sevdesk
Provider: sevDesk GmbH · Based in: sevDesk GmbH, Im Unteren Angel 1, 77652 Offenburg, Germany · Provider website
- Plans
- 4
- Sources
- 13
- As of
- 18 Oct
As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.
Incomplete. 6 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.
At a glance
- Hosting
- EU option: all 4 plans
- Training on inputs
- not publicly documented: all 4 plans
- DPA
- yes: all 4 plans
- Provider
- sevDesk GmbH
- Based in
- sevDesk GmbH, Im Unteren Angel 1, 77652 Offenburg, Germany; Local Court of Freiburg, HRB 710506 (legal notice); Austrian location: sevDesk GmbH, Vienna, FN 573196k
Values from 4 plans, each listed with the plans it applies to. Details and evidence are in the plan table.
Compare sevdesk
Compare with another toolCompared plan by plan with other tools in the category Business software:
Details per plan
Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.
| Feature | FreeCompare sevdesk Free with another tool | Rechnung (Invoicing)Compare sevdesk Rechnung (Invoicing) with another tool | Buchhaltung (Accounting)Compare sevdesk Buchhaltung (Accounting) with another tool | Buchhaltung Pro (Accounting Pro)Compare sevdesk Buchhaltung Pro (Accounting Pro) with another tool |
|---|---|---|---|---|
| differs by plan | 0 EUR | several tiers | several tiers | several tiers |
| Details: Price | EUR 0 ("permanently free", no credit card); according to the help centre applied automatically after the 14-day trial, unlimited in time; no add-ons bookable, limited support. | List price EUR 11.90 per month billed monthly, EUR 9.90 per month for 12 months (billed annually), EUR 8.90 per month for 24 months, each plus VAT; 1 user, additional users via add-on at EUR 5.90 per month. On the retrieval date the pricing page also showed promotional prices ("up to 50% discount"); according to terms section 1.5, discounts only apply to first bookings by new customers for the minimum term, renewals at regular prices. | List price EUR 25.90 per month billed monthly, EUR 22.90 per month for 12 months, EUR 19.90 per month for 24 months, each plus VAT; 1 user, more via add-on at EUR 5.90 per month. On the retrieval date the pricing page also showed promotional prices ("up to 50% discount"); according to terms section 1.5, discounts only apply to first bookings by new customers for the minimum term, renewals at regular prices. | List price EUR 34.90 per month billed monthly, EUR 30.90 per month for 12 months, EUR 27.90 per month for 24 months, each plus VAT; 1 user, more via add-on at EUR 5.90 per month. On the retrieval date the pricing page also showed promotional prices ("up to 50% discount"); according to terms section 1.5, discounts only apply to first bookings by new customers for the minimum term, renewals at regular prices. |
| differs by plan | no | yes | yes | yes |
| Details: AI features included | no (pricing page: the free plan covers 3 (e-)invoices per month, contacts, products and support material; AI-supported receipt capture and the AI agent Sevi are only listed for paid plans) | yes (AI agent Sevi in support, according to the pricing page in all three paid plans; AI-supported receipt capture and online banking reconciliation only from the Buchhaltung plan) | yes (AI-supported receipt capture reading date, amount, receipt number and supplier and suggesting the booking category; AI-supported matching of bank payments to invoices and receipts; AI agent Sevi; suggestions must be reviewed and confirmed by the user) | yes (all AI features from Buchhaltung; additionally cost centres, management accounts (BWA) and REST API) |
| yes | yes | yes | yes | |
| Details: DPA | yes (data processing agreement under Art. 28(3) GDPR, publicly available as a PDF, version Offenburg 04.07.2025; according to the help centre it is concluded digitally and does not need to be returned; applies to all customers, as according to the terms sevdesk only contracts with businesses) Provider’s DPA | yes (data processing agreement under Art. 28(3) GDPR, publicly available as a PDF, version Offenburg 04.07.2025; according to the help centre it is concluded digitally and does not need to be returned; applies to all customers, as according to the terms sevdesk only contracts with businesses) Provider’s DPA | yes (data processing agreement under Art. 28(3) GDPR, publicly available as a PDF, version Offenburg 04.07.2025; according to the help centre it is concluded digitally and does not need to be returned; applies to all customers, as according to the terms sevdesk only contracts with businesses) Provider’s DPA | yes (data processing agreement under Art. 28(3) GDPR, publicly available as a PDF, version Offenburg 04.07.2025; according to the help centre it is concluded digitally and does not need to be returned; applies to all customers, as according to the terms sevdesk only contracts with businesses) Provider’s DPA |
| not publicly documented | not publicly documented | not publicly documented | not publicly documented | |
