Efficiency onlyOff-the-shelf productEstablished, AI retrofitted

Leadfeeder

Dealfront Group GmbH, Karlsruhe (branded Leadfeeder since 24 March 2026, previously Dealfront) ·www.leadfeeder.com· As of: 2026-08-20

Leadfeeder matches the addresses of website visitors against a database of corporate address ranges and shows sales which companies looked at which pages and how often they returned.

Work through this tool with an AI

ClaudeChatGPTPerplexity

Our verdict

What you buy is a mapping. Address range to company, plus the interface that turns it into a list of visits. That mapping saves work nobody else does, because it is too tedious. It does not amount to an edge: the same service starts at EUR 79 a month, at SalesViewer in Bochum from EUR 99, and the vendor's database grows for every customer alike, whoever happens to use it. Two things stay in house and decide the value. The first is the follow-through. A company name on a list is not yet a case, and anyone who has not settled what happens after a visit buys a list nobody reads. The second is the identification rate, which depends on conditions you do not control. The vendor writes itself that the number of companies identified sits considerably below the actual number once most visitors decline consent (as at 27 March 2026). Mobile networks, home connections and corporate networks routed through third-party data centres never arrive at all. Then there is the limit of the answer: what gets identified is the company. Who did the reading stays open. The person is still missing for outreach, and buying them in from a second data vendor brings the Article 14 GDPR notification duty and the consent question under Section 7(2) of the Act Against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb, UWG) into the house, neither of which this tool touches. It makes visible who was there. It does not move your position in the market.

Evidence:As of 2026-08-20Legal entity, seat, register court and number, share capital, registration in 2022, renaming in 2023, change of managing director on 29 October 2025, shareholdersOpen sourceAs of 2026-08-20Brand change on 24 March 2026, unchanged contracting entities Dealfront Group GmbH, Dealfront Germany GmbH and Dealfront Finland Oy, unchanged prices and contracts, relocation of the loginOpen sourceAs of 2026-08-20Plans, monthly and annual prices, unlimited users, 100 identified companies and seven days of history on Lite, expiry of credits, validity of separately purchased creditsOpen sourceAs of 2026-08-20Controller, address, storage and processing exclusively on servers within the European Union, Article 46 GDPR as the framework, six months' retention for MCP server data, June 2026 versionOpen sourceAs of 2026-08-20Six sub-processors with purpose and country, among them Google Cloud EMEA, OpenAI Ireland and Perplexity AI located in the United States under standard contractual clauses, as at 14 November 2025Open sourceAs of 2026-08-20Exclusion of training with all model providers, processing primarily within the EU with data possibly leaving the EU at the language models, self-classification as not high-risk under the AI RegulationOpen sourceAs of 2026-08-20Data processing agreement, February 2026 version: notice and objection rights for sub-processors with a 30-day right of termination, processing primarily in Germany or the EU, return and deletion after termination without a deadline, reference to the list under the old brandOpen sourceAs of 2026-08-20Data processing agreement incorporated through Section 3.2 of the terms, without signature, signed version on request, applying to visitor identification and CRM connectionOpen sourceAs of 2026-08-20No cookies without consent, identification continues, considerably fewer companies identified, no recognition of returning visitors, address anonymisation configurableOpen sourceAs of 2026-08-20Authentication methods email and password, Microsoft Entra ID, Google and a one-time login link, enforcement only where all users sit in a single Leadfeeder company, no SAML connection to other directories documentedOpen sourceAs of 2026-08-20ISO 27001 and ISO 27701 per the vendor, operation on Amazon Web Services within the EU/EEA, encryption in transit and at rest, private vulnerability programme on HackerOneOpen sourceAs of 2026-08-20Contract term, automatic renewal for the same duration, notice 30 days before the end, reasonable effort to delete under Section 6.3, incorporation of the data processing agreementOpen sourceAs of 2026-08-20Marketing claim of 100 per cent processing within the EU, Amazon Web Services in Ireland, allocation of processor and controller rolesOpen sourceAs of 2026-08-20Transition to ISO/IEC 27001:2022, announced on 30 July 2025Open sourceAs of 2026-08-20EUR 180m investment by Great Hill Partners to merge Echobot and Leadfeeder, announced on 21 June 2022, plus EUR 50m for acquisitionsOpen sourceAs of 2026-08-20Acquisition of WiredMinds GmbH, reported on 11 March 2025, and EUR 30m in funding raised shortly beforeOpen sourceAs of 2026-08-20Prices of the German counterpart SalesViewer by identified companies, cancellable monthly with 14 days' noticeOpen sourceAs of 2026-08-20Annual and quarterly prices of the AI-native counterpart Warmly for identification, chat and autonomous follow-upOpen source

