Vergleichen Sie Fleep und Stackfield nach Funktionen, Rechtsraum, Nachweisen und Einsatzpassung.
Beide als Alternativen zu: Microsoft Teams, Slack
Estonia· Groupware
Needs review
Shortlist when you want an Estonian-operated messenger that mixes team chat with real email participation, light task/pin/file tools, and Business-side account ownership. Skip when you need E2EE, self-hosting, or a deep enterprise app marketplace — consider Nextcloud Talk (self-host) or Slack/Teams instead.
Germany· Groupware
Needs review
Shortlist Stackfield when you need a German-operated all-in-one (chat + PM + meetings + docs) with optional client-side E2E rooms, Germany hosting, and a BSI C5 / ISO story for regulated teams. Skip when you need open-source DIY (prefer Nextcloud), Slack-scale app ecosystem depth, or pure secure messaging without project management (consider ginlo Business).
Hervorgehobene Zeilen unterscheiden sich zwischen den Produkten.
| Merkmal | Fleep | Stackfield |
|---|---|---|
| Herkunftsland | Estonia | Germany |
| Kategorie | Groupware | Groupware |
| Open Source | Nein | Nein |
| Self-Hosted | Nein | Ja |
| Hauptsitz | Estonia | Germany |
| Rechtsträger | Fleep Technologies OÜ (registry code 12373841), Akadeemia tee 21/4, Tallinn, Estonia | Stackfield GmbH, Maximiliansplatz 17, 80333 München, Germany |
| Anwendbares Recht | Republic of Estonia (Tallinn courts per Terms) | Nicht angegeben |
| US-Mutter / Kontrolle | Keine bekannte US-Mutter | Keine bekannte US-Mutter |
| CLOUD-Act-Exposition (indikativ) | Mittel | Mittel |
| Hosting / Residenz | Primary app data on Amazon Web Services EC2 in Dublin, Ireland (vendor About + security help). Privacy policy: AWS in EU territory. Also names Braintree/PayPal (payments), Google Analytics and Mixpanel (analytics), MailChimp/US for marketing email. Full processor list on request only. | Product data claimed stored in Germany; infrastructure provider IONOS SE (DE). Vendor states no AWS/GCP/Azure product subcontractors. Named EU processors: Inxmail (email, DE), Myra Security (edge protection, DE). Mobile push uses Apple APNs and Google push services (US platforms). Optional admin-enabled Giphy (US). Marketing site uses Google/Bing ads (not workspace content path). Optional customer-keyed external AI leaves Stackfield’s IONOS-hosted model path. |
| Zusammenfassung | Estonian team messenger that combines chat with email bridging, conversation tasks, pinboards, file sharing, and Business admin ownership of accounts and history. | German all-in-one collaboration suite (chat, tasks/projects, video, docs) with optional client-side end-to-end encryption and Germany-hosted cloud or commercial on-premise. |
| Tags |
| Auf einen Blick | Fleep | Stackfield |
|---|---|---|
| HQ | Tallinn, Estonia | Munich, Germany |
| Legal entity | Fleep Technologies OÜ (reg. 12373841) | Stackfield GmbH (HRB 199536) |
| Hosting (claimed) | AWS EC2, Dublin, Ireland | Nicht angegeben |
| Deployment | SaaS only (not self-hosted) | SaaS cloud + commercial on-premise |
| Open source | No (proprietary; API samples on GitHub) | No |
| Commercial model | Free trial; seat-based Business; Enterprise custom | Seat-based plans; trial; AI/Office add-ons |
| Founded | Nicht angegeben | 2012 (vendor claim) |
| Hosting | Nicht angegeben | Germany; IONOS SE (vendor-named) |
| Key capabilities | Fleep | Stackfield |
|---|---|---|
| EU-operated (EE) | Ja | Ja |
| Email bridging | Ja | Nicht angegeben |
| Cloud SaaS | Ja | Nicht angegeben |
| AWS EU hosting (claimed) | Ja | Nicht angegeben |
| Business admin controls | Ja | Nicht angegeben |
| Optional client-side E2E | Nicht angegeben | Ja |
| Germany hosting (IONOS) | Nicht angegeben | Ja |
| ISO 27001 + BSI C5 (claimed) | Nicht angegeben | Ja |
| Commercial on-premise | Nicht angegeben | Ja |
| Chat + PM + video | Nicht angegeben | Ja |
Email-bridged conversations
Send to a conversation's unique email address, receive on username@fleep.io, create email threads with non-users, or connect an existing mailbox so external partners stay in the same work stream without mandatory Fleep accounts.