| Details: Training on inputs | No explicit statement on training AI models with customer data. Help article "Belege erfassen" (recording receipts): the automatic receipt recognition is continuously learning and improves with every uploaded receipt. Receipt capture product page: booking category suggestions learn from the user's assignments. DPA section 3(6): operational data may be used anonymously and in aggregated form for evaluation purposes and, where applicable, for error analysis and further development of the products; section 2(2): statistical use only anonymised and aggregated. Whether this includes model training across customer accounts and whether an opt-out exists is not described. | No explicit statement on training AI models with customer data. Help article "Belege erfassen" (recording receipts): the automatic receipt recognition is continuously learning and improves with every uploaded receipt. Receipt capture product page: booking category suggestions learn from the user's assignments. DPA section 3(6): operational data may be used anonymously and in aggregated form for evaluation purposes and, where applicable, for error analysis and further development of the products; section 2(2): statistical use only anonymised and aggregated. Whether this includes model training across customer accounts and whether an opt-out exists is not described. | No explicit statement on training AI models with customer data. Help article "Belege erfassen" (recording receipts): the automatic receipt recognition is continuously learning and improves with every uploaded receipt. Receipt capture product page: booking category suggestions learn from the user's assignments. DPA section 3(6): operational data may be used anonymously and in aggregated form for evaluation purposes and, where applicable, for error analysis and further development of the products; section 2(2): statistical use only anonymised and aggregated. Whether this includes model training across customer accounts and whether an opt-out exists is not described. | No explicit statement on training AI models with customer data. Help article "Belege erfassen" (recording receipts): the automatic receipt recognition is continuously learning and improves with every uploaded receipt. Receipt capture product page: booking category suggestions learn from the user's assignments. DPA section 3(6): operational data may be used anonymously and in aggregated form for evaluation purposes and, where applicable, for error analysis and further development of the products; section 2(2): statistical use only anonymised and aggregated. Whether this includes model training across customer accounts and whether an opt-out exists is not described. |
| DPA section 10: after the end of the… | DPA section 10: after the end of the… | DPA section 10: after the end of the… | DPA section 10: after the end of the… | |
| Details: Data retention | DPA section 10: after the end of the contract, personal data is retained for three months for data export; immediate deletion at the end of the contract on request. Terms section 3.2: archiving according to commercial and tax retention periods during the contract term. Web app privacy notice: log files deleted after seven days at the latest or IP addresses obfuscated. Retention specifically for AI processing not publicly documented. | DPA section 10: after the end of the contract, personal data is retained for three months for data export; immediate deletion at the end of the contract on request. Terms section 3.2: archiving according to commercial and tax retention periods during the contract term. Web app privacy notice: log files deleted after seven days at the latest or IP addresses obfuscated. Retention specifically for AI processing not publicly documented. | DPA section 10: after the end of the contract, personal data is retained for three months for data export; immediate deletion at the end of the contract on request. Terms section 3.2: archiving according to commercial and tax retention periods during the contract term. Web app privacy notice: log files deleted after seven days at the latest or IP addresses obfuscated. Retention specifically for AI processing not publicly documented. | DPA section 10: after the end of the contract, personal data is retained for three months for data export; immediate deletion at the end of the contract on request. Terms section 3.2: archiving according to commercial and tax retention periods during the contract term. Web app privacy notice: log files deleted after seven days at the latest or IP addresses obfuscated. Retention specifically for AI processing not publicly documented. |
| EU option | EU option | EU option | EU option | |