Who it fits

Solo

suitable with caveats

The price works: Lite costs nothing and shows the last 100 identified companies with a seven-day history, Discover starts at EUR 79 a month on annual billing. Users are unlimited on every plan, so there is no per-seat price. The catch sits in your own traffic. At 300 visitors a month you get a handful of identified companies, and for that handful the setup effort with a consent banner, target filters and alerts rarely pays.

Mid-market

suitable

The fit is right here. Activate sits at EUR 369 a month on annual billing, Scale at EUR 599 and annual only, both with unlimited users and a shared credit pool for enrichment, exports and CRM sync. The job in house is managing consumption, because credits expire at the end of the billing period, and agreeing in the sales team who picks up an identified company within what timeframe. Without that agreement the list drops out of view after six weeks.

Enterprise

suitable with caveats

Three points hold up a procurement review. Sign-in through your own directory exists only for Microsoft Entra ID, and it can be enforced only once all users sit in the same Leadfeeder company; a SAML connection to Okta or another directory appears nowhere in the documentation (as at 27 March 2026). There is no public commitment on an auditable access log. And the sub-processor list names three US-based large language model providers, while the GDPR sales page promises processing entirely within the EU. That contradiction gets settled before the purchase.

Buy, switch or build

Off-the-shelf

Buy a German vendor with a public price list

SalesViewer of Bochum is the nearest counterpart in the German-speaking market and bills by identified companies: EUR 99 a month for 50, EUR 339 for 250, EUR 629 for 750, cancellable monthly with 14 days' notice. For small volumes that is dearer, for large ones cheaper. In large corporates, by contrast, identification is rarely bought on its own. It sits inside the data platform already in the house, WebSights in ZoomInfo for instance, and rides along on the existing master agreement. What decides it is one counterparty fewer and a database that carries company identification and contact data in the same interface.

AI-native

The AI-native counterpart with outreach in the same tool

Warmly starts at the same point and attaches chat, calls and automatic follow-up directly to the signal. That is paid for on annual terms: USD 10,000 for identification, 20,000 with chat, 30,000 with autonomous follow-up, or USD 4,875 to 9,750 quarterly. Against EUR 79 a month that is a different order of magnitude, and the pricing page says nothing about storage location, processing within the EU or data processing terms. Buying there trades the cheap point solution for a chain of steps in one interface, with the data protection questions negotiated one by one.

Build it yourself

Your own identification on a purchased address database

The build is manageable. PostHog records the sessions in its EU environment, and the resolution from address range to company is bought in as a data source, from IPinfo or IP2Location for instance. The mapping and the scoring are written with Claude Code, run on Cloudflare Pages and Workers, the model calls go through LiteLLM, the keys sit in Infisical, and the result lands in Attio. Costed at EUR 900 a day and 8 to 12 person-days, a workable first version lands between EUR 7,200 and 10,800, plus the subscription for the address database and ongoing operation; that calculation is an estimate. What breaks it is data maintenance. Mobile networks, residential connections, data centres and service provider networks have to be filtered out, or the system reports the same cloud providers as prospects every day. The vendor maintains those exclusion lists for all customers at once; in a self-build one person does it alone. Add the question of who maintains the mapping once the person who built it leaves.

Our advice

  • Solo: Start on Lite and pay only once your own traffic yields enough identified companies.
  • Mid-market: Buy it and settle in the same move who picks up an identified company within 24 hours.
  • Enterprise: Before signing, settle logging and the contradiction between the EU promise and the US model providers in writing.

