Project management software

awork

Project planning, time tracking and optional AI from Germany

GermanyEU Ownership reviewed, controller unresolvedHigh non-EU dependency

Scope verdict

Ownership reviewed, controller unresolved

awork GmbH, Großer Burstah 36/38, 20457 Hamburg, is registered at Amtsgericht Hamburg under HRB 172488, VAT DE349350431. The official portal returned a current company result and a shareholder list dated 23 August 2024, added to the register folder on 28 August. The download could not be retrieved; no percentage or majority is inferred from directors or funding announcements. The HQLabs business sold to BID Equity is distinct from awork GmbH. German law and Hamburg jurisdiction apply under the September 2025 terms.

How we classify services

Operational dependency warning

Relies heavily on non-European providers

Current public evidence shows 10 non-European infrastructure or email dependencies across 7 providers: Amazon Bedrock, Chargebee / Stripe, Cloudflare, Google, Intercom / Twilio Segment, Microsoft, Twilio SendGrid. The reviewed operational path is therefore not entirely European.

Review dependencies ↓

awork is a hosted platform for project planning, capacity management, time tracking, documents and client collaboration. Optional AI adds chat and agents that can use permitted workspace context and connected tools. No self-hosted edition was established.

awork GmbH is the German operator. Its official company record and a filed shareholder-list entry are identifiable, but the list's contents and controlling rights were not obtained. German workspace hosting and European investors do not resolve ultimate ownership.

Pricing

The live EUR view lists Basic at 5 euro/user/month with annual billing or 7 euro monthly; Standard at 11 or 14 euro; Professional at 19 or 22 euro. Prices exclude VAT. Enterprise is quoted separately. Optional AI starts at 15 euro/user/month for 1,750 credits, with 30/60/120 euro packs for 3,500/7,500/16,000 credits. Credits expire at the end of the applicable period. A free trial is available.

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Public website

Cloudflare

Non-European provider
Observed
www.awork.com resolves to 104.26.4.116, 104.26.5.116 and 172.67.69.181. Anycast does not reveal the workspace database location.

Why this matters

Public DNS routes website visits through Cloudflare. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.

Core service hosting

Microsoft Azure

Non-European provider
Observed
DPA v05 identifies Germany West Central (Frankfurt) and Germany North (Berlin) for primary customer-data storage and processing. Optional AI and ancillary operations have separately stated scopes.

Why this matters

Reviewed evidence places Microsoft Azure in the core service path, so customer data may be processed under non-European control. Check the cited source for the documented region and scope.

Public website

Microsoft Azure Front Door

Non-European provider
Observed
app.awork.com uses an azurefd.net CNAME. The DPA permits necessary short-term connection-data processing at nearby non-EU edges for users outside the EU, while specifying a 30-day connection-data maximum.

Why this matters

Public DNS routes website visits through Microsoft Azure Front Door. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.

Supporting services

Microsoft Azure AI Foundry

Non-European provider
Observed
Optional selected OpenAI models run in the EU Data Zone, primarily Germany West Central with Sweden Central fallback. The stated path gives OpenAI no direct prompt/output access.

Why this matters

The published disclosure lists Microsoft Azure AI Foundry for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.

Supporting services

Google Vertex AI

Non-European provider
Observed
Optional Google/Gemini model inference is assigned to Belgium, europe-west1.

Why this matters

The published disclosure lists Google Vertex AI for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.

Supporting services

Amazon Bedrock

Non-European provider
Observed
Optional Anthropic model inference uses geographically restricted EU profiles; the stated path gives Anthropic no direct access to prompts or outputs.

Why this matters

The published disclosure lists Amazon Bedrock for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.

Supporting services

TensorX

Provider control not verified
Observed
Optional model inference runs on TensorX hardware in Dublin and Helsinki; the DPA claims volatile-memory processing, no prompt/output logging and no disclosure to model developers. Supplier control was not separately established.

Supporting services

Intercom / Twilio Segment

Non-European provider
Observed
DPA names US Intercom support and Segment technical forwarding, with possible US Twilio processing. User-shared support material is distinct from automatic full-workspace delivery.

Why this matters

The published disclosure lists Intercom / Twilio Segment for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.

Authorised outbound email

Twilio SendGrid

Non-European provider
Observed
App privacy policy names transactional email on EU servers. Do not confuse this service with the separate Segment forwarding provisions.

Why this matters

This domain authorises Twilio SendGrid to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Payment processing

Chargebee / Stripe

Non-European provider
Observed
App privacy policy names Chargebee Inc. in the US for subscriptions and Stripe Payments Europe for payments, with stated transfer safeguards.

Why this matters

When this payment method is used, Chargebee / Stripe processes payment and billing data. This role alone does not establish access to the service's other customer content.

Incoming business email

Google Workspace

Non-European provider
Observed
MX 1 aspmx.l.google.com · 5 alt1.aspmx.l.google.com · 5 alt2.aspmx.l.google.com · 10 alt3.aspmx.l.google.com · 10 alt4.aspmx.l.google.com

Why this matters

Published MX records route incoming business email through Google Workspace. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Supporting services

Birdie / Philo Labs

Provider control not verified
Observed
DPA describes user-initiated bug recording and deletion 90 days after ticket processing. It is not an automatic recording of every workspace.

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More in Project management software

View all →

More from Germany