Efficiency onlyOff-the-shelf productEstablished, AI retrofitted

Sastrify

Sastrify GmbH, Cologne (owned by Deel since May 2026) ·www.sastrify.com· As of: 2026-07-30

Pulls software inventory, actual usage and contract data into one register, flags notice periods before an auto renewal fires, and holds the price you pay against a benchmark database built from other companies' contracts.

Our verdict

This is not mandatory equipment, because falling back is not existential: the substitute is a spreadsheet plus a calendar, and that carries you surprisingly far. Nor is it an edge, since customers never see your procurement. The value here is an arithmetic result, not a principle. It only appears once the annual software budget is large enough that the percentage saved clearly exceeds the fee of 12,500 euros and up, plus the internal effort. Below that line the tool costs more than the problem does.

Who it fits

Solo

not suitable

A floor of 12,500 euros a year against a handful of subscriptions does not add up. The pricing page offers no self service entry point and no free tier.

Mid-market

suitable with caveats

Works from the point where nobody can still say how many tools are paid for and how many are actually used. Before that the fee exceeds the waste it uncovers, which is why this is conditional rather than a yes.

Enterprise

suitable with caveats

A functional fit for distributed departments, but the evidence is not public: no ISO 27001 certificate, no product level subprocessor list, no named storage location. Procurement would have to obtain all of that in writing before signing.

Buy, switch or build

Off-the-shelf

Spreadsheet, contract folder and calendar reminder

The honest incumbent and, for most companies below roughly 100 staff, the right answer. It costs nothing but discipline and breaks in exactly two places: when nobody notices a tool bought on a company card around procurement, and when the notice period reminder sits in the calendar but belongs to no one.

AI-native

Discovery from sign in data and accounting instead of a maintained list

The newer design reverses the direction: it does not ask which tools you have, it reads them from your single sign on, the card account and the invoice inbox. That reliably surfaces whatever was bought around procurement. What this design does not bring is the benchmark database of other companies' contracts. That is the one part of the comparison you can neither build nor derive from your own data.

Build it yourself

Sign in log plus accounting export into your own table

The inventory is the cheap part and takes a day to build: user list from single sign on, creditor list from accounting, reconciled monthly, notice periods as dated entries with a name beside each one. That surfaces idle licences and forgotten renewals. What the build does not deliver is the answer to the real question: whether the price you pay is the going rate. That answer is the core of the offer, and it is not something you can manufacture yourself.

Our advice

  • Solo: Do not buy. A spreadsheet and a calendar cover this number of subscriptions.
  • Mid-market: Do the arithmetic before the call: annual software budget times a realistic expected saving, against 12,500 euros plus the time of whoever maintains the register.
  • Enterprise: A possible candidate, but settle storage location, subprocessors, audit logging and the product's future after the Deel acquisition in writing before signing.

Who is behind it

Staying power: Funded

In 2026 the nature of this rating changed rather than its level. The funding risk of a venture backed company disappeared with the Deel acquisition. In its place sits the risk that a bought in product gets absorbed into the acquirer's platform. The last blog post of Sastrify's own is dated 17 February 2026, before the announcement.

  • Legal entity and register: Sastrify GmbH, Subbelrather Straße 15a, 50823 Köln, commercial register Amtsgericht Köln HRB 102066, VAT ID DE333084964, managing directors Sven Lackinger and Maximilian Messing · Source · As of 2026-07-30
  • Name change confirmed: Registered on 22.06.2020 as Sastrix GmbH, renamed to Sastrify GmbH by shareholders' resolution of 27.08.2021, register number HRB 102066 unchanged · Source · As of 2026-07-30
  • Acquisition by Deel: Closing reported for late April 2026, announcement in early May 2026, terms not disclosed; the entire team including both founders moves across to Deel · Source · As of 2026-07-30
  • Acquisition confirmed by counsel: Orrick states that it advised Deel on the acquisition of Sastrify, announcement dated May 2026 · Source · As of 2026-07-30
  • Funding before the acquisition: Series B of USD 32 million in August 2023 led by Endeit Capital, alongside HV Capital, FirstMark Capital, Simon Capital and TriplePoint Capital; a top-up in late 2023 from Reimann Investors, at the same time the purchase of Pengu (Amsterdam) · Source · As of 2026-07-30
  • Latest disclosed annual accounts: Financial year ended 31.01.2025, filed on 24.02.2026; share capital 61,534 euros; revenue and headcount not publicly available · Source · As of 2026-07-30

Cost of leaving: Moderate

The negotiated contracts stay with each software vendor and do not hang on this tool. That is the easy part. Two things weigh more. First, a documented export path for the inventory you built, together with contract documents and cost history, is not publicly substantiated; the help pages consistently describe the way in and not the way out. Second, anyone who bought the package with assisted negotiation has outsourced a capability and has to rebuild it on the way out.