Who is behind it

Staying power: Established

The company is on the commercial register, is owned by a private equity firm and has been acquiring since 2022. For a procurement review one point weighs more than the funding position: the vendor has changed its name twice in four years. Echobot and Leadfeeder became Dealfront in 2022, and Dealfront became Leadfeeder again on 24 March 2026. The legal entity stayed the same, the addresses of the legal documents moved along, and the data processing agreement in its February 2026 version still points to an address under the old brand for the sub-processor list. Anyone archiving contract documents checks after a change like that what their copies still point to.

  • Legal entity and seat: Dealfront Group GmbH, Durlacher Allee 73, 76131 Karlsruhe, District Court (Amtsgericht) of Mannheim HRB 744853, share capital EUR 32,734; registered on 6 September 2022, renamed to the current company name on 11 May 2023As of 2026-08-20Legal entity, seat, register court and number, share capital, registration in 2022, renaming in 2023, change of managing director on 29 October 2025, shareholdersOpen source · As of 2026-08-20
  • Ownership and capital: Great Hill Partners announced a EUR 180m investment on 21 June 2022 to merge Echobot and Leadfeeder, plus a further EUR 50m committed for acquisitionsAs of 2026-08-20EUR 180m investment by Great Hill Partners to merge Echobot and Leadfeeder, announced on 21 June 2022, plus EUR 50m for acquisitionsOpen source · As of 2026-08-20
  • Acquisition in the market: acquisition of WiredMinds GmbH of Stuttgart, reported on 11 March 2025 by the advising law firm; purchase price not disclosed. The same release mentions EUR 30m in funding raised shortly before, without naming the type of capitalAs of 2026-08-20Acquisition of WiredMinds GmbH, reported on 11 March 2025, and EUR 30m in funding raised shortly beforeOpen source · As of 2026-08-20
  • Management: Kevin McIntyre has been registered as sole managing director since 29 October 2025; the previous managing director Bastian B. Karweg was removed on the same dayAs of 2026-08-20Legal entity, seat, register court and number, share capital, registration in 2022, renaming in 2023, change of managing director on 29 October 2025, shareholdersOpen source · As of 2026-08-20
  • Brand change: on 24 March 2026 Dealfront became Leadfeeder again; contracting entities, plans and contracts stayed unchanged per the vendor, while the login moved from app.dealfront.com to app.leadfeeder.com. Addresses under dealfront.com answer with a permanent redirectAs of 2026-08-20Brand change on 24 March 2026, unchanged contracting entities Dealfront Group GmbH, Dealfront Germany GmbH and Dealfront Finland Oy, unchanged prices and contracts, relocation of the loginOpen source · As of 2026-08-20
  • Security audit evidence: transition to ISO/IEC 27001:2022 announced on 30 July 2025, ahead of the 2013 version being retired; the security page additionally names ISO 27701. Neither page states the certification body or the scopeAs of 2026-08-20Transition to ISO/IEC 27001:2022, announced on 30 July 2025Open source · As of 2026-08-20

Cost of leaving: Moderate

The data comes out. Company and visit data can be exported as a feed, on a schedule if wanted, and the CRM sync runs anyway. What is missing after the export is the mapping itself: the list holds company names, while the database of address ranges behind it belongs to the vendor. A successor starts from zero and identifies different companies in the first weeks, because every vendor maintains its own mapping. Then there is the contract: terms of one year or longer renew automatically for the same duration unless notice arrives 30 days before the last day. The work on switching day is manageable, one script out, one in, plus the change in the consent banner.

