DELKARO HANDWERK vs Stackfield

Compare DELKARO HANDWERK y Stackfield en capacidades, jurisdicción, garantías y encaje para compradores europeos.

Logo: DELKARO HANDWERK

DELKARO HANDWERK

Germany· Project Management Software

Needs review

Shortlist for German craft shops that want one OFFICE for customers, quotes, scheduling, materials, Android site capture, and e-invoices on Hetzner Germany hosting. Skip for self-serve signup, self-hosting, EU-only AI, or payroll/bank/DATEV depth. Prefer Nozbe or Stackfield for general EU project work, or Microsoft 365 / Salesforce if you already standardise there.

EU-operatedCraft job operationsGerman-language UIXRechnung / ZUGFeRDAndroid field appPilot access
Ver fichaVisitar sitio web
Logo: Stackfield

Stackfield

Germany· Groupware

Needs review

Shortlist Stackfield when you need a German-operated all-in-one (chat + PM + meetings + docs) with optional client-side E2E rooms, Germany hosting, and a BSI C5 / ISO story for regulated teams. Skip when you need open-source DIY (prefer Nextcloud), Slack-scale app ecosystem depth, or pure secure messaging without project management (consider ginlo Business).

EU-operated (DE)Optional client-side E2EGermany hosting (IONOS)ISO 27001 + BSI C5 (claimed)Commercial on-premiseChat + PM + video
Ver fichaVisitar sitio web

Las filas resaltadas diferencian a los dos productos.

DELKARO HANDWERK vs Stackfield: Resumen
CaracterísticaLogo: DELKARO HANDWERKDELKARO HANDWERKLogo: StackfieldStackfield
País de origenGermanyGermany
CategoríaProject Management SoftwareGroupware
Código abiertoNoNo
AutoalojadoNoSí
SedeGermanyGermany
Entidad legalDaniel Sloman, Einzelunternehmen trading as DELKARO (Reinbek, Germany)Stackfield GmbH, Maximiliansplatz 17, 80333 München, Germany
Matriz / control EE.UU.Sin matriz estadounidense conocidaSin matriz estadounidense conocida
Exposición CLOUD Act (indicativa)MedioMedio
Estado de alojamiento en la UEParcialNo indicado
Alojamiento / residenciaCore HANDWERK hosting and encrypted backups at Hetzner Online GmbH in Germany. Optional AI assists may transfer selected content to OpenAI (Ireland/US). Optional push uses Google FCM and Apple APNs, which can involve US processing.Product data claimed stored in Germany; infrastructure provider IONOS SE (DE). Vendor states no AWS/GCP/Azure product subcontractors. Named EU processors: Inxmail (email, DE), Myra Security (edge protection, DE). Mobile push uses Apple APNs and Google push services (US platforms). Optional admin-enabled Giphy (US). Marketing site uses Google/Bing ads (not workspace content path). Optional customer-keyed external AI leaves Stackfield’s IONOS-hosted model path.
Resumen

German-language SaaS for small craft businesses: customers, jobs, quotes, scheduling, materials, and invoices in OFFICE, with an Android field app. Access via pilot application.

German all-in-one collaboration suite (chat, tasks/projects, video, docs) with optional client-side end-to-end encryption and Germany-hosted cloud or commercial on-premise.

Etiquetas
germanycraft-softwarehandwerkcrmquotinginvoicingfield-servicesaas
germanycollaborationproject-managementteam-chatend-to-end-encryptiongdpron-premiseiso-27001bsi-c5
De un vistazo: DELKARO HANDWERK vs Stackfield
De un vistazoLogo: DELKARO HANDWERKDELKARO HANDWERKLogo: StackfieldStackfield
HQReinbek, GermanyMunich, Germany
Legal entityDaniel Sloman (sole proprietorship trading as DELKARO)Stackfield GmbH (HRB 199536)
ProductHANDWERK OFFICE + Android field appNo indicado
Access modelPilot application (not open self-serve)No indicado
LicenseProprietary SaaSNo indicado
Self-hostNoNo indicado
Primary hostingHetzner Online GmbH, GermanyNo indicado
FoundedNo indicado2012 (vendor claim)
HostingNo indicadoGermany; IONOS SE (vendor-named)
DeploymentNo indicadoSaaS cloud + commercial on-premise
Open sourceNo indicadoNo
Commercial modelNo indicadoSeat-based plans; trial; AI/Office add-ons
Key capabilities: DELKARO HANDWERK vs Stackfield
Key capabilitiesLogo: DELKARO HANDWERKDELKARO HANDWERKLogo: StackfieldStackfield
EU-operatedSíSí
Craft job operationsSíNo indicado
German-language UISíNo indicado
XRechnung / ZUGFeRDSíNo indicado
Android field appSíNo indicado
Pilot accessSíNo indicado
Optional client-side E2ENo indicadoSí
Germany hosting (IONOS)No indicadoSí
ISO 27001 + BSI C5 (claimed)No indicadoSí
Commercial on-premiseNo indicadoSí
Chat + PM + videoNo indicadoSí

