CCV Shop
VERIFIEDE-commerce ·
Netherlands
Dutch hosted e-commerce SaaS from €36/mo; 0% transaction fees; parent company CCV Group is Fiserv-owned (US).
Why this score?
CCV Shop is Dutch-operated (KvK 08084328, Hengelo NL), but its parent CCV Group B.V. is owned by Fiserv Inc. (NYSE: FI, US), making this a US-ultimate-owner situation with material CLOUD Act exposure; no public DPA or sub-processors list further limits the score to 2/5.
- SCORE
- 2.0/5
- CLOUD ACT
- CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- OWNERSHIP
- OWNERSHIP
Where ultimate control over the operating company sits.
-
EU-owned EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded This listing EU-headquartered but US venture- or PE-controlled.
-
US-owned US-headquartered, or has a US parent company.
-
Other Swiss, UK or another non-EU jurisdiction.
-
- SUB-PROCS
- — not disclosed
JUMP TO
OVERVIEW
About CCV Shop
**CCV Shop** (Diamantstraat 3, Hengelo, Netherlands, KvK 08084328) is a Dutch hosted e-commerce platform offering plans from **€36/month (Basic, up to 50 products)** to **€129/month (Enterprise, unlimited products + B2B)**, all with 0% transaction fees and a 21-day free trial. The platform supports multi-language storefronts, API access (Professional+ plans), and multiple payment providers. CCV Shop is operated by the CCV Group, a Dutch payments + commerce company with 900 employees serving 150,000+ customers across Europe. However, **CCV Group B.V. is owned by Fiserv Inc.** (NYSE: FI, Milwaukee, Wisconsin), a major US financial technology company — so while the product team and operations are European, the ultimate beneficial owner is a US public company, creating material CLOUD Act exposure. Best fit for Dutch and Belgian SMBs who want a fully-managed, no-commission hosted shop with local Dutch-language support and local payment integrations. For buyers requiring clean EU ownership, Shopware Community Edition or PrestaShop self-hosted are stronger alternatives.
SUB-PROCESSORS
Sub-processor map · not disclosed
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS
Frameworks & certifications · none listed
We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-21).
FEATURES
Capability matrix
INTEGRATION & ACCESS
REST API
Yes
SSO (SAML / OIDC)
No
COMPLIANCE & GOVERNANCE
Audit log
No
Self-host / on-prem option
No
PRICING
Pricing & tiers
PUBLIC DOCUMENTS
Public documents
Vendor does not publish a public DPA.
Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement — this caps the compliance score (see How we score).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
-
missingData Processing Addendum (DPA)— missing
-
missingSub-processors list— missing
-
Open ↗Terms of Servicewww.ccvshop.nl/algemene-voorwaarden…
ALTERNATIVES
Alternatives in this category
MyCashflow
Finland
Finnish all-in-one e-commerce SaaS with own Helsinki hosting and 0% commission across plans.
VERIFIED SIGNALS
Jurisdiction
- EU / adequacy operator
- EU / adequacy hosting
- No US CLOUD Act exposure
Transparency
- Third-party certification
- Open-source clients
- Public DPA
- Sub-processors disclosed
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
PrestaShop
France
French open-source e-commerce with hosted SaaS option; parent group Fortidia is an Oaktree Capital portfolio company.
VERIFIED SIGNALS
Jurisdiction
- EU / adequacy operator
- EU / adequacy hosting
- No US CLOUD Act exposure
Transparency
- Third-party certification
- Open-source clients
- Public DPA
- Sub-processors disclosed
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Saleor Commerce
Poland
Polish headless GraphQL commerce platform; open-source BSD-3; cloud hosted on AWS EU (Ireland) with SOC 2 Type 2.
VERIFIED SIGNALS
Jurisdiction
- EU / adequacy operator
- EU / adequacy hosting
- No US CLOUD Act exposure
Transparency
- Third-party certification
- Open-source clients
- Public DPA
- Sub-processors disclosed
CLOUD ACT EXPOSURE
How exposed customer data is to US authorities under the CLOUD Act.
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.