Outside EUPasswords & securityFreemiumEU data storage βISO 27001
The open-source standard among password managers with low price and selectable EU region for data storage. The catch: the company is American, so the CLOUD Act applies regardless of where data is stored. If you want to avoid it completely you must self-host yourself.
Open source with annual third-party audits
EU server region can be selected at registration
American company covered by the CLOUD Act even with EU storage
Best for: Cost-conscious small businesses that want open source and the option to self-host
EU/EEAPasswords & securityFreemiumEU data storage βISO 27001
Simple and affordable password manager from Nord Security with ISO 27001, SOC 2 Type 2 and EU data storage in AWS data centers for business customers. The catch: closed source and a tangled ownership structure via holding companies that makes the sovereignty picture less clear than the marketing suggests.
EU company with EU data storage via AWS data centers
ISO 27001 certified and SOC 2 Type 2 audited, code audited by Cure53 (2020)
Not open source
Best for: Small businesses that want an easy-to-use EU-based password manager without technical hassle
EU-approved third countryPasswords & securityFreemiumISO 27001
Password manager from Swiss Proton with zero-knowledge encryption, built-in email aliases and a very low entry price. The catch: Switzerland is outside the EU/EEA and data is stored in Switzerland: strong privacy protection, but not EU sovereignty in the strict sense.
Swiss privacy legislation and zero-knowledge encryption
ISO 27001 certified and SOC 2 Type II audited
Data storage in Switzerland (not EU/EEA) and no selectable EU region
Best for: Privacy-focused small businesses that already use or want to enter the Proton ecosystem
EU-approved third countryPasswords & securityFrom approx 29 SEK/monthEU data storage βISO 27001
The market's most polished password manager with the industry's broadest certification portfolio (ISO 27001/27017/27018/27701, SOC 2). The catch: Canadian company with American venture capital, no free tier, and not open source.
Best in class on usability and design, which drives high adoption among employees
EU data residency can be selected at account creation
No free tier, only 14-day trial
Best for: Companies that prioritize usability and certifications over EU jurisdiction
EU/EEAPasswords & securityFreemiumEU data storage β
Open-source password manager from Luxembourg, built for teams, with cloud hosting in Belgium/Germany or sovereign data center in Luxembourg. The catch: the interface is built for IT professionals and feels clumsier than consumer alternatives, and cloud plans require at least 10 users.
Fully open source and auditable encryption
Luxembourg company with data storage in the EU, plus sovereign data center in Luxembourg (Cloud Sovereign)
Less polished interface than consumer products
Best for: IT teams and regulation-heavy operations that require open source and full EU sovereignty