DELKARO HANDWERK

  • Job-centric OFFICE for craft workflows

    Customers, contacts, sites/assets, enquiries, tasks, documents, and the full order history stay on one job file so office staff can move from request to quote, preparation, execution, and billing without rebuilding context.

  • Quotes, calculation, and German e-invoices

    Build quotes from measurements, catalogue positions, and labour/material shares; share a personal customer decision link; continue into progress and final invoices. Supported outputs include checked XRechnung or ZUGFeRD/Factur-X PDF packages when format validation is set up.

  • Crew planning with site time capture

    Assign people and sites in day/week views, surface conflicts and travel buffers, record absences, and capture start/end/pause times on site for later office release. Time PDFs/CSVs are for further processing; the product does not create payroll.

  • Android field app with offline paths

    Native Android app for site overview, times, photos, messages, and proofs, including local store-and-forward for supported offline changes. Browser OFFICE remains the hub; store-distributed iOS for that field app is not advertised on the functions page.

  • Materials from demand to stock movement

    Track material demand on the job, prepare supplier orders, record partial/complete deliveries, and follow warehouse moves, take-out, and returns so site supply stays tied to the same order file.

  • Optional AI assists with human confirmation

    Eleven OFFICE helpers can propose structured data from notes, photos, or messages. Suggestions require explicit human acceptance. Selected content may go to OpenAI with possible US processing; exclusive EU AI processing is not promised.

Stackfield

  • Optional client-side E2E rooms (AES-256 + RSA-2048)

    Rooms and direct messages can add browser-side end-to-end encryption so Stackfield cannot read covered content at rest. Admins can force E2E, ban it, or let creators choose. Trade-offs include room-password recovery after login resets, limited lock-screen/email previews, and client-side search cost—plan org policy before migrating sensitive rooms.

  • Tasks, Gantt, portfolios, and workflows in the same rooms as chat

    List/Kanban/Gantt views, milestones, dependencies, automatic scheduling, critical path, custom fields, time tracking, reports, and project portfolios sit next to room chat and discussions. Suited to PMOs that refuse a separate tool silo; less deep than specialist ALM suites for software engineering pipelines.

  • Video conferences, screen share, and guest/external roles

    Built-in audio/video/screen-sharing (plan-dependent) plus guest and external roles that only see assigned rooms. Useful for law firms, agencies, and public-sector projects with outside counsel or contractors without granting full org access.

  • Germany cloud (IONOS) plus commercial on-premise

    Cloud tenants store data in German data centres; Stackfield names IONOS SE as infrastructure provider and claims no AWS/GCP/Azure product subprocessors. On-premise is a paid subscription (vendor-installed/updated, high minimum seat count) for air-gapped or policy-bound estates—test first in cloud; local PoC installs are not offered.

  • Enterprise access controls and in-product DPA

    Higher tiers add enforced 2FA (including YubiKey options), IP allowlists, password policies, SSO, API provisioning, org-wide exports, and compliance-confirmation workflows. Organisation admins can conclude the GDPR DPA inside settings and download the signed PDF once per organisation.

Assurance & compliance: DELKARO HANDWERK vs Stackfield
Assurance & complianceLogo: DELKARO HANDWERKDELKARO HANDWERKLogo: StackfieldStackfield
Independent security / no-logs audit
Not found

Security page focuses on operational principles; no public independent audit report found.

