Sastrify
Sastrify GmbH, Cologne (owned by Deel since May 2026) ·www.sastrify.com· As of: 2026-07-30
Our verdict
This is not mandatory equipment, because falling back is not existential: the substitute is a spreadsheet plus a calendar, and that carries you surprisingly far. Nor is it an edge, since customers never see your procurement. The value here is an arithmetic result, not a principle. It only appears once the annual software budget is large enough that the percentage saved clearly exceeds the fee of 12,500 euros and up, plus the internal effort. Below that line the tool costs more than the problem does.
Who it fits
Solo
not suitable
A floor of 12,500 euros a year against a handful of subscriptions does not add up. The pricing page offers no self service entry point and no free tier.
Mid-market
suitable with caveats
Works from the point where nobody can still say how many tools are paid for and how many are actually used. Before that the fee exceeds the waste it uncovers, which is why this is conditional rather than a yes.
Enterprise
suitable with caveats
A functional fit for distributed departments, but the evidence is not public: no ISO 27001 certificate, no product level subprocessor list, no named storage location. Procurement would have to obtain all of that in writing before signing.
Buy, switch or build
Off-the-shelf
Spreadsheet, contract folder and calendar reminder
The honest incumbent and, for most companies below roughly 100 staff, the right answer. It costs nothing but discipline and breaks in exactly two places: when nobody notices a tool bought on a company card around procurement, and when the notice period reminder sits in the calendar but belongs to no one.
AI-native
Discovery from sign in data and accounting instead of a maintained list
The newer design reverses the direction: it does not ask which tools you have, it reads them from your single sign on, the card account and the invoice inbox. That reliably surfaces whatever was bought around procurement. What this design does not bring is the benchmark database of other companies' contracts. That is the one part of the comparison you can neither build nor derive from your own data.
Build it yourself
Sign in log plus accounting export into your own table
The inventory is the cheap part and takes a day to build: user list from single sign on, creditor list from accounting, reconciled monthly, notice periods as dated entries with a name beside each one. That surfaces idle licences and forgotten renewals. What the build does not deliver is the answer to the real question: whether the price you pay is the going rate. That answer is the core of the offer, and it is not something you can manufacture yourself.
Our advice
- Solo: Do not buy. A spreadsheet and a calendar cover this number of subscriptions.
- Mid-market: Do the arithmetic before the call: annual software budget times a realistic expected saving, against 12,500 euros plus the time of whoever maintains the register.
- Enterprise: A possible candidate, but settle storage location, subprocessors, audit logging and the product's future after the Deel acquisition in writing before signing.
Who is behind it
Staying power: Funded
In 2026 the nature of this rating changed rather than its level. The funding risk of a venture backed company disappeared with the Deel acquisition. In its place sits the risk that a bought in product gets absorbed into the acquirer's platform. The last blog post of Sastrify's own is dated 17 February 2026, before the announcement.
- Legal entity and register: Sastrify GmbH, Subbelrather Straße 15a, 50823 Köln, commercial register Amtsgericht Köln HRB 102066, VAT ID DE333084964, managing directors Sven Lackinger and Maximilian Messing · Source · As of 2026-07-30
- Name change confirmed: Registered on 22.06.2020 as Sastrix GmbH, renamed to Sastrify GmbH by shareholders' resolution of 27.08.2021, register number HRB 102066 unchanged · Source · As of 2026-07-30
- Acquisition by Deel: Closing reported for late April 2026, announcement in early May 2026, terms not disclosed; the entire team including both founders moves across to Deel · Source · As of 2026-07-30
- Acquisition confirmed by counsel: Orrick states that it advised Deel on the acquisition of Sastrify, announcement dated May 2026 · Source · As of 2026-07-30
- Funding before the acquisition: Series B of USD 32 million in August 2023 led by Endeit Capital, alongside HV Capital, FirstMark Capital, Simon Capital and TriplePoint Capital; a top-up in late 2023 from Reimann Investors, at the same time the purchase of Pengu (Amsterdam) · Source · As of 2026-07-30
- Latest disclosed annual accounts: Financial year ended 31.01.2025, filed on 24.02.2026; share capital 61,534 euros; revenue and headcount not publicly available · Source · As of 2026-07-30
Cost of leaving: Moderate
The negotiated contracts stay with each software vendor and do not hang on this tool. That is the easy part. Two things weigh more. First, a documented export path for the inventory you built, together with contract documents and cost history, is not publicly substantiated; the help pages consistently describe the way in and not the way out. Second, anyone who bought the package with assisted negotiation has outsourced a capability and has to rebuild it on the way out.
