Overview
GDPR project management, hosted in Germany
Project management that keeps your data in the EU: hosted in Germany, with a DPA and a full security suite. The GDPR-compliant alternative to US tools.
Last updated:
Most project management tools come from the US. For teams in the EU that’s a data-protection problem: transferring personal data to the US became legally fraught after the Schrems II ruling. Zuuna fixes it at the root — your data stays in the EU.
Why GDPR matters for a project tool
Your board holds names, tasks, comments, hours — personal data about your team and often your customers. With US vendors that data sits on US servers, and a DPA alone doesn’t cure that when the provider is subject to US law.
How Zuuna is GDPR-compliant
- Hosted in Germany. Your data never leaves the EU.
- DPA included. A Data Processing Agreement you can sign before you start.
- Transparent by default. Imprint, privacy policy, terms and cancellation are bilingual and one click away.
Security for rollout
Zuuna ships the controls IT and data protection expect: two-factor authentication (enforceable), single sign-on (SAML/OIDC), SCIM provisioning, an IP allowlist and a security audit log (depending on plan).
Everything in one place
Boards, sprints, calendar, documents, time tracking and automations — GDPR-compliant, without chaining a dozen US tools together. For engineering teams there’s real git integration too: project management for developers.
Looking for a concrete alternative? See Zuuna vs Trello, Zuuna vs Jira or Zuuna vs Monday.
Where the data sits, who processes it and what we explicitly do not claim is set out on the security and privacy page — subprocessor table included.
FAQ
Is Zuuna GDPR-compliant?
Yes. Zuuna is hosted in Germany, your data never leaves the EU, and we sign a Data Processing Agreement (DPA) with you. Security features like 2FA, SSO and an audit log are built in.
Where is my data stored?
On servers in Germany. There is no transfer to the US — the kind that became legally risky for many US vendors after the Schrems II ruling.
Do I get a Data Processing Agreement (DPA)?
Yes, a DPA is available and can be signed before you start.
What security features are included?
Two-factor authentication (enforceable), single sign-on (SAML/OIDC), SCIM provisioning, an IP allowlist and a security audit log — depending on your plan.