Taskboard per conversation
Create, assign, and track tasks inside the same conversation where decisions happen; Business adds a My tasks view across work. Suited to light coordination, not a full project-management suite.
Pinboard and File Drawer
Pin announcements so plans do not drown in scrollback; store and re-open shared files from a conversation-level drawer across web, desktop, and mobile.
Fleep for Business admin ownership
Organization admins control Premium accounts and conversations—provision/deactivate users, reset passwords, manage membership and history access, set file retention, organization-wide teams, and company branding.
API, webhooks, and app integrations
Public API for post/read of messages and files plus listed integrations (e.g. GitHub, GitLab, Jira, Zapier, Dropbox, Whereby for A/V). Not a self-hosted product.
Optional client-side E2E rooms (AES-256 + RSA-2048)
Rooms and direct messages can add browser-side end-to-end encryption so Stackfield cannot read covered content at rest. Admins can force E2E, ban it, or let creators choose. Trade-offs include room-password recovery after login resets, limited lock-screen/email previews, and client-side search cost—plan org policy before migrating sensitive rooms.
Tasks, Gantt, portfolios, and workflows in the same rooms as chat
List/Kanban/Gantt views, milestones, dependencies, automatic scheduling, critical path, custom fields, time tracking, reports, and project portfolios sit next to room chat and discussions. Suited to PMOs that refuse a separate tool silo; less deep than specialist ALM suites for software engineering pipelines.
Video conferences, screen share, and guest/external roles
Built-in audio/video/screen-sharing (plan-dependent) plus guest and external roles that only see assigned rooms. Useful for law firms, agencies, and public-sector projects with outside counsel or contractors without granting full org access.
Germany cloud (IONOS) plus commercial on-premise
Cloud tenants store data in German data centres; Stackfield names IONOS SE as infrastructure provider and claims no AWS/GCP/Azure product subprocessors. On-premise is a paid subscription (vendor-installed/updated, high minimum seat count) for air-gapped or policy-bound estates—test first in cloud; local PoC installs are not offered.
Enterprise access controls and in-product DPA
Higher tiers add enforced 2FA (including YubiKey options), IP allowlists, password policies, SSO, API provisioning, org-wide exports, and compliance-confirmation workflows. Organisation admins can conclude the GDPR DPA inside settings and download the signed PDF once per organisation.
| Assurance & compliance | Fleep | Stackfield |
|---|---|---|
| Independent security / no-logs audit | Not found No public independent audit report located on official site or help center. | Partial Vendor claims regular penetration tests and APPVISORY Trusted App for mobile; no public independent no-logs or full security audit report found. |
| ISO 27001 | Not found No ISO 27001 claim found on official pages. | Vendor claimed Vendor states ISO 27001 (plus 27017/27018) with certificate download on security page; not independently registry-verified in this draft. |
| SOC 2 / SOC 3 | Not found No SOC 2/3 report or claim found on official pages. | Not found No SOC 2/3 claim found on primary security pages reviewed. |
| GDPR / EU data protection | Vendor claimed EE entity; public privacy policy; AKI as supervisory authority. Confirm DPA and processing roles for your use case. | Vendor claimed EU controller Stackfield GmbH; Germany hosting claims; in-product DPA; public privacy policy with processor list fragments. |
| US CLOUD Act exposure (indicative) | Partial EU entity, no known US parent, but primary hosting on AWS and US-group analytics/payment/marketing tools (GA, Mixpanel, Braintree/PayPal, MailChimp). Not legal advice. | Partial EU entity, no known US parent, core hosting claimed via IONOS DE without AWS/GCP/Azure. Residual paths: Apple/Google mobile push; optional Giphy; optional customer external AI. Assessment only—not legal advice. |
| Data processing agreement (B2B) | Not found No public DPA template found. Privacy policy offers updated authorized-processor list on contact—ask sales/support for DPA. | Vendor claimed Organisation admins can conclude DPA inside Organisation Settings and download signed PDF; one DPA per organisation. |