Regulation and data

Data processing agreementunclearThe privacy policy points to processing on behalf of the controller under Article 28 GDPR for the identity provider integration. No standalone data processing agreement is linked on the site; it has to be requested.Source · As of 2026-07-30
Storage locationunclearThe data protection page speaks of secure data centres at reputable providers but names neither provider nor region. The US services listed in the privacy policy concern the marketing site, not the product. For customer data inside the application the storage location therefore remains open.Source · As of 2026-07-30
Subprocessorsnamed for the website only, not for the productThe privacy policy names Webflow, Amazon CloudFront, Fastly, Mailchimp, SendGrid, HubSpot, Hotjar, Google, LinkedIn, Facebook and Clearbit. Those are marketing site services. A subprocessor list for the application itself is not public.Source · As of 2026-07-30
Third-country transferstandard contractual clauses cited, scope unclearFor transfers to the US the privacy policy cites standard contractual clauses under Article 46 GDPR, in the context of the website. The Deel acquisition, with the acquirer based in San Francisco, reopens this question at product level and it belongs on the table before any signature.Source · As of 2026-07-30
Training on customer dataunclearNo public statement, even though the product runs AI contract capture and an AI assistant and advertises a benchmark database built from contracts. That is exactly where the question bites: whether and in what form your own contract data feeds that database or any model is documented nowhere.no source given · As of 2026-07-30
Retention and deletionquantified for website data onlyServer logs deleted after 14 days at the latest, applicant data 6 months after rejection and one year with consent. For contract documents and inventory data inside the application the vendor only states they are kept as long as needed to deliver the service. No post termination deadline is public.Source · As of 2026-07-30
CertificationsSOC 2 claimed, no ISO 27001The site carries a SOC 2 badge and a GDPR badge. Neither the SOC 2 report type nor its audit window is named, and no report is publicly retrievable. An ISO 27001 certificate is claimed nowhere. The vendor operates no trust portal.Source · As of 2026-07-30
EU AI Act, Article 50unclearA notable gap: the product advertises that it produces audit documentation for DORA, NIS2 and the AI Act, yet says nothing about its own transparency duties under Article 50 of the AI Regulation. Anyone using it for evidence should first ask the vendor about its own.no source given · As of 2026-07-30
Audit loggingunclearRole based access control and internal plus external audits are named. Whether customers receive their own auditable log of access and changes, and in which package, is nowhere stated publicly.Source · As of 2026-07-30

What it really costs

Entry price

Three packages, each labelled starting from: Software Management from 12,500 euros a year, Vendor Benchmarks from 15,000 euros, Expert Procurement from 25,000 euros. No free tier, no self service plan, the actual price only through a quote conversation.

Source · As of2026-07-30

What gets expensive

Two places. First the words starting from: the pricing page gives you no way to derive what the contract actually costs, and it names neither minimum term nor notice period nor renewal mechanics. Second the step up from plain visibility to assisted negotiation, which doubles the entry price. On top sits the quiet line item nobody budgets: without a person who maintains the inventory and chases the alerts, the tool produces a tidy register and no savings.

What it displaces

  • Software inventory as a maintained spreadsheet
  • Notice periods as calendar entries with no owner
  • Price negotiation by gut feel without a benchmark

Interfaces

  • Single sign-on and identity provider integration, Okta among them
  • Integrations with accounting and spend management tools, among them DATEV, Pleo, Moss, Ramp and Spendesk
  • Bulk import of inventory and spend data as XLSX, CSV, TSV, XML or JSON
  • Document intake by forwarding to an email address
  • Notifications into Slack
  • No publicly documented API for pulling data back out

At Convios: Not used by us

Not in use and not trialled. This assessment rests entirely on publicly retrievable vendor pages, the commercial register and reporting on the acquisition.

Matching methods

Evidence

  1. 1.Package prices from 12,500, 15,000 and 25,000 euros a year, no free tier, detailed pricing only on request · As of 2026-07-30
  2. 2.Legal entity Sastrify GmbH, Cologne, local court Cologne HRB 102066, managing directors Lackinger and Messing · As of 2026-07-30
  3. 3.Originally registered as Sastrix GmbH on 22 June 2020, renamed Sastrify GmbH by resolution of 27 August 2021 under the same register number · As of 2026-07-30
  4. 4.Acquired by Deel, closed end of April 2026, announced early May 2026, terms undisclosed, entire team moving across · As of 2026-07-30
  5. 5.SOC 2 and GDPR claims, encryption and role based access control; no named hosting provider, no region, no ISO 27001 · As of 2026-07-30
  6. 6.Controller entity, website subprocessors, standard contractual clauses and retention periods · As of 2026-07-30
  7. 7.Series B of 32 million US dollars in August 2023, investors Endeit Capital, HV Capital, FirstMark, Simon Capital, TriplePoint · As of 2026-07-30
  8. 8.Annual accounts to 31 January 2025 disclosed on 24 February 2026, share capital 61,534 euros, company active · As of 2026-07-30

Last reviewed: 2026-07-30byDr. Oliver Gausmann, Convios GmbH

Details out of date? Let us know.

Work through this method with an AI