envivo.io

The marketed AI is a Customer Engagement Score that predicts the probability of a deal closing and suggests timed follow ups. Remove it and a complete digital sales room remains: branded microsites, a content library, live chat, behavioural tracking, notifications, approvals and version control, e-signature and a payment function. Same removal test result already recorded for the established platforms in this index.

Automation is marketed as set once, then hands off. Each process is configured once for the business and everything after that runs by itself, dispatching content, scheduled activities and reminders by email or text message, with chatbots covering the chat surface outside service hours. No approval gate, review step, escalation route or action log is described anywhere in the public surface.

The engagement score is described only by what it emits, a close probability and a suggested next action. No model, provider, family, version, input set, accuracy figure or fallback behaviour is published, so nothing explains how a score is reached for a deal the seller is being told to prioritise.

Three linked customer cases carry figures: Vodafone at 46 percent shorter sales cycle and 37 percent higher close rate on its business shop channel, Allianz at 52 percent reduced administration, EK Immobilien on buying experience. A logo wall adds Siemens, Nokia, Atos, Holiday Inn, Best Western, H-Hotels and Rocco Forte.

Held at B rather than A because no measurement basis, named individual or reporting period accompanies any figure, and because one case presents 100 percent secure and compliant as though it were a percentage improvement, which puts the whole number set in question.

The platform pushes reminders to prospects by email and text message and nothing addresses the customer's obligations when it does: no consent standard, no unsubscribe mechanic, no reference to the German unfair competition rules that govern business email marketing, and no telecoms consent position for the messaging channel. Exposure is lower than a cold outbound tool because the recipient is an already engaged prospect, which is what holds this at C rather than below it.

The published policy is a properly structured German one: a legal basis cited per processing activity, rights enumerated, a supervisory authority route, a storage duration principle, and named processors each with a stated data processing agreement. Two defects hold it here. It is scoped to the marketing website and says nothing about the platform where prospect behaviour, chat transcripts and signed contracts live.

And it names a different legal entity as controller, envivo.select GmbH at Marktplatz 25 with an envivo-select.com mailbox, than the site notice names as operator, envivo.io GmbH at Adalbert-Stifterweg 30 under commercial register 169485 in Munich, so a buyer cannot tell which company would be their counterparty. Last modified August 2022, which also puts it ahead of the current transfer framework.

No third party data is acquired, licensed or resold. The corpus is the customer's own content plus first party interaction telemetry on the customer's own prospects, the low exposure shape already graded at B elsewhere in this index. The one place data is generated about a person who never contacted the seller is the stakeholder identification feature, which surfaces people reached by forwarding, and no basis is stated for it.

Sending runs on the vendor's own infrastructure and integration is by interface into CRM and ERP systems rather than by browser extension or scraping, so the standing exposures in this category do not apply. The named channel connector for WhatsApp is the one open edge: business initiated messaging on that platform carries template and opt in constraints, and no method or account model is stated.

The training question is unanswered in every direction. Nothing states whether customer content or prospect interaction data feeds the engagement score across accounts, no tenant boundary is described, and no retention or deletion terms exist for platform data, because the only privacy document published covers the marketing website.

Nothing impersonates a person and the microsite is openly branded by the seller, so a recipient knows whose page they are on. What they are not told is the depth: opens, views, dwell, comments, forwards and signature events are reported back, a score is computed on their behaviour, and forwarding surfaces them as a newly identified stakeholder.

Chatbots are marketed to cover the chat outside service hours with no disclosure position stated, and for a company established in Germany and selling into the European market, the absence of any Article 50 position is the sharpest gap on this axis.

An API appears in every pricing tier alongside interface integration to CRM and ERP systems, customer import and a channel connector, and the vendor's stated position is that if a system has an API it can be connected. What is absent is any named integration, object level sync description, developer documentation or marketplace listing, so the integration claim cannot be checked before a sales call.

The only infrastructure named anywhere is the website's host, Hetzner Online in Gunzenhausen, and the privacy policy scopes that naming to the website. Where the platform itself runs is unstated: no country, region, provider or option. Made in Germany is used as a marketing line and a German host is named, which is more than silence, but neither is a residency position for the buyer's data.

No certification, audit, trust page or documented control set is published for a platform holding sales content, prospect behavioural records, chat transcripts, signed contracts and a payment function. Encryption in transit is stated for the marketing website only, and secure and compliant appears as a marketing phrase rather than as evidence.

Graded at C for consistency with the other vendors here whose security surface is simply absent rather than misrepresented, with the sensitivity of what is stored as the reason to read this row harder than the grade alone suggests.

Two real numbers with a stated unit and currency: Starter at 19 euro and Professional at 49 euro per month, an annual or monthly toggle, a five user minimum, a fourteen day trial and self serve signup, so a buyer can budget a floor of roughly 95 euro a month without talking to anyone. Enterprise is quote only.

What keeps it off A is that all three tiers publish an identical feature list, so nothing on the page explains what the extra 30 euro buys, and Starter is described as perfect for individual users while requiring at least five of them.

The only legal documents published are a site notice and a website privacy policy. No customer terms, subscription agreement or service terms appear in the footer or navigation, leaving post termination data rights, deletion timelines and renewal mechanics undefined.

It sits at C rather than lower because an API is listed in every tier, which is an export path claim; the precedent set on Accent Technologies reserves the lower grade for a vendor with neither an export claim nor governing terms. The portability language in the privacy policy is a controller's obligation to a website visitor, not a customer export right.

Reminders leave the platform by email and text message and nothing is published on sending infrastructure, authentication, warmup, volume governance, complaint monitoring or degradation response. Structural exposure is lower than a sequencer's because the traffic is low volume follow up to an engaged prospect rather than cold outbound, but the customer's sending reputation is still carried by a system whose discipline is undescribed.

Coverage is evidenced rather than claimed: named customers span telecom, insurance, real estate, industrial and hospitality, three of them carrying linked cases. Against that, no vertical position, geography or company size band is published anywhere, and euro only pricing with a German and English interface points at a German speaking market the vendor never states. The five user minimum puts a real floor under the self serve tier.