Regulation and data

How to read the traffic lightHow to read the traffic lightThe traffic light rates how well a point is evidenced, not how good the tool is. It draws only on the value, note and source held in the profile. Where a statement is missing, it rates the absence, not a guess. A well-reasoned "unclear" on a point that matters little for this tool is yellow. A missing source on a point that decides whether you can use it at all is red.documented, no condition attacheddocumented, tied to a conditiondocumented, but unfavourableopen on a point that decides usability
Data processing agreementScale for this point: Data processing agreementdocumented, no condition attached: Auftragsverarbeitungsvertrag öffentlich abrufbar und ohne weitere Bedingung Bestandteil des Vertrags; oder er entfällt nachvollziehbar begründet, weil kein Anbieter Kundendaten verarbeitet.documented, tied to a condition: Vertrag existiert, ist aber an einen Tarif gebunden, nur nach Anfrage einsehbar oder allein in den Nutzungsbedingungen geregelt statt als eigenes Dokument.documented, but unfavourable: Kein Auftragsverarbeitungsvertrag im üblichen Sinn: entweder weil der Anbieter für das Kerngeschäft eigenständig Verantwortlicher ist und stattdessen eine andere Konstruktion gilt, oder weil öffentlich offen bleibt, ob überhaupt einer angeboten wird.open on a point that decides usability: Weder ein Vertrag noch ein dokumentierter Weg zu einem Vertrag; der Einkauf hätte nichts, worauf er sich stützen kann.documented, no condition attachedpublicly available in full text and incorporated through Section 3.2 of the terms, without signature and without a requestAs of 2026-08-20Data processing agreement incorporated through Section 3.2 of the terms, without signature, signed version on request, applying to visitor identification and CRM connectionOpen sourceThe agreement sits openly available as a document in its February 2026 version and applies under Section 3.2 of the terms without further action. A mutually signed version is available on request. The vendor names itself when it bites: for visitor identification on the customer's website and for connecting a CRM. For its own company database the same vendor acts as controller, and there the agreement expressly does not apply.As of 2026-08-20
Storage locationScale for this point: Storage locationdocumented, no condition attached: EU-Speicherort ohne Zusatzkosten und ohne Tarifbindung, oder der Ort ist vollständig selbst bestimmbar, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: EU-Speicherort möglich, aber an einen Tarif, einen gesondert zu aktivierenden Zusatz oder einen Umzug in eine getrennte Umgebung gebunden; oder die EU-Region ist nicht die Voreinstellung.documented, but unfavourable: Kein EU-Speicherort, der Ort ist aber eindeutig benannt, sodass die Folgen bewertbar sind.open on a point that decides usability: Der Speicherort ist öffentlich nicht benannt oder vom Kunden nicht steuerbar, sodass sich die Verarbeitung nicht verorten lässt.documented, no condition attachedAmazon Web Services in the European Union, in Ireland per the vendor, with no plan tied to itAs of 2026-08-20Marketing claim of 100 per cent processing within the EU, Amazon Web Services in Ireland, allocation of processor and controller rolesOpen sourceThe GDPR page names Amazon Web Services in Ireland as the place of processing, and the privacy notice in its June 2026 version states that data provided by users is stored and processed exclusively on servers within the European Union. The data processing agreement is more careful and speaks of processing primarily in Germany or a member state of the European Union. There is no region to choose, nor is one needed, because no other location is offered.As of 2026-08-20
SubprocessorsScale for this point: Subprocessorsdocumented, no condition attached: Vollständige öffentliche Liste der Unterauftragnehmer mit Zweck und Land; oder es gibt keine, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: Liste existiert und ist benannt, aber nur nach Anfrage oder nach Zugang zu einem Vertrauensportal einsehbar, oder sie nennt Zweck und Land nicht vollständig.documented, but unfavourable: Keine geführte Liste; namentlich stehen nur einzelne Dienste in der Datenschutzerklärung, überwiegend solche der eigenen Website.open on a point that decides usability: Weder eine Liste noch eine Nennung der Verarbeiter des Produkts, und kein dokumentierter Weg, sie zu erfahren.documented, no condition attachedpublic list with purpose and country per entry, six entries, as at 14 November 2025As of 2026-08-20Six sub-processors with purpose and country, among them Google Cloud EMEA, OpenAI Ireland and Perplexity AI located in the United States under standard contractual clauses, as at 14 November 2025Open sourceThe list is on the open web without a login and names purpose and country per entry: Amazon Web Services for operations in the EU, the two sister companies in Finland and Germany for infrastructure and security, plus Google Cloud EMEA, OpenAI Ireland and Perplexity AI for the language models, those three with the United States as their location. The data processing agreement promises notice before every change, but requires registering on the privacy page to receive it, and grants a 30-day right of termination where a reasoned objection reaches no agreement. Two places carry the same list: the agreement still points to an address under the old brand, the website carries it under the new one. Both respond, yet comparing them before procuring is worth the minute.As of 2026-08-20
