstablished, AI retrofittedSolo: suitable, Mid-market: suitable, Enterprise: suitable
Credo.AI Corp. · AI governance and model registry
Keeps every AI use case, model and AI vendor in one register, attaches to each entry the approvals and evidence a regulation or a customer asks for, and records who decided what and when.
Off-the-shelf productAI-nativeSolo: not suitable, Mid-market: suitable with caveats, Enterprise: suitable
Infisical, Inc. · secrets management
Keeps credentials, keys and certificates in one place, hands them out only to verified humans and machines, and logs every issue. That takes passwords out of chat threads, spreadsheets and source code.
Building blockEstablishedSolo: suitable, Mid-market: suitable, Enterprise: suitable with caveats
JAMF Software, LLC, Minneapolis, Minnesota · device management
Sets up Macs, iPhones and iPads centrally, distributes apps and settings, enforces security baselines and documents which device is in which state. A lost device, or one belonging to someone who leaves, can be locked or wiped remotely.
Off-the-shelf productEstablished, AI retrofittedSolo: suitable with caveats, Mid-market: suitable, Enterprise: suitable
Langfuse GmbH, Berlin (owned by ClickHouse, Inc. since 2026-01-16) · model call logging
Once you build language models into a product, you cannot see what the model was asked, what it answered, what the call cost, or whether a prompt change improved or degraded quality. Langfuse records every model call, versions the prompts and scores answers against fixed test cases.
Building blockAI-nativeSolo: suitable, Mid-market: suitable, Enterprise: suitable with caveats
Berrie AI Incorporated (BerriAI) · model gateway
Puts one uniform interface in front of many model providers, so keys, cost, limits and logs sit in one place instead of scattered across every service that calls a model.
Building blockAI-nativeSolo: suitable with caveats, Mid-market: suitable, Enterprise: suitable with caveats
Nudge Security, Inc. · AI usage visibility
Shows which AI and SaaS services are actually in use across a company, and what access rights those services hold on company data, without anyone having to survey the staff.
Off-the-shelf productEstablished, AI retrofittedSolo: not suitable, Mid-market: suitable, Enterprise: suitable with caveats
Ory Corp (EU-Vertretung: Ory Germany GmbH, München) · identity and access
Sign-in, registration, sessions, multi-factor and access rights have to work in every product with more than one user. Ory supplies that layer either as a hosted service or as open source servers you run yourself.
Building blockEstablishedSolo: suitable with caveats, Mid-market: suitable, Enterprise: suitable with caveats
Snyk Limited, London · vulnerabilities in your own code
Checks your own source code, embedded open-source libraries, container images and infrastructure configuration for known vulnerabilities and licence risks, right in the development environment, the repository and the build. For each finding it proposes a fix, for dependencies usually as a ready-made pull request.
Off-the-shelf productEstablished, AI retrofittedSolo: suitable with caveats, Mid-market: suitable with caveats, Enterprise: suitable
Tailscale US Inc. (Delaware) for contracts from 2024-09-03, before that Tailscale Inc. (Toronto) · internal system access
Ties access to servers, databases and internal services to a person's identity rather than to a network cable, a VPN account or a shared password. When someone leaves, access disappears with the account.
Off-the-shelf productEstablishedSolo: suitable, Mid-market: suitable, Enterprise: suitable with caveats
Usercentrics GmbH, Munich, Germany · consent management
Blocks every script on a website that requires consent, shows visitors a dialogue in which they choose, and files each decision with its timestamp and version in a log that can be downloaded.
Off-the-shelf productEstablished, AI retrofittedSolo: suitable, Mid-market: suitable, Enterprise: suitable
Vanta, Inc., San Francisco, California, USA · evidence automation
Continuously pulls the state of the connected systems, checks it against the control catalogues of SOC 2, ISO 27001 and further frameworks, and files the evidence so that an auditor can accept it without an intermediate step.
Off-the-shelf productEstablished, AI retrofittedSolo: not suitable, Mid-market: suitable, Enterprise: suitable with caveats
Register entries carry a classification and one sentence on the problem, but no verdict of ours and no page of their own. They move up to a profile when they show up in real buying decisions.
No register entry has been recorded for this area yet.
