Aller au contenu
Vérifié indépendamment · Ré-audit trimestriel
EU VETTED

Uniqkey

VéRIFIé
Gestionnaires de mots de passe · Denmark
Founded 2017 · uniqkey.eu ↗

Danish business password & access manager (Uniqkey A/S, Copenhagen), Danish-hosted, zero-knowledge E2E, ISO 27001, EIFO-backed, NIS2-focused.

Pourquoi ce score ?

Uniqkey is a Danish business password-and-access manager operated by Uniqkey A/S (Copenhagen; founded 2017 by Hakan Yagci, backed by Denmark's national promotional bank EIFO plus a €5.35M raise) — fully Danish-incorporated and EU-owned, hosted entirely on Danish data centres, zero-knowledge end-to-end encryption, ISO 27001 certified, with an explicit 'no third-party data transfer' policy and a dedicated NIS2-compliance posture; score held at 4/5 only because the DPA and sub-processors URLs were not directly captured at audit — structurally a clean 5/5 EU sovereignty pick once those documents are linked.

SCORE
4.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
JUMP TO
OVERVIEW

About Uniqkey

Uniqkey is a business-focused password and access manager operated by Uniqkey A/S, headquartered in Copenhagen, Denmark. The company was founded in 2017 by Hakan Yagci, is backed by EIFO — Denmark's national export and investment fund (a state promotional bank) — and has raised around €5.35M to expand across Europe. That ownership profile is unusually clean for the category: a Danish A/S with national-bank backing, no US parent, no US private equity, and no US venture capital on record. The product splits into two parts: UniqPass (password management) and UniqAccess (access / SSO-style management), delivered through browser extensions and native apps for iOS, Android, Windows and macOS. The sovereignty story is the selling point. Uniqkey states that all data is **hosted on Danish data centres** with no third-party data transfer, uses **zero-knowledge end-to-end encryption** so Uniqkey itself cannot read customer vaults, is **ISO 27001 certified**, and markets a dedicated NIS2-compliance posture aimed at EU businesses that now fall under the expanded NIS2 directive. Reference customers include the Van Gogh Museum and the Danish public-sector IT supplier KMD — meaningful procurement signals for an EU-buyer audience. For an EU-sovereignty audit the only gaps are documentation and pricing transparency. The DPA and a sub-processors list were not directly findable on the public site at audit (a B2B vendor of this type certainly provides a DPA to customers — it simply was not linked publicly), which holds the compliance score one notch below maximum at 4/5 pending verification. Pricing is **quote-based**: the site advertises "one price, complete solution" with a free trial but does not publish per-user figures, so the EUR entry point is recorded as null. Best fit: EU SMBs and public-sector buyers — especially Nordic ones — that want a business password manager with genuine in-country (Danish) hosting, ISO 27001, zero-knowledge encryption and an explicit NIS2 angle, and who are comfortable with a sales-led pricing process.
SUB-PROCESSORS

Carte des sous-traitants · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Référentiels & certifications

ISO/IEC 27001
ACTIVE
FEATURES

Matrice de fonctionnalités

INTEGRATION & ACCESS
REST API No
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Tarifs & paliers

PAYANT
Tarifs sur mesure

Contactez l’éditeur pour les tarifs par palier ou volume.

Voir la page tarifs ↗
PUBLIC DOCUMENTS

Documents publics

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    support.uniqkey.eu/hc…
    Open ↗
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    www.uniqkey.eu/terms-of-service…
    Open ↗
ALTERNATIVES

Alternatives dans cette catégorie