Third-country transferScale for this point: Third-country transferdocumented, no condition attached: Keine Übermittlung in ein Drittland, oder die Übermittlung findet statt und die Grundlage ist benannt und im Vertrag verankert, etwa Standardvertragsklauseln, Angemessenheitsbeschluss oder EU-US-Datenschutzrahmen.documented, tied to a condition: Übermittlung findet statt, eine Grundlage ist genannt, aber ohne Zuordnung, welcher Empfänger auf welcher Grundlage arbeitet.documented, but unfavourable: Übermittlung findet statt und die eigenen Unterlagen widersprechen sich, oder die genannte Grundlage bezieht sich erkennbar nur auf einen Randbereich wie die Marketing-Website.open on a point that decides usability: Übermittlung findet erkennbar statt und eine Grundlage wird nirgends genannt.documented, but unfavourabletransfers to three US language model providers, each based on standard contractual clauses; the vendor's own sales page simultaneously promises processing entirely within the EUAs of 2026-08-20Exclusion of training with all model providers, processing primarily within the EU with data possibly leaving the EU at the language models, self-classification as not high-risk under the AI RegulationOpen sourceThe sub-processor list assigns the United States as the location for Google Cloud EMEA, OpenAI Ireland and Perplexity AI, naming standard contractual clauses as the basis for each. The AI features notice puts it plainly: data is processed primarily within the EU, but with the language model providers in use it may leave the EU. The GDPR page in the same web presence advertises 100 per cent processing within the EU. Both statements have stood side by side since the AI features arrived. The privacy notice additionally names Article 46 GDPR and adequacy decisions as the framework.As of 2026-08-20
Training on customer dataScale for this point: Training on customer datadocumented, no condition attached: Vertraglich oder in der Datenschutzerklärung ausdrücklich ausgeschlossen, mit Erstreckung auf die eingesetzten Modellanbieter; oder es gibt keine Datenübertragung an einen Anbieter.documented, tied to a condition: Ausschluss ab einem bestimmten Tarif, oder die Zusage steht nur auf einer Dokumentationsseite statt im Vertrag, oder die Frage stellt sich für das Werkzeug sachlich kaum und der Anbieter schweigt dazu.documented, but unfavourable: Nutzung ist die Voreinstellung und nur ein Widerspruch beendet sie; oder der Anbieter trainiert eigene Modelle auf bereinigten Kundendaten.open on a point that decides usability: Keine Aussage, obwohl das Werkzeug KI-Funktionen auf Kundeninhalten betreibt.documented, tied to a conditiontraining of the language models on prompts and outputs contractually excluded with all model providers per the vendor; the commitment sits on a notice pageAs of 2026-08-20Exclusion of training with all model providers, processing primarily within the EU with data possibly leaving the EU at the language models, self-classification as not high-risk under the AI RegulationOpen sourceThe AI features notice states that all language model providers have contractually agreed that neither the prompts nor the generated outputs are used for training. On customer content it says that, with one feature excepted, it is not passed to the model, and that prompts are deleted or anonymised once the result has been delivered. No period is given. The commitment sits on a vendor notice page; it appears neither in the data processing agreement nor in the terms.As of 2026-08-20
Retention and deletionScale for this point: Retention and deletiondocumented, no condition attached: Löschfristen nach Vertragsende beziffert und die Löschung oder Rückgabe zugesagt; oder die Fristen bestimmt der Betreiber selbst, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: Löschung ist zugesagt, die Fristen sind aber nur teilweise beziffert, oder Sicherungskopien sind ausdrücklich ausgenommen.documented, but unfavourable: Nur der Grundsatz der Erforderlichkeit ohne jede Frist nach Vertragsende, oder Fristen sind allein für Randbereiche wie Website-Protokolle genannt.open on a point that decides usability: Keine Aussage zu Aufbewahrung und Löschung.documented, tied to a conditionreturn and deletion after termination promised, without a deadline; for MCP server data a maximum of six months after the account is closedAs of 2026-08-20Data processing agreement, February 2026 version: notice and objection rights for sub-processors with a 30-day right of termination, processing primarily in Germany or the EU, return and deletion after termination without a deadline, reference to the list under the old brandOpen sourceThe data processing agreement obliges the vendor to hand over and delete all personal data, documents and work results after the principal agreement ends, with back-up copies and statutory retention duties excepted. It names no deadline. Section 6.3 of the terms promises only reasonable effort to delete on request. Exactly one period is quantified, and it covers a side area: data processed through the MCP server is kept for at most six months after the account is closed, per the privacy notice.As of 2026-08-20