| Details: Hosting | Sub-processor list (as of 10.04.2024): hosting with Amazon Web Services EMEA SARL, data hosted exclusively in Germany, access from third countries for support purposes conceivable; TOMs: AWS Frankfurt data centres; security page: hosting with AWS (no location stated); FAQ on the online banking page: receipts are stored 'in a certified data centre with server location in Germany' (translated). DPA section 2(3): processing in principle in the EU/EEA, outside only after prior notice and subject to Art. 44 et seq. GDPR. Where the AI features (receipt recognition, bank reconciliation, AI agent Sevi) are processed and whether external AI providers are used for them is not documented. | Sub-processor list (as of 10.04.2024): hosting with Amazon Web Services EMEA SARL, data hosted exclusively in Germany, access from third countries for support purposes conceivable; TOMs: AWS Frankfurt data centres; security page: hosting with AWS (no location stated); FAQ on the online banking page: receipts are stored 'in a certified data centre with server location in Germany' (translated). DPA section 2(3): processing in principle in the EU/EEA, outside only after prior notice and subject to Art. 44 et seq. GDPR. Where the AI features (receipt recognition, bank reconciliation, AI agent Sevi) are processed and whether external AI providers are used for them is not documented. | Sub-processor list (as of 10.04.2024): hosting with Amazon Web Services EMEA SARL, data hosted exclusively in Germany, access from third countries for support purposes conceivable; TOMs: AWS Frankfurt data centres; security page: hosting with AWS (no location stated); FAQ on the online banking page: receipts are stored 'in a certified data centre with server location in Germany' (translated). DPA section 2(3): processing in principle in the EU/EEA, outside only after prior notice and subject to Art. 44 et seq. GDPR. Where the AI features (receipt recognition, bank reconciliation, AI agent Sevi) are processed and whether external AI providers are used for them is not documented. | Sub-processor list (as of 10.04.2024): hosting with Amazon Web Services EMEA SARL, data hosted exclusively in Germany, access from third countries for support purposes conceivable; TOMs: AWS Frankfurt data centres; security page: hosting with AWS (no location stated); FAQ on the online banking page: receipts are stored 'in a certified data centre with server location in Germany' (translated). DPA section 2(3): processing in principle in the EU/EEA, outside only after prior notice and subject to Art. 44 et seq. GDPR. Where the AI features (receipt recognition, bank reconciliation, AI agent Sevi) are processed and whether external AI providers are used for them is not documented. |
| list available | list available | list available | list available | |
| Details: Sub-processors |
|
|
|
|
| 11 sources | 11 sources | 11 sources | 11 sources | |
| Details: Sources with retrieval date |
|
|
|
|
Compare sevdesk Free with another tool
Price and scope
- differs by plan
- 0 EUR
EUR 0 ("permanently free", no credit card); according to the help centre applied automatically after the 14-day trial, unlimited in time; no add-ons bookable, limited support.
- differs by plan
- no
no (pricing page: the free plan covers 3 (e-)invoices per month, contacts, products and support material; AI-supported receipt capture and the AI agent Sevi are only listed for paid plans)
Contract and data use
- yes
yes (data processing agreement under Art. 28(3) GDPR, publicly available as a PDF, version Offenburg 04.07.2025; according to the help centre it is concluded digitally and does not need to be returned; applies to all customers, as according to the terms sevdesk only contracts with businesses)
Provider’s DPA- not publicly documented
No explicit statement on training AI models with customer data. Help article "Belege erfassen" (recording receipts): the automatic receipt recognition is continuously learning and improves with every uploaded receipt. Receipt capture product page: booking category suggestions learn from the user's assignments. DPA section 3(6): operational data may be used anonymously and in aggregated form for evaluation purposes and, where applicable, for error analysis and further development of the products; section 2(2): statistical use only anonymised and aggregated. Whether this includes model training across customer accounts and whether an opt-out exists is not described.
- DPA section 10: after the end of the…
- DPA section 10: after the end of the contract, personal data is retained for three months for data export; immediate deletion at the end of the contract on request. Terms section 3.2: archiving according to commercial and tax retention periods during the contract term. Web app privacy notice: log files deleted after seven days at the latest or IP addresses obfuscated. Retention specifically for AI processing not publicly documented.
Hosting and sharing
- EU option
Sub-processor list (as of 10.04.2024): hosting with Amazon Web Services EMEA SARL, data hosted exclusively in Germany, access from third countries for support purposes conceivable; TOMs: AWS Frankfurt data centres; security page: hosting with AWS (no location stated); FAQ on the online banking page: receipts are stored 'in a certified data centre with server location in Germany' (translated). DPA section 2(3): processing in principle in the EU/EEA, outside only after prior notice and subject to Art. 44 et seq. GDPR. Where the AI features (receipt recognition, bank reconciliation, AI agent Sevi) are processed and whether external AI providers are used for them is not documented.