Partial

Vendor claims regular penetration tests and APPVISORY Trusted App for mobile; no public independent no-logs or full security audit report found.

ISO 27001
Not found

No ISO 27001 claim found on imprint, security, or HANDWERK privacy pages.

Vendor claimed

Vendor states ISO 27001 (plus 27017/27018) with certificate download on security page; not independently registry-verified in this draft.

SOC 2 / SOC 3
Not found

No SOC 2/3 claim found on reviewed primary pages.

Not found

No SOC 2/3 claim found on primary security pages reviewed.

GDPR / EU data protection
Vendor claimed

German controller/processor documentation published for HANDWERK Office and App; roles explained under Art. 28 for customer/job data.

Vendor claimed

EU controller Stackfield GmbH; Germany hosting claims; in-product DPA; public privacy policy with processor list fragments.

US CLOUD Act exposure (indicative)
Partial

EU sole proprietorship with no known US parent and Hetzner Germany core hosting, but optional OpenAI and Google/Apple push paths can involve US processing. Not legal advice.

Partial

EU entity, no known US parent, core hosting claimed via IONOS DE without AWS/GCP/Azure. Residual paths: Apple/Google mobile push; optional Giphy; optional customer external AI. Assessment only—not legal advice.

Data processing agreement (B2B)
Vendor claimed

Vendor states Art. 28 AVV is the basis for processing craft-business customer data; public downloadable AVV PDF not found on site. Obtain signed DPA in onboarding.

Vendor claimed

Organisation admins can conclude DPA inside Organisation Settings and download signed PDF; one DPA per organisation.

EU AI Act
Partial

Product includes optional AI suggestion features with human confirmation; no detailed EU AI Act conformity statement found on primary pages.

Not applicable

Optional text-assist AI add-on; not an AI-centric product. Revisit if agents expand into high-risk use cases.

BSI C5No indicado
Vendor claimed

Vendor claims BSI C5 attestation on homepage and security page; obtain current report in procurement.

Considerations & known limitations: DELKARO HANDWERK vs Stackfield
Considerations & known limitationsLogo: DELKARO HANDWERKDELKARO HANDWERKLogo: StackfieldStackfield
Pilot-stage product and access model
Medium

Entry is application-based for a small pilot cohort. Functions may still have limits or defects; individual feature requests are not guaranteed.

No indicado
Optional AI can send data to OpenAI/US
Medium

When AI recognition or preparation is explicitly requested, selected media, text, and business context may be processed by OpenAI with possible US transfer. Exclusive EU AI processing is not promised.

No indicado
Mobile push via Google FCM / Apple APNs
Low

Optional push notifications use platform vendors that may process routing identifiers outside the EU. Product remains usable without push.

No indicado
No public ISO/SOC or independent audit
Medium

Buyers that require published ISO 27001, SOC 2, or third-party security audit PDFs will not find them on the reviewed pages.

No indicado
Single-person operating company
Medium

Imprint and About identify Daniel Sloman as the sole responsible operator. That aids accountability but concentrates continuity and support capacity risk.

No indicado
E2E is optional and irreversible per roomNo indicado
Medium

Without org policy, creators may leave sensitive rooms unencrypted. Encryption mode cannot be changed after creation; password recovery after login reset needs disciplined room-key handling.

Mobile push and optional US integrationsNo indicado
Medium

Privacy policy documents Apple/Google push for mobile notifications and optional Giphy (US). Even with German content hosting, notification metadata and optional GIF traffic can touch US platforms—document in DPIA.

Certifications vendor-assertedNo indicado
Low

ISO and BSI C5 are claimed with a downloadable certificate; treat as claimed until your auditor verifies scope, dates, and which systems are in-bounds.

On-premise is commercial, not DIY open sourceNo indicado
Low

Self-host means a paid on-prem product with vendor install/update and high seat minimums—not a free community edition. Budget implementation and support tickets accordingly.

AI features require content decryption for processingNo indicado
Medium

Stackfield AI decrypts client-side content for the request path (then claims immediate deletion). External AI via customer keys is a separate transfer. Disable AI if zero-knowledge must never leave the client.