CertificationsScale for this point: Certificationsdocumented, no condition attached: Mehrere anerkannte Nachweise, benannt mit Norm, Fassung und Geltungsbereich, und bezogen auf den Anbieter selbst.documented, tied to a condition: Ein anerkannter Nachweis für den Anbieter belegt, der Bericht aber nur auf Anfrage, oder der Nachweis hängt an einem Tarif, oder der Geltungsbereich bleibt teilweise offen.documented, but unfavourable: Nur pauschale Nennung ohne Norm-Fassung und Geltungsbereich, oder bloße Selbstauskunft, oder die Nachweise gehören dem Infrastrukturanbieter statt dem Anbieter, oder der Prüfzeitraum ist erkennbar veraltet, oder die eigenen Angaben widersprechen sich.open on a point that decides usability: Kein Nachweis genannt und keine Sicherheits- oder Vertrauensseite vorhanden.documented, tied to a conditionISO/IEC 27001:2022 and ISO 27701 per the vendor, without a certification body and without a scopeAs of 2026-08-20ISO 27001 and ISO 27701 per the vendor, operation on Amazon Web Services within the EU/EEA, encryption in transit and at rest, private vulnerability programme on HackerOneOpen sourceThe vendor announced the move to the 2022 version of ISO/IEC 27001 on 30 July 2025, and the security page additionally names ISO 27701. Which body audited, which scope is covered and how long the certificates run appears on none of the publicly reachable pages. Named are a private vulnerability reporting programme on HackerOne, encryption in transit and at rest, and a compliance section in the help centre.As of 2026-08-20
EU AI Act, Article 50Scale for this point: EU AI Act, Article 50documented, no condition attached: Der Anbieter macht eine belegte Aussage, die die eigene Pflicht trägt, etwa Modelldokumentation und Zertifizierung nach ISO/IEC 42001; oder das Werkzeug enthält nachvollziehbar begründet kein KI-System im Sinne der Verordnung.documented, tied to a condition: Der Anbieter äußert sich zur Verordnung oder ordnet die eigene Funktion ein, eine benannte Zusage zu den Transparenzpflichten aus Artikel 50 fehlt aber; oder das Werkzeug enthält kein KI-System, das gegenüber Menschen auftritt, und der Anbieter schweigt.documented, but unfavourable: Das Produkt enthält KI-Funktionen, der Anbieter schweigt dazu oder trägt ein Selbstetikett ohne Nachweis; die Kennzeichnung ist vom Betreiber aber selbst setzbar.open on a point that decides usability: KI spricht im Produkt unmittelbar mit Endkunden und der Anbieter sagt zu Artikel 50 nichts; die Kennzeichnung lässt sich ohne Zusage des Anbieters nicht sicher setzen.documented, but unfavourableself-classification as not high-risk, with no evidence named and no statement on Article 50As of 2026-08-20Exclusion of training with all model providers, processing primarily within the EU with data possibly leaving the EU at the language models, self-classification as not high-risk under the AI RegulationOpen sourceThe AI features notice declares that the features are fully aligned with the principles of the AI Regulation and do not fall under high-risk systems. The vendor names no model documentation, no certification to ISO/IEC 42001 and no commitment on the transparency duties in Article 50 of Regulation (EU) 2024/1689. In practice that is bearable, because the disclosure sits with the deployer anyway: whoever approaches customers off the back of a machine-generated summary decides on the notice themselves. A decision written into your own process replaces the missing commitment.As of 2026-08-20
Audit loggingScale for this point: Audit loggingdocumented, no condition attached: Nachvollziehbares Protokoll über Zugriffe und Änderungen in allen Tarifen enthalten, mit benannter Frist und Ausleitung in eigene Systeme; oder die Nachvollziehbarkeit liegt vollständig in eigener Hand, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: Protokoll vorhanden, aber an einen höheren Tarif oder einen kostenpflichtigen Zusatz gebunden, oder die Ausleitung fehlt in den unteren Stufen; Reichweite und Frist sind benannt.documented, but unfavourable: Protokolle sind nur anbieterseitig beschrieben, oder Reichweite und Frist bleiben offen, sodass sich Nachweispflichten nicht planen lassen.open on a point that decides usability: Öffentlich nicht belegt, ob der Kunde überhaupt ein auswertbares Protokoll erhält.open on a point that decides usabilityunclearAs of 2026-08-20Plans, monthly and annual prices, unlimited users, 100 identified companies and seven days of history on Lite, expiry of credits, validity of separately purchased creditsOpen sourceChecked were the pricing page with its full plan comparison, the security page, the settings and user management sections of the help centre, and the data processing agreement. Nowhere does it say whether the customer receives an auditable log of access, exports and changes, how long it is kept or whether it can be exported. The agreement obliges the vendor to assist with evidentiary duties and to report breaches, which is not a log inside the product. Anyone planning for evidentiary duties settles this point before signing.As of 2026-08-20

