Padloc key facts
Last updated- Legal entity
- Padloc GmbH
- Headquarters
- Germany (DE)
- Ownership
- Independent
- Founded
- 2016
- Data hosting
- Germany
- Infrastructure
- Hetzner
- Deployment
- SaaS, Self-hosted
- Open source
- Yes
- US Cloud Act exposure
- Low (no US parent)
- Certifications
- Cure53 Security Audit (2023)
- Replaces
- Bitwarden, 1Password, LastPass, Dashlane
About Padloc
Padloc is a privacy-first password management solution developed by Padloc GmbH in Berlin, Germany. It provides a zero-knowledge architecture where all data is encrypted client-side using industry-standard protocols like AES-256 and Argon2id before ever leaving the user's device. This ensures that even the service provider has no access to user credentials or sensitive notes. The platform is designed to be highly accessible across all major operating systems including Windows, macOS, Linux, iOS, and Android, as well as via browser extensions. While catering to individual users with its free and premium tiers, Padloc strongly targets small to medium-sized businesses (SMBs) and teams who require secure credential sharing, administrative oversight, and GDPR compliance without the complexity or jurisdictional risks of US-based alternatives. As an open-source project under the AGPL-3.0 license, Padloc offers a high level of transparency and the ability for organizations to self-host the entire infrastructure.
Alternative to
Target Segments
Deployment Options
Hosting & Security
Hetzner
Key Features
Related Articles
All articlesThe First AI Act Standard Is Here: What EN 18286 Means for European AI Providers
On 19 October 2026 the European Commission published the reference to EN 18286:2026 in the Official Journal. It is the first harmonised standard under the AI Act and gives providers of high-risk AI systems a presumption of conformity for quality management. Here is what it covers and what to do next.
20 Oct 2026RegulationThe EU Cloud and AI Development Act: What CADA Means for SaaS Buyers and Vendors
On 3 June 2026 the European Commission published the Cloud and AI Development Act, the centrepiece of its Tech Sovereignty Package. It introduces four cloud sovereignty tiers and restricts foreign processing of sensitive public data. Here is what it actually changes.
12 Jun 2026Digital SovereigntyAfter the US Election: Why 2026 Is the Year EU Companies Must Diversify Cloud Risk
Legal exposure, tariffs, and operational lock-in used to be separate concerns. In 2026 they stack together. Here is a sober playbook for European companies that want to reduce US cloud dependency without breaking what works.
7 May 2026