Patto vs thirds.ai

Confronta Patto e thirds.ai su capacità, giurisdizione, garanzie e idoneità per acquirenti europei.

Logo: Patto

Patto

Germany· Marketing Technology (MarTech) / Tag Management / Customer Data Platform

Needs review

Shortlist Patto when you want a German-hosted outreach CRM that your existing MCP assistant can drive, with draft-first sending from your own mailbox. Skip when you need a bundled LLM, purchased leads, or a full Salesforce-class CRM; consider Fireply AI for social reply automation or a conventional ESP/CRM instead.

EU-operatedRemote MCPBring-your-own AIDPA availableDraft-first email
Logo: thirds.ai

thirds.ai

United Kingdom· Marketing Technology (MarTech) / Tag Management / Customer Data Platform

Needs review

Shortlist when you need branded PDFs and images from one HTML template across a studio, REST API, and MCP agents, with primary hosting on Hetzner in Finland under a UK sole trader. Skip when you need URL-fetch conversion, self-hosting, or Office-template engines; consider PDFShift or Carbone-class tools instead for those jobs.

UK-operatedREST + MCP APIHTML templatesBrand kitsDPA published
Patto vs thirds.ai: Sintesi
CaratteristicaLogo: PattoPattoLogo: thirds.aithirds.ai
Paese di origineGermanyUnited Kingdom
CategoriaMarketing Technology (MarTech) / Tag Management / Customer Data PlatformMarketing Technology (MarTech) / Tag Management / Customer Data Platform
Open sourceNoNo
Self-hostedNoNo
SedeGermanyUnited Kingdom
Soggetto giuridicoonEco GmbHIndividual sole trader in England trading as thirds.ai
Legge applicabileGermany (Berlin jurisdiction per terms)Non indicato
Capogruppo / controllo USANessuna capogruppo USA notaNessuna capogruppo USA nota
Esposizione CLOUD Act (indicativa)MedioMedio
Stato di hosting UEParzialeParziale
Hosting / residenzaCore app, database and system email on netcup GmbH in Germany. Sub-processors include SolarWinds Papertrail (USA) for application logs and Slack Technologies Limited (Ireland, Salesforce US parent) for operator alerts. Stripe Payments Europe for billing. Customer-chosen mailbox, Slack and AI/MCP providers are not Patto sub-processors.Primary app, database, and object storage on Hetzner in Finland. Backups on Cloudflare R2. AI template path via OpenRouter and selected model host (no EU/UK residency promise). Email Resend; OAuth GitHub/Google; payments Stripe; analytics PostHog Cloud EU.
Riassunto

German-hosted MCP outreach workspace for PR, link building and B2B sales: contacts, campaigns, mailbox drafts and controlled send with your own AI assistant.

UK SaaS that turns reusable HTML templates and brand kits into PDFs and images via studio, REST API, and MCP.

Tag
A colpo d'occhio: Patto vs thirds.ai
A colpo d'occhioLogo: PattoPattoLogo: thirds.aithirds.ai
HQBerlin, GermanyEngland, United Kingdom (sole trader)
Legal entityonEco GmbH (HRB 254585 B)Individual sole trader trading as thirds.ai
Product typeHosted CRM + remote MCP outreachNon indicato
Commercial modelFree tier and paid subscription; AI provider billed separatelyMonthly free credits, prepaid plans, credit packs
Self-hostedNoNon indicato
Open sourceNo public OSS claim foundNon indicato
Primary hostingNon indicatoHetzner Online GmbH, Finland
DeploymentNon indicatoCloud SaaS (no self-host)
OutputsNon indicatoPDF, PNG, JPEG, WebP
Data residency regionsApp/DB: Germany (netcup); logs: Papertrail USA; operator alerts: Slack IE/US parentNon indicato
Key capabilities: Patto vs thirds.ai
Key capabilitiesLogo: PattoPattoLogo: thirds.aithirds.ai
EU-operatedSìSì
Remote MCPSìNon indicato
Bring-your-own AISìNon indicato
DPA availableSìSì
Draft-first emailSìNon indicato
REST + MCP APINon indicatoSì
HTML templatesNon indicatoSì
Brand kitsNon indicatoSì

Patto

  • Remote MCP workspace for outreach tools

    Exposes brands, organisations, contacts, prospects, campaigns, mailbox search/drafts and interactions to Claude, ChatGPT or other MCP clients over https://pattorelay.com/mcp with OAuth. The assistant researches and writes; Patto persists the operational record across chats.

  • Brand mailboxes via IMAP/SMTP or Microsoft 365

    Each brand has its own sender identity and mailbox. Connect IMAP/SMTP (app passwords for Google/iCloud) or, on Standard and above, Microsoft 365 via admin consent and Graph tokens. Credentials are stored encrypted; disconnect removes Patto's copy.