What it really costs

Entry price

Lite costs nothing and shows the last 100 identified companies per month with seven days of history and 20 credits. Discover sits at EUR 79 a month on annual billing and EUR 113 on monthly billing, Activate at EUR 369 and EUR 527 respectively, Scale at EUR 599 and annual only. Enterprise is quoted on request. Users are unlimited on every plan, while the number of identified companies and the credits are tiered within the plans.As of 2026-08-20Plans, monthly and annual prices, unlimited users, 100 identified companies and seven days of history on Lite, expiry of credits, validity of separately purchased creditsOpen source

As of 2026-08-20

What gets expensive

Two quantities drive the price, and neither depends on the team. The first is the number of companies identified per month; as site traffic grows, the plan grows with it. The second is the credits for enrichment, exports and CRM sync, a shared pool across all users. Standard credits expire at the end of the contract period with no rollover, while separately purchased ones stay valid for two years. Annual contracts are paid up front, quarterly on Scale. For terms of one year or longer the contract renews automatically for the same duration unless notice arrives 30 days before the end. Overestimating demand means paying twice: once for the plan and once for the credits left to expire.

What it displaces

  • Looking up individual visitor addresses by hand
  • Cold lists with no connection to your own web presence
  • Web analytics reports that deliver numbers and no names

Interfaces

  • Salesforce, HubSpot, Pipedrive and Zoho
  • Feed export as CSV, on a schedule if wanted
  • Alerts in Slack and by email
  • Leadfeeder API, plus an older version under its own name
  • MCP server in beta for querying from an AI assistant

Matching methods

  • Inbound-Led Warm Outbound (95/5 Map)The method needs a signal for outreach to start from, and visitor identification supplies exactly that signal out of your own web presence.
  • GTM Stack Signal RoutingAn identified company is the raw material for the chain, and without settling which workflow fires next, the list just sits there.
  • Demand Creation vs. Demand CaptureWhat gets identified is whoever was already there, so demand captured; the method shows why a second source has to run alongside it.
  • The 95:5 RuleIdentification mostly surfaces the small in-market group and tempts you to overlook the large majority that buys later.

