Back to Tools
commercetools logo

commercetools

Partially Compliant

Munich headless commerce platform for enterprise, with a German imprint and no parent company disclosed.

🇩🇪GermanyPaid
commercetools website screenshot

GDPR Compliance Data

Not independently verified
GDPR Status
Partially Compliant
HQ CountryGermany
OwnershipNot yet verified
Foreign Disclosure ExposureNot yet verified
Data Hosting Location
Unknown“Not published. Neither the privacy policy nor the imprint names a cloud provider or a hosting region. Checked commercetools.com/privacy and commercetools.com/imprint (read 2026-08-24).”
EU Servers Available
Data Processing AgreementNot verified
Sub-processor ListNot verified
Schrems II Risk
Unknown
SCCs in Place
Last Verified24 August 2026

How we reached this

Imprint names commercetools GmbH, Adams-Lehmann-Str. 44, 80797 Munich, Germany, Amtsgericht München HRB 161496, VAT DE249425664, management Dirk Hörig and Tobias Muckel. No parent company is named. Majority investment by a US private equity firm has been widely reported in the trade press; that reporting was not confirmed from a primary source in this review, so ownershipOrigin is UNKNOWN rather than either EU_OWNED, which would ignore credible reporting, or EU_HQ_FOREIGN_PARENT, which would assert something unverified. No hosting region or cloud provider is published, so dataHostingLocation, exposure and Schrems II risk are all UNKNOWN. No DPA was located at a public URL. Both the ownership chain and the hosting region should be obtained in writing before an enterprise commitment; at this contract size neither is an unreasonable request.

About commercetools

Composable Commerce, Enterprise Scale

commercetools sells commerce as a set of APIs that an enterprise assembles into its own architecture: product, cart, order, price, promotion and customer services, each independently callable, with nothing prescribed about the frontend.

It is the platform for organisations replacing a monolithic suite across many brands and regions, and its pricing and implementation effort reflect that. For a mid-market retailer it is over-specified; for a group running twenty storefronts in twelve countries it is often the shortlist.

What the Documents Say, and Do Not

The imprint names commercetools GmbH, Adams-Lehmann-Str. 44, 80797 Munich, registered at Amtsgericht München under HRB 161496, with two managing directors. A German company on the face of it.

What the imprint does not do is name a parent. Majority investment in commercetools by an American private equity firm has been widely reported in the trade press, and if accurate it would make this a European company under foreign control, which is exactly the distinction this directory separates from hosting. That reporting was not confirmed against a primary source for this listing, so ownership is recorded as UNKNOWN rather than asserted in either direction.

The hosting region is also not published. commercetools runs on public cloud infrastructure and offers regional deployments, but the public site does not state which provider or which regions, so that too is left unrecorded rather than guessed.

What to Ask For

Two questions, in writing, before an enterprise commitment: who ultimately owns commercetools GmbH, and which cloud provider and region will hold our data. Both are reasonable at this contract size and neither is answerable from the public site today. If the answer to the first is a US owner and the second is a US hyperscaler, the data is reachable under the CLOUD Act twice over.

More in ecommerce platforms.

Key Features

API-first composable commerce services
Multi-brand, multi-region and multi-currency
Independent product, cart, order and pricing APIs
Enterprise integration and extension framework
Frontend-agnostic architecture

Pros & Cons

Genuine composable architecture rather than a monolith with APIs bolted on
German operating company with a full imprint
Built for multi-brand, multi-region groups
No parent company disclosed, with US private equity ownership widely reported
No cloud provider or hosting region published
No data processing agreement at a public URL
Over-specified and expensive below enterprise scale

commercetools GDPR & data protection: common questions

Is commercetools GDPR compliant?

Partly. commercetools meets some of the requirements, with caveats worth reading before you commit.

Where does commercetools store data?

commercetools states: "Not published. Neither the privacy policy nor the imprint names a cloud provider or a hosting region. Checked commercetools.com/privacy and commercetools.com/imprint (read 2026-08-24).". Data is hosted in a location we have not been able to verify.

Does commercetools offer a Data Processing Agreement (DPA)?

We could not locate a published DPA for commercetools. That does not mean one is unavailable. Many vendors provide it on request or inside the account area rather than publishing it. Ask before you sign.

What a DPA has to cover

Is commercetools a European company?

We have not verified commercetools's ultimate ownership.

Spotted something wrong?

Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.

If you work at commercetools and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.