  • Campaigns, prospects and follow-up dates

    Store campaign briefs, link prospects, track stages (qualified, contacted, replied, interested, won) and due follow-ups. The assistant can retrieve what was sent and what came back when starting the next wave.

  • Draft-first send with cooldowns and opt-outs

    Every outbound message starts as a draft. Release in the app by default, or enable assistant release on paid plans. Before send, Patto checks suppression/opt-outs, recipient cooldowns, plan sending limits and duplicate-send protection. Replies are drafted inside their threads.

  • Bring your own AI, not a metered LLM

    Patto charges for the workspace and infrastructure. Token and model costs stay with your AI provider. Useful when you already standardised on one assistant and do not want a second writing persona product.

thirds.ai

  • Reusable HTML templates to PDF

    Save HTML with {{placeholders}} and a JSON schema, then render A4/Letter (or custom) PDFs through the studio or POST /v1/pdf. Chromium lays out CSS, web fonts, and tables; one PDF can be up to 100 pages and 25 MiB. Failed renders do not spend a credit.

  • Branded social and campaign images

    Render PNG, JPEG, or WebP at fixed widths and heights from the same templates for stories, thumbnails, Open Graph cards, and ads. Brand kits apply logo, colours, and fonts across designs so campaign variants stay consistent.

  • REST API and MCP for agents

    Authenticated REST endpoints cover PDF, image, templates, and batches. An HTTP MCP server at https://thirds.ai/mcp exposes tools such as render, save_template, create_batch, and brand-kit helpers for Claude, Cursor, VS Code, and other MCP clients.

  • AI template chat and image import

    Describe a layout in chat, paste HTML, or upload a still image to get an editable template, then refine in the visual editor. AI builds use separate credit rules from ordinary renders; content for AI builds is sent to OpenRouter and its model host.

  • Batch and CSV multi-file runs

    Generate many files from one template version with per-row JSON or CSV. Plan tiers set the maximum rows per batch (from 10 on free up to 200 on Scale). Each successful file costs one credit; failed rows are not billed.

Assurance & compliance: Patto vs thirds.ai
Assurance & complianceLogo: PattoPattoLogo: thirds.aithirds.ai
Independent security / no-logs audit
Not found

No public third-party security or no-logs audit PDF found on primary pages.

Not found

Security page describes controls but states it does not claim a security certificate; no public independent audit PDF found.

ISO 27001
Not found

No ISO 27001 claim located on imprint, privacy, DPA or docs.

Not found

No ISO 27001 claim on security or trust pages.

SOC 2 / SOC 3
Not found

No SOC 2/3 claim located on primary pages.

Not found

No SOC 2/3 claim found on primary pages.

GDPR / EU data protection
Vendor claimed

German controller/processor (onEco GmbH); public privacy policy and Art. 28 DPA; Berlin DPA named as supervisory authority.

Vendor claimed

UK sole trader; public privacy policy and DPA; UK/EU transfer language via SCCs and UK IDTA/Addendum as applicable.

US CLOUD Act exposure (indicative)
Partial

EU entity with no known US parent; core hosting at netcup DE. Material US-group paths: Papertrail (SolarWinds, USA) for app logs and Slack/Salesforce for operator alerts. Customer AI/mailbox choices may add further non-EU processors. Not legal advice.

Partial

UK entity / no known US parent, but Cloudflare R2 backups, Stripe, Resend, GitHub/Google OAuth, and OpenRouter AI path are US-group or non-EU residency paths. Indicative only, not legal advice.

Data processing agreement (B2B)
Vendor claimed

Public DPA concluded at registration; Annex 2 lists netcup, Papertrail and Slack.

Vendor claimed

Public DPA page; request for an account via support@thirds.ai.

EU AI Act
Partial

Patto is AI-adjacent infrastructure (MCP tools) but states it does not operate a language model; customer-chosen AI providers process tool results under their own terms. No dedicated AI Act conformity statement found.

Partial

Product includes an AI template builder via OpenRouter; no public AI Act conformity or classification statement found.

Considerations & known limitations: Patto vs thirds.ai
Considerations & known limitationsLogo: PattoPattoLogo: thirds.aithirds.ai
US logging and US-group ops tooling
Medium

Papertrail in the USA may receive personal data in error context; Slack operator alerts sit under a US parent. Procurement that requires an EU-only chain including observability should treat hosting as partial and review SCCs/DPF language.

Medium

Core hosting is Hetzner Finland, but Cloudflare R2 backups, Stripe, Resend, optional US OAuth, and OpenRouter model hosts create non-EU processing paths buyers must accept or avoid.

Customer-chosen AI and mailbox providers
Medium

Connecting Claude, ChatGPT, Microsoft 365 or other MCP/mailbox providers sends contact and email content to those vendors under the customer's instruction. Patto does not control their retention or training settings.