Encaje

DELKARO HANDWERK

Best fit when

  • Small German-speaking craft businesses that want one job file from enquiry to invoice
  • Teams that need weekly crew planning plus Android site time/photo/message capture
  • Buyers who require German e-invoice outputs (XRechnung / ZUGFeRD) from the same operational system
  • Firms willing to join a personally onboarded pilot and accept a product still being refined with users
  • Organisations that accept proprietary SaaS on Hetzner Germany and will contract an Art. 28 DPA

Poor fit when

  • Buyers that need immediate self-serve signup, public APIs, or self-hosting
  • Organisations that forbid any US subprocessor path even for optional AI or mobile push
  • Companies needing payroll generation, live banking, or finished DATEV accounting inside the product
  • Crews that require a store-distributed iOS field app as a hard prerequisite without confirming alternatives
  • Enterprises that require published ISO 27001 / SOC 2 evidence before any pilot

Consider instead when

  • When: You need general EU team tasks/projects rather than craft quoting, materials, and Baustelle workflows

    Consider: Nozbe or Stackfield

    Stronger as collaboration/project tools than as Handwerk ERP substitutes.

  • When: You already standardise on a horizontal CRM or productivity suite and only need light job tracking

    Consider: Salesforce or Microsoft 365

    Broader ecosystem and integrations; weaker native German craft invoicing and site materials flows.

  • When: You need EU-only processing including AI assists with no US model providers

    Consider: A craft or ERP vendor that publishes an EU-only AI path

    DELKARO discloses possible US processing for OpenAI-backed assists and does not promise exclusive EU AI.

Stackfield

Best fit when

  • German/EU orgs that want one tool for projects and communication instead of Slack + separate PM
  • Teams that need optional zero-knowledge rooms for highly sensitive matters (legal, M&A, HR, clinical ops)
  • Buyers requiring German legal entity, DPA in-product, and claimed ISO/BSI C5 for procurement questionnaires
  • Public sector, banking, insurance, and professional services evaluating cloud with an on-prem exit path
  • Orgs that will enforce 2FA/SSO/IP allowlists and guest-only access for externals

Poor fit when

  • Teams that need always-on E2E with full rich push previews and third-party calendar feeds without trade-offs
  • Engineering orgs standardised on Jira/GitHub-style ALM depth and automation
  • Buyers who require fully open-source, community-supported self-host without a commercial on-prem contract
  • Global enterprises whose primary requirement is the Slack/Teams integration marketplace
  • Very small teams needing only free-tier messaging with no seat-based SaaS commitment

Consider instead when

  • When: You need open-source self-host and full operational control of files/collab apps

    Consider: Nextcloud

    More DIY ops; broader app ecosystem; different PM depth.

  • When: You mainly need regulated secure messaging, not Gantt/portfolios

    Consider: ginlo Business

    Messaging-first German B2B chat; thinner project suite.

  • When: You already run Microsoft 365 and identity is non-negotiable

    Consider: Microsoft Teams (incumbent) or stay in M365 with EU data boundaries

    Teams wins on suite lock-in; loses on independent German vendor + optional client E2E story.

  • When: You want lighter EU team chat without full PM suite

    Consider: Fleep

    Chat-centric; different residency/subprocessor profile—verify separately.

Open questions for due diligence

DELKARO HANDWERK

  • Will the signed Art. 28 AVV and current subprocessor annex be provided before real customer data is loaded?
  • Which HANDWERK workflows are production-ready for this trade versus still experimental in the pilot?
  • Can AI features be disabled tenant-wide for buyers that forbid OpenAI/US transfers?
  • What is the supported path for iPhone-only crews given no App Store iOS field app on the functions page?
  • Are restore-test results, RPO/RTO, and TOMs available under NDA for due diligence?

Stackfield

  • Will the vendor provide the current BSI C5 report, ISO certificate scope, and full subprocessor annex under NDA if not already in the DPA PDF?
  • Which fields remain outside E2E (metadata, search indexes, analytics) in your planned room configuration?
  • For mobile fleets: is APNs/FCM push acceptable, or must notifications be disabled/restricted?
  • On-premise: exact supported OS/hypervisor matrix, backup model, and upgrade cadence for your estate?
  • Is Stackfield AI (or customer external AI) allowed under your policy for rooms that contain special-category data?