| EU AI Act | Not applicable Team messenger; not marketed as an AI system. | Not applicable Optional text-assist AI add-on; not an AI-centric product. Revisit if agents expand into high-risk use cases. |
| BSI C5 | Nicht angegeben | Vendor claimed Vendor claims BSI C5 attestation on homepage and security page; obtain current report in procurement. |
| Considerations & known limitations | Fleep | Stackfield |
|---|---|---|
| US-group cloud and SaaS subprocessors | Medium Message storage on AWS (Dublin claimed) plus Google Analytics, Mixpanel, payment processors, and MailChimp (US marketing mail). Affects CLOUD Act / transfer diligence even with EE legal entity. | Nicht angegeben |
| No public ISO/SOC or independent audit | Medium Assurance package for regulated buyers is thin on the public site; expect questionnaire and contractual annexes rather than downloadable certs. | Nicht angegeben |
| Server-side encryption, not E2EE | Medium TLS + encrypted storage on provider servers; unsuitable if policy requires client-held keys or provider-blind messaging. | Nicht angegeben |
| Privacy/Terms last dated 2019 on site | Low Public privacy (Mar 2019) and terms (Jan 2019) may lag operational reality—confirm current policy versions and subprocessors during procurement. | Nicht angegeben |
| No self-host option | Low Cannot place Fleep inside your own VPC or air-gapped network; residency limited to vendor AWS EU setup. | Nicht angegeben |
| E2E is optional and irreversible per room | Nicht angegeben | Medium Without org policy, creators may leave sensitive rooms unencrypted. Encryption mode cannot be changed after creation; password recovery after login reset needs disciplined room-key handling. |
| Mobile push and optional US integrations | Nicht angegeben | Medium Privacy policy documents Apple/Google push for mobile notifications and optional Giphy (US). Even with German content hosting, notification metadata and optional GIF traffic can touch US platforms—document in DPIA. |
| Certifications vendor-asserted | Nicht angegeben | Low ISO and BSI C5 are claimed with a downloadable certificate; treat as claimed until your auditor verifies scope, dates, and which systems are in-bounds. |
| On-premise is commercial, not DIY open source | Nicht angegeben | Low Self-host means a paid on-prem product with vendor install/update and high seat minimums—not a free community edition. Budget implementation and support tickets accordingly. |
| AI features require content decryption for processing | Nicht angegeben | Medium Stackfield AI decrypts client-side content for the request path (then claims immediate deletion). External AI via customer keys is a separate transfer. Disable AI if zero-knowledge must never leave the client. |
When: You need self-hosted collaboration chat with full control of infrastructure
Consider: Nextcloud (Talk) or other self-hosted groupware already in your stack
Fleep is SaaS-only on AWS EU.
When: You need deep Microsoft 365 chat, meetings, and identity integration
Consider: Microsoft Teams
Fleep is independent of M365 but thinner on meetings/Graph.
When: You need the largest integration marketplace and channel-centric workflows
Consider: Slack
Fleep competes on email bridging and simplicity, not ecosystem breadth.
When: You want hosted European groupware with mail/calendar as the core
Consider: Kolab Now
Different product shape: groupware suite vs messenger-first.
When: You need open-source self-host and full operational control of files/collab apps
Consider: Nextcloud
More DIY ops; broader app ecosystem; different PM depth.
When: You mainly need regulated secure messaging, not Gantt/portfolios
Consider: ginlo Business
Messaging-first German B2B chat; thinner project suite.
When: You already run Microsoft 365 and identity is non-negotiable
Consider: Microsoft Teams (incumbent) or stay in M365 with EU data boundaries
Teams wins on suite lock-in; loses on independent German vendor + optional client E2E story.
When: You want lighter EU team chat without full PM suite
Consider: Fleep
Chat-centric; different residency/subprocessor profile—verify separately.