I'm a long-time Upbase user and lifetime license holder from Germany. I love the product — the simplicity, the all-in-one approach, and the client collaboration features are exactly what I need as a web design agency owner.
I'm writing to formally request that Upbase becomes fully GDPR-compliant.
This is not a nice-to-have. For any business operating in the European Union, GDPR compliance is a legal requirement. As much as I want to continue using Upbase, I am currently unable to do so for my business — because using a non-compliant tool puts me at legal risk.
The specific issues I've identified:
All data is hosted exclusively on AWS servers in the United States
No Data Processing Agreement (DPA) is available
No EU Standard Contractual Clauses (SCCs) are in place
The Privacy Policy has not been updated since June 2023 and does not address GDPR
What full GDPR compliance would require:
EU-based data hosting (e.g. AWS Frankfurt or equivalent EU-certified infrastructure)
A Data Processing Agreement (DPA) available to all users
EU Standard Contractual Clauses (SCCs) for international data transfers
An updated Privacy Policy explicitly addressing GDPR requirements
I have invested in Upbase through lifetime licenses because I believe in the product and the team behind it. It would be a real shame to lose a tool I genuinely enjoy — solely because of a compliance gap that could be closed.
GDPR applies to every business in all 27 EU member states. The European market is substantial, and right now Upbase is actively losing European customers — including loyal lifetime license holders — to GDPR-compliant alternatives.
Please make Upbase GDPR-compliant. I would love nothing more than to continue using it.
Log in to comment and vote
Comments2
Karen Unfug
May 4
I'm a long-time Upbase user and lifetime license holder from Germany. I love the product — the simplicity, the all-in-one approach, and the client collaboration features are exactly what I need as a web design agency owner.
I'm writing to formally request that Upbase becomes fully GDPR-compliant.
This is not a nice-to-have. For any business operating in the European Union, GDPR compliance is a legal requirement. As much as I want to continue using Upbase, I am currently unable to do so for my business — because using a non-compliant tool puts me at legal risk.
The specific issues I've identified:
All data is hosted exclusively on AWS servers in the United States
No Data Processing Agreement (DPA) is available
No EU Standard Contractual Clauses (SCCs) are in place
The Privacy Policy has not been updated since June 2023 and does not address GDPR
What full GDPR compliance would require:
EU-based data hosting (e.g. AWS Frankfurt or equivalent EU-certified infrastructure)
A Data Processing Agreement (DPA) available to all users
EU Standard Contractual Clauses (SCCs) for international data transfers
An updated Privacy Policy explicitly addressing GDPR requirements
I have invested in Upbase through lifetime licenses because I believe in the product and the team behind it. It would be a real shame to lose a tool I genuinely enjoy — solely because of a compliance gap that could be closed.
GDPR applies to every business in all 27 EU member states. The European market is substantial, and right now Upbase is actively losing European customers — including loyal lifetime license holders — to GDPR-compliant alternatives.
Please make Upbase GDPR-compliant. I would love nothing more than to continue using it.
Jordi de Geus
Mar 19, 2024
Please!