Self-hosted support software with MIT and commercial editions
Open sourceOpen source Ownership reviewed, controller unresolvedHigh non-EU dependencyOperational dependency warning
Current public evidence shows 8 non-European infrastructure or email dependencies across 8 providers: Amazon Web Services (Chatwoot Cloud), Chatwoot telemetry and licence services, GitHub, Linear and Vanta, Google, Netlify, New Relic, PagerDuty, Amplitude, PostHog and Firecrawl, OpenAI (optional Captain AI), Stripe. The reviewed operational path is therefore not entirely European.
Chatwoot combines live chat, email and other support channels in a shared inbox. Its self-hosted Community Edition is MIT-licensed; code under enterprise/ has a separate commercial licence requiring paid seats for production use. Paid capabilities include Captain AI and enterprise administration.
Chatwoot, Inc. is a US operator. Its hosted Cloud service uses AWS servers in the United States, while self-hosted installations use the customer's chosen infrastructure. European hosting of a self-hosted instance does not establish European ownership or automatically keep telemetry and enabled integrations local.
Terms name Chatwoot, Inc. or an affiliate specified on the order. Its handbook states Delaware incorporation in 2020 and a $1.6 million seed round; the investor page names Goat Capital, Uncorrelated Ventures, Y Combinator and angels. No current cap table, majority voting stake or veto rights were established. The US operator is known; ultimate control remains unresolved. An Irish GDPR representative is not a European parent.
Community Edition is free to self-host; infrastructure costs are separate. Self-hosted Premium Support and Enterprise list $19 and $99 per agent/month. Cloud Hacker is free for up to two agents and 500 conversations/month; paid Cloud plans list $19/$39/$99 per agent/month, subject to fair use. Additional Captain credits cost $20 per 1,000. Taxes are extra; confirm the billing term in the order.
Data and operations
Verified operational dependencies, shown separately from ownership and from the service's core data hosting.
Core service hosting
Core service hosting
Why this matters
Reviewed evidence places Amazon Web Services (Chatwoot Cloud) in the core service path. Even when workloads stay in an EU region, the standard AWS infrastructure remains under US ultimate ownership. Treat it as the separately operated AWS European Sovereign Cloud only when the provider explicitly documents that deployment.
Public website
Why this matters
Public DNS routes website visits through Netlify. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.
Incoming business email
Why this matters
Published MX records route incoming business email through Google Workspace. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.
Supporting services
Why this matters
The published disclosure lists Chatwoot telemetry and licence services for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.
Supporting services
Why this matters
The published disclosure lists OpenAI (optional Captain AI) for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.
Payment processing
Why this matters
When this payment method is used, Stripe processes payment and billing data. This role alone does not establish access to the service's other customer content.
Supporting services
Why this matters
The published disclosure lists New Relic, PagerDuty, Amplitude, PostHog and Firecrawl for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.
Supporting services
Why this matters
The published disclosure lists GitHub, Linear and Vanta for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.