
commercetools
Partially CompliantMunich headless commerce platform for enterprise, with a German imprint and no parent company disclosed.

GDPR Compliance Data
Not independently verified| GDPR Status | Partially Compliant |
| HQ Country | Germany |
| Ownership | Not yet verified |
| Foreign Disclosure Exposure | Not yet verified |
| Data Hosting Location | Unknown“Not published. Neither the privacy policy nor the imprint names a cloud provider or a hosting region. Checked commercetools.com/privacy and commercetools.com/imprint (read 2026-08-24).” |
| EU Servers Available | |
| Data Processing Agreement | Not verified |
| Sub-processor List | Not verified |
| Schrems II Risk | Unknown |
| SCCs in Place | |
| Last Verified | 24 August 2026 |
How we reached this
Imprint names commercetools GmbH, Adams-Lehmann-Str. 44, 80797 Munich, Germany, Amtsgericht München HRB 161496, VAT DE249425664, management Dirk Hörig and Tobias Muckel. No parent company is named. Majority investment by a US private equity firm has been widely reported in the trade press; that reporting was not confirmed from a primary source in this review, so ownershipOrigin is UNKNOWN rather than either EU_OWNED, which would ignore credible reporting, or EU_HQ_FOREIGN_PARENT, which would assert something unverified. No hosting region or cloud provider is published, so dataHostingLocation, exposure and Schrems II risk are all UNKNOWN. No DPA was located at a public URL. Both the ownership chain and the hosting region should be obtained in writing before an enterprise commitment; at this contract size neither is an unreasonable request.
About commercetools
Composable Commerce, Enterprise Scale
commercetools sells commerce as a set of APIs that an enterprise assembles into its own architecture: product, cart, order, price, promotion and customer services, each independently callable, with nothing prescribed about the frontend.
It is the platform for organisations replacing a monolithic suite across many brands and regions, and its pricing and implementation effort reflect that. For a mid-market retailer it is over-specified; for a group running twenty storefronts in twelve countries it is often the shortlist.
What the Documents Say, and Do Not
The imprint names commercetools GmbH, Adams-Lehmann-Str. 44, 80797 Munich, registered at Amtsgericht München under HRB 161496, with two managing directors. A German company on the face of it.
What the imprint does not do is name a parent. Majority investment in commercetools by an American private equity firm has been widely reported in the trade press, and if accurate it would make this a European company under foreign control, which is exactly the distinction this directory separates from hosting. That reporting was not confirmed against a primary source for this listing, so ownership is recorded as UNKNOWN rather than asserted in either direction.
The hosting region is also not published. commercetools runs on public cloud infrastructure and offers regional deployments, but the public site does not state which provider or which regions, so that too is left unrecorded rather than guessed.
What to Ask For
Two questions, in writing, before an enterprise commitment: who ultimately owns commercetools GmbH, and which cloud provider and region will hold our data. Both are reasonable at this contract size and neither is answerable from the public site today. If the answer to the first is a US owner and the second is a US hyperscaler, the data is reachable under the CLOUD Act twice over.
More in ecommerce platforms.
Key Features
Pros & Cons
Categories
commercetools GDPR & data protection: common questions
Is commercetools GDPR compliant?
Partly. commercetools meets some of the requirements, with caveats worth reading before you commit.
Where does commercetools store data?
commercetools states: "Not published. Neither the privacy policy nor the imprint names a cloud provider or a hosting region. Checked commercetools.com/privacy and commercetools.com/imprint (read 2026-08-24).". Data is hosted in a location we have not been able to verify.
Does commercetools offer a Data Processing Agreement (DPA)?
We could not locate a published DPA for commercetools. That does not mean one is unavailable. Many vendors provide it on request or inside the account area rather than publishing it. Ask before you sign.
What a DPA has to cover →Is commercetools a European company?
We have not verified commercetools's ultimate ownership.
Related Tools

Shopware
German commerce platform available self-hosted or as managed cloud, with an open source community edition.

PrestaShop
French open source ecommerce platform, self-hosted, whose own hosted services run on Google Cloud in the United States.

Saleor
Polish open source headless commerce API with a managed cloud, a published DPA and EEA data storage stated in its terms.
Spotted something wrong?
Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.
If you work at commercetools and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.