Non indicato
Optional assistant-driven send
Medium

When agentic release is enabled on a paid plan, an authorised MCP client can request sending. Official terms note Patto cannot determine whether a human approved each tool call; suppression and limits still apply but legal permissibility remains the customer's duty.

Non indicato
No public independent security audit
Low

Security claims (AES-256 mailbox secrets, OAuth for MCP, audit logging) are vendor-documented; no public ISO/SOC or independent audit package was found for external verification.

Medium

Security controls are described in detail, but the vendor does not claim a certificate and no independent audit report was found.

Narrow product scope vs full CRM/ESP
Low

Patto does not replace a full CRM suite, lead database or high-volume ESP. CSV export of contacts/prospects is described as a Pro capability; confirm plan fit before migrating large datasets.

Non indicato
AI template content may train model hostsNon indicato
Medium

DPA and privacy state OpenRouter-selected model hosts may use template-builder content to improve models, with no EU/UK residency promise on that route.

Sole trader operator, limited public corporate filingNon indicato
Low

Entity is described as an individual sole trader in England rather than a limited company on Companies House. Procurement teams that need a Ltd/GmbH counterparty should confirm contracting details.

Outputs are not a long-term archiveNon indicato
Low

Finished account files expire after 30 days. Teams must store their own copies of records that matter.

Idoneità

Patto

Best fit when

  • PR, media relations or link-building teams that pitch from their own brand mailbox
  • B2B founders or small sales desks already using Claude, ChatGPT or another MCP client
  • Agencies that need multi-brand sender identities with shared contacts and per-brand opt-outs
  • Buyers who require a German contracting entity, published DPA and DE application hosting for the workspace
  • Workflows where every outbound mail must start as a reviewable draft with cooldown and suppression checks

Poor fit when

  • Teams that want an all-in-one product with a built-in writing model and metered AI credits
  • Buyers who need a purchased contact database or high-volume ESP infrastructure
  • Consumer or personal use (terms limit Patto to entrepreneurs / B2B)
  • Organisations that require public ISO 27001 or SOC 2 evidence before shortlisting
  • Use cases that must claim an EU-only processing chain including logs and operator tooling

Consider instead when

  • When: You need full CRM, pipeline reporting and ecosystem apps rather than MCP outreach tooling

    Consider: Salesforce (incumbent) or a conventional European CRM/ESP stack

    Patto is intentionally narrower than a revenue cloud.

  • When: Your outreach is social replies on X rather than email PR or link building

    Consider: Fireply AI

    Lithuanian SaaS focused on X reply automation.

  • When: You only need MCP access to analytics or creative rendering, not mailbox CRM

    Consider: AskGSC or thirds.ai

    Adjacent European MCP products with different jobs.

thirds.ai

Best fit when

  • Teams that regenerate invoices, certificates, reports, or campaign images from one saved layout
  • Developers who already produce HTML or JSON data and want Chromium PDF/PNG output via API
  • Groups adopting AI agents that can call an MCP server with the same templates as humans
  • Agencies managing multiple client brand kits on shared report or invoice designs
  • Buyers who want primary app hosting on Hetzner in Finland with a public UK privacy/DPA trail

Poor fit when

  • Workflows that require the vendor to fetch a public page URL as the document source
  • Organisations that need self-hosted or VPC-only rendering
  • Buyers that forbid US-group backup, email, payments, OAuth, or AI model subprocessors
  • Teams whose templates live in Microsoft Word/LibreOffice rather than HTML
  • Procurement that requires published ISO 27001 or SOC 2 evidence (none claimed)

Consider instead when

  • When: You only need HTML or URL to PDF/PNG without a design studio or MCP

    Consider: PDFShift or DocRaptor

    Pure conversion APIs; thirds.ai documents these tradeoffs on its compare pages.

  • When: Your source of truth is Office or document templates rather than HTML

    Consider: Carbone or similar document engines

    Better when designers work in DOCX/ODT pipelines.

  • When: You need open-ended creative design rather than data-filled repeats

    Consider: Canva-class design tools

    thirds.ai targets repeatable branded outputs, not general design.

Open questions for due diligence

Patto

  • Will procurement accept Papertrail (US) and Slack/Salesforce operator paths given German app hosting?
  • Is a customer security questionnaire or penetration-test summary available under NDA?
  • Which exact netcup regions/PoPs host production versus backups, and what is backup retention?
  • For Microsoft 365 tenants with strict Conditional Access, what exemptions are required in practice beyond the published admin-consent notes?

thirds.ai

  • Will the vendor name the sole trader for contracts and invoice the legal name your counsel expects?
  • Which OpenRouter model hosts are used in practice, and can AI template building be disabled for sensitive tenants?
  • Can backup location or providers be constrained under a custom DPA for higher-assurance buyers?
  • Is there a roadmap for ISO 27001, SOC 2, or an independent penetration-test summary?