- list available
- Amazon Web Services EMEA SARL, German branch (external data centre, hosting; data only in Germany)
- EMAILBRIEF GmbH, Mutterstadt (sending invoices by post)
- Termitel GmbH, Ettlingen (handling customer phone enquiries)
- Twilio Inc. (SendGrid, Inc.), Dublin (sending emails; EU-U.S. Data Privacy Framework and standard contractual clauses)
- AI-specific sub-processors: not publicly documented (list as of 10.04.2024 names none)
Evidence
- 11 sources
- Pricing and plansPricing page, retrieved 18 Oct 2026
- Data processing agreement (version 04.07.2025)DPA, retrieved 18 Oct 2026
- List of approved sub-processors (as of 10.04.2024)Sub-processor list, retrieved 18 Oct 2026
- Technical and organisational measures (as of 10.04.2024)TOMs, retrieved 18 Oct 2026
- Privacy notice web app (as of 13.01.2025)Privacy notice, retrieved 18 Oct 2026
- SecuritySecurity page, retrieved 18 Oct 2026
- General terms and conditionsTerms and conditions, retrieved 18 Oct 2026
- Online banking (incl. FAQ on AI matching and finAPI)Product page, retrieved 18 Oct 2026
- Help centre: Recording receiptsDocumentation, retrieved 18 Oct 2026
- Help centre: Free planDocumentation, retrieved 18 Oct 2026
- Help centre: Data processing agreement (DPA)Documentation, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
Third-country transfers
DPA section 2(3): processing in principle in the EU/EEA; outside only after prior notice to the customer and subject to Art. 44 et seq. GDPR; section 5(7): authorisation to conclude EU standard contractual clauses with sub-processors in third countries. Sub-processor list (as of 10.04.2024): AWS hosts exclusively in Germany, support access from third countries conceivable; Twilio/SendGrid with the EU-U.S. Data Privacy Framework and standard contractual clauses. Web app privacy notice (as of 13.01.2025): Intercom (support chat), Segment and Mixpanel based in the USA; standard contractual clauses under Art. 46(2)(c) GDPR.
- Data processing agreement (version 04.07.2025) (DPA), retrieved 18 Oct 2026
- List of approved sub-processors (as of 10.04.2024) (Sub-processor list), retrieved 18 Oct 2026
- Privacy notice web app (as of 13.01.2025) (Privacy notice), retrieved 18 Oct 2026
Certifications (as stated by the provider)
not publicly documented(no ISO 27001, SOC 2 or C5 certification of sevdesk itself on the retrieved pages). Security page: hosting with AWS, external penetration tests, Cloudflare DDoS protection, multi-factor authentication. DPA section 6: audits by independent external bodies at least every two years. Bank connection via finAPI, a partner that sevdesk describes as BaFin-certified.
- Data processing agreement (version 04.07.2025) (DPA), retrieved 18 Oct 2026
- Security (Security page), retrieved 18 Oct 2026
- Online banking (incl. FAQ on AI matching and finAPI) (Product page), retrieved 18 Oct 2026
AI Act
Functions: AI-supported receipt capture (OCR text recognition, reading receipt data, suggesting the booking category), AI-supported bank reconciliation (matching payments to invoices and receipts based on amount, sender and payment reference), AI agent Sevi (24/7 support, answers questions based on help and knowledge material).
Provider’s statement: not publicly documented(the AI Act is not mentioned on the retrieved pages). Product pages: AI suggestions are not automatically adopted as binding; every assignment must be reviewed and confirmed by the user (AI should take work off your hands, but not decide on your accounting).
Classification (for review, not legal advice): To be reviewed: customer typically a deployer (Art. 3(4) AI Act) of the AI features built into sevdesk. Which obligations apply depends on the specific use. As a deployer, observe Art. 4 AI Act (AI literacy). Not legal advice.
- Pricing and plans (Pricing page), retrieved 18 Oct 2026
- Online banking (incl. FAQ on AI matching and finAPI) (Product page), retrieved 18 Oct 2026
- Recording receipts (incl. FAQ on AI-supported receipt capture) (Product page), retrieved 18 Oct 2026
- Help centre: Recording receipts (Documentation), retrieved 18 Oct 2026
Current notes 2026
Pricing page (retrieved 2026-10-18): Kostenlos, Rechnung, Buchhaltung and Buchhaltung Pro plans with terms of 1, 12 or 24 months; the 24/7 AI agent Sevi is newly listed. On the retrieval date a discount campaign was running ("up to 50% discount"). Terms: services exclusively for businesses within the meaning of section 14 of the German Civil Code (BGB), including trial and freemium accounts. The sub-processor list and the TOMs are dated 10.04.2024, the privacy notices 13.01.2025.