Alternatives

Sources

  1. 1.Legal entity, seat, register court and number, share capital, registration in 2022, renaming in 2023, change of managing director on 29 October 2025, shareholders (opens in a new tab)northdata.com/…/Amtsgericht%20Mannheim%20HRB%20744853 · As of 2026-08-20
  2. 2.Brand change on 24 March 2026, unchanged contracting entities Dealfront Group GmbH, Dealfront Germany GmbH and Dealfront Finland Oy, unchanged prices and contracts, relocation of the login (opens in a new tab)leadfeeder.com/…/dealfront-is-rebranding-as-leadfeeder-faq · As of 2026-08-20
  3. 3.Plans, monthly and annual prices, unlimited users, 100 identified companies and seven days of history on Lite, expiry of credits, validity of separately purchased credits (opens in a new tab)leadfeeder.com/pricing · As of 2026-08-20
  4. 4.Controller, address, storage and processing exclusively on servers within the European Union, Article 46 GDPR as the framework, six months' retention for MCP server data, June 2026 version (opens in a new tab)leadfeeder.com/privacy/privacy-notice · As of 2026-08-20
  5. 5.Six sub-processors with purpose and country, among them Google Cloud EMEA, OpenAI Ireland and Perplexity AI located in the United States under standard contractual clauses, as at 14 November 2025 (opens in a new tab)leadfeeder.com/privacy/sub-processor-list-leadfeeder · As of 2026-08-20
  6. 6.Exclusion of training with all model providers, processing primarily within the EU with data possibly leaving the EU at the language models, self-classification as not high-risk under the AI Regulation (opens in a new tab)leadfeeder.com/privacy/ai-features-notice · As of 2026-08-20
  7. 7.Data processing agreement, February 2026 version: notice and objection rights for sub-processors with a 30-day right of termination, processing primarily in Germany or the EU, return and deletion after termination without a deadline, reference to the list under the old brand (opens in a new tab)marketing.dealfront.com/… · As of 2026-08-20
  8. 8.Data processing agreement incorporated through Section 3.2 of the terms, without signature, signed version on request, applying to visitor identification and CRM connection (opens in a new tab)help.leadfeeder.com/… · As of 2026-08-20
  9. 9.No cookies without consent, identification continues, considerably fewer companies identified, no recognition of returning visitors, address anonymisation configurable (opens in a new tab)help.leadfeeder.com/… · As of 2026-08-20
  10. 10.Authentication methods email and password, Microsoft Entra ID, Google and a one-time login link, enforcement only where all users sit in a single Leadfeeder company, no SAML connection to other directories documented (opens in a new tab)help.leadfeeder.com/en/articles/13922448-authentication-methods · As of 2026-08-20
  11. 11.ISO 27001 and ISO 27701 per the vendor, operation on Amazon Web Services within the EU/EEA, encryption in transit and at rest, private vulnerability programme on HackerOne (opens in a new tab)leadfeeder.com/security · As of 2026-08-20
  12. 12.Contract term, automatic renewal for the same duration, notice 30 days before the end, reasonable effort to delete under Section 6.3, incorporation of the data processing agreement (opens in a new tab)leadfeeder.com/terms/terms-and-conditions · As of 2026-08-20
  13. 13.Marketing claim of 100 per cent processing within the EU, Amazon Web Services in Ireland, allocation of processor and controller roles (opens in a new tab)leadfeeder.com/gdpr · As of 2026-08-20
  14. 14.Transition to ISO/IEC 27001:2022, announced on 30 July 2025 (opens in a new tab)leadfeeder.com/…/iso-iec-27001-2022-certification · As of 2026-08-20
  15. 15.EUR 180m investment by Great Hill Partners to merge Echobot and Leadfeeder, announced on 21 June 2022, plus EUR 50m for acquisitions (opens in a new tab)greathillpartners.com/… · As of 2026-08-20
  16. 16.Acquisition of WiredMinds GmbH, reported on 11 March 2025, and EUR 30m in funding raised shortly before (opens in a new tab)ypog.law/…/ypog-advises-dealfront-on-acquisition-of-wiredminds · As of 2026-08-20
  17. 17.Prices of the German counterpart SalesViewer by identified companies, cancellable monthly with 14 days' notice (opens in a new tab)salesviewer.com/de/preise · As of 2026-08-20
  18. 18.Annual and quarterly prices of the AI-native counterpart Warmly for identification, chat and autonomous follow-up (opens in a new tab)warmly.ai/pricing · As of 2026-08-20

Last reviewed: 2026-08-20 by Dr. Oliver Gausmann, Convios GmbH

Details out of date? Let us know.

← Back to the toolbox