Regulation and data
| Data processing agreement | unclearThe privacy policy points to processing on behalf of the controller under Article 28 GDPR for the identity provider integration. No standalone data processing agreement is linked on the site; it has to be requested.Source · As of 2026-07-30 |
|---|---|
| Storage location | unclearThe data protection page speaks of secure data centres at reputable providers but names neither provider nor region. The US services listed in the privacy policy concern the marketing site, not the product. For customer data inside the application the storage location therefore remains open.Source · As of 2026-07-30 |
| Subprocessors | named for the website only, not for the productThe privacy policy names Webflow, Amazon CloudFront, Fastly, Mailchimp, SendGrid, HubSpot, Hotjar, Google, LinkedIn, Facebook and Clearbit. Those are marketing site services. A subprocessor list for the application itself is not public.Source · As of 2026-07-30 |
| Third-country transfer | standard contractual clauses cited, scope unclearFor transfers to the US the privacy policy cites standard contractual clauses under Article 46 GDPR, in the context of the website. The Deel acquisition, with the acquirer based in San Francisco, reopens this question at product level and it belongs on the table before any signature.Source · As of 2026-07-30 |
| Training on customer data | unclearNo public statement, even though the product runs AI contract capture and an AI assistant and advertises a benchmark database built from contracts. That is exactly where the question bites: whether and in what form your own contract data feeds that database or any model is documented nowhere.no source given · As of 2026-07-30 |
| Retention and deletion | quantified for website data onlyServer logs deleted after 14 days at the latest, applicant data 6 months after rejection and one year with consent. For contract documents and inventory data inside the application the vendor only states they are kept as long as needed to deliver the service. No post termination deadline is public.Source · As of 2026-07-30 |
| Certifications | SOC 2 claimed, no ISO 27001The site carries a SOC 2 badge and a GDPR badge. Neither the SOC 2 report type nor its audit window is named, and no report is publicly retrievable. An ISO 27001 certificate is claimed nowhere. The vendor operates no trust portal.Source · As of 2026-07-30 |
| EU AI Act, Article 50 | unclearA notable gap: the product advertises that it produces audit documentation for DORA, NIS2 and the AI Act, yet says nothing about its own transparency duties under Article 50 of the AI Regulation. Anyone using it for evidence should first ask the vendor about its own.no source given · As of 2026-07-30 |
| Audit logging | unclearRole based access control and internal plus external audits are named. Whether customers receive their own auditable log of access and changes, and in which package, is nowhere stated publicly.Source · As of 2026-07-30 |
What it really costs
Entry price
Three packages, each labelled starting from: Software Management from 12,500 euros a year, Vendor Benchmarks from 15,000 euros, Expert Procurement from 25,000 euros. No free tier, no self service plan, the actual price only through a quote conversation.
Source · As of2026-07-30
What gets expensive
Two places. First the words starting from: the pricing page gives you no way to derive what the contract actually costs, and it names neither minimum term nor notice period nor renewal mechanics. Second the step up from plain visibility to assisted negotiation, which doubles the entry price. On top sits the quiet line item nobody budgets: without a person who maintains the inventory and chases the alerts, the tool produces a tidy register and no savings.
What it displaces
- Software inventory as a maintained spreadsheet
- Notice periods as calendar entries with no owner
- Price negotiation by gut feel without a benchmark
Interfaces
- Single sign-on and identity provider integration, Okta among them
- Integrations with accounting and spend management tools, among them DATEV, Pleo, Moss, Ramp and Spendesk
- Bulk import of inventory and spend data as XLSX, CSV, TSV, XML or JSON
- Document intake by forwarding to an email address
- Notifications into Slack
- No publicly documented API for pulling data back out
At Convios: Not used by us
Not in use and not trialled. This assessment rests entirely on publicly retrievable vendor pages, the commercial register and reporting on the acquisition.
Evidence
- 1.Package prices from 12,500, 15,000 and 25,000 euros a year, no free tier, detailed pricing only on request · As of 2026-07-30
- 2.Legal entity Sastrify GmbH, Cologne, local court Cologne HRB 102066, managing directors Lackinger and Messing · As of 2026-07-30
- 3.Originally registered as Sastrix GmbH on 22 June 2020, renamed Sastrify GmbH by resolution of 27 August 2021 under the same register number · As of 2026-07-30
- 4.Acquired by Deel, closed end of April 2026, announced early May 2026, terms undisclosed, entire team moving across · As of 2026-07-30
- 5.SOC 2 and GDPR claims, encryption and role based access control; no named hosting provider, no region, no ISO 27001 · As of 2026-07-30
- 6.Controller entity, website subprocessors, standard contractual clauses and retention periods · As of 2026-07-30
- 7.Series B of 32 million US dollars in August 2023, investors Endeit Capital, HV Capital, FirstMark, Simon Capital, TriplePoint · As of 2026-07-30
- 8.Annual accounts to 31 January 2025 disclosed on 24 February 2026, share capital 61,534 euros, company active · As of 2026-07-30
Last reviewed: 2026-07-30byDr. Oliver Gausmann, Convios GmbH
Details out of date? Let us know.