Note on EU processing
The provider is itself German (sevDesk GmbH, Offenburg); hosting exclusively in Germany according to the sub-processor list (AWS).
Open points of the review
- Which AI technology or external AI providers are used for receipt recognition, bank reconciliation and the AI agent Sevi is not documented; the sub-processor list (as of 10.04.2024) names no AI providers.
- Whether customer data is used to train AI models across accounts and whether an opt-out exists is not explicitly regulated (only "continuously learning" and DPA section 3(6) on anonymous, aggregated use).
- Processing location and retention specifically for AI processing (e.g. Sevi chat histories) not documented; Sevi may run via the support chat provider, but this is not documented.
- No certification of sevdesk itself (e.g. ISO/IEC 27001, SOC 2) published; no trust centre found.
- finAPI (bank connection) does not appear in the sub-processor list; its role (sub-processor or separate contract) is not described.
- Provider statement on the AI Act not found.
Frequently asked questions
Where does sevdesk store data?
EU hosting selectable (plans: Free, Rechnung (Invoicing), Buchhaltung (Accounting), Buchhaltung Pro (Accounting Pro)). According to the provider, as of 18 Oct 2026.
Is there a DPA for sevdesk?
yes in: Free, Rechnung (Invoicing), Buchhaltung (Accounting), Buchhaltung Pro (Accounting Pro). According to the provider, as of 18 Oct 2026.
Does sevdesk use inputs for AI training?
not publicly documented in: Free, Rechnung (Invoicing), Buchhaltung (Accounting), Buchhaltung Pro (Accounting Pro). Based on our research, as of 18 Oct 2026.
Where is the provider based?
sevDesk GmbH, Im Unteren Angel 1, 77652 Offenburg, Germany; Local Court of Freiburg, HRB 710506 (legal notice); Austrian location: sevDesk GmbH, Vienna, FN 573196k. According to the provider, as of 18 Oct 2026.
All sources
- 01Pricing and plansPricing page · retrieved 18 Oct 2026
- 02Data processing agreement (version 04.07.2025)DPA · retrieved 18 Oct 2026
- 03List of approved sub-processors (as of 10.04.2024)Sub-processor list · retrieved 18 Oct 2026
- 04Technical and organisational measures (as of 10.04.2024)TOMs · retrieved 18 Oct 2026
- 05Privacy notice web app (as of 13.01.2025)Privacy notice · retrieved 18 Oct 2026
- 06SecuritySecurity page · retrieved 18 Oct 2026
- 07General terms and conditionsTerms and conditions · retrieved 18 Oct 2026
- 08Online banking (incl. FAQ on AI matching and finAPI)Product page · retrieved 18 Oct 2026
- 09Recording receipts (incl. FAQ on AI-supported receipt capture)Product page · retrieved 18 Oct 2026
- 10Help centre: Recording receiptsDocumentation · retrieved 18 Oct 2026
- 11Help centre: Free planDocumentation · retrieved 18 Oct 2026
- 12Legal noticeLegal notice · retrieved 18 Oct 2026
- 13Help centre: Data processing agreement (DPA)Documentation · retrieved 18 Oct 2026
More tools in Business software with an EU hosting option (in at least one plan)
- DATEV AI features · Based in: Paumgartnerstraße 6-14, 90429 Nürnberg, Germany
- HubSpot Breeze AI · Based in: Cambridge, MA, USA
- Intercom Fin · Based in: Intercom R&D Unlimited Company, 124 St Stephen's Green, Dublin 2, DC02 C628, Ireland
- Lexware Office · Based in: Munzinger Straße 9, 79111 Freiburg, Germany. Contracting party and processor according to the DPA and privacy notice: Haufe Service Center GmbH
All tools in Business software · Tools with an EU hosting option
Further reading
All tools in the category: Business software. sevdesk has at least one plan with an EU hosting option; see also AI tools with an EU hosting option. Figures across all tools: Data report.