Pipedrive

Established platform where the removal test leaves the whole product standing, and the vendor's own tier gating confirms it. Strip the model layer and the buyer keeps the visual pipeline, deals and activities, two way mail synchronisation, workflow automation, reporting and dashboards, mobile applications, the marketplace and every integration, which is the product this company built its position on over more than a decade.

What goes is an assistant that answers questions about the account's data, win probability prediction, next action recommendation, thread summarisation and reply drafting. Two of those, summarisation and generated replies, are explicitly available only from the third tier upward, so the vendor itself treats the model layer as an upgrade to a complete product rather than as the product.

A real governance layer, described as product capability and sold rather than promised. Access is role based with customisable roles and permissions so exposure can be limited by job function. The top tier adds account security rules and activity alerts, and, most usefully, a sandbox account that lets an administrator test configuration changes before rolling them out to a live team, which is a genuine change control mechanism and rare at this price point.

Automation ceilings are published per plan rather than left to be discovered. The assistant carries an unusual transparency mechanic described in the vendor's own documentation: it displays the sources its answers were based on in a dedicated tab, distinguishing between the vendor's knowledge base and the customer's own records, so a user can see what a given answer was drawn from.

Off the top band because no approval step, escalation threshold or audit trail of model actions is described, and the transparency mechanic shows a user where an answer came from without constraining what the assistant may do.

The most complete model disclosure recorded in this index. The vendor's own documentation states plainly that it uses different sub processors for its model features, names one of them outright as a major commercial provider, and adds that open source models are used alongside it, so a buyer learns both who is involved and that the estate is mixed rather than single sourced.

That statement sits beside a link to dedicated supplemental terms governing the model functionality specifically, which is a separate contractual instrument rather than a marketing page. The published sub processor list lives at its own public address and is referenced by the processing addendum as the authoritative register.

And the assistant itself displays, in the interface, the sources each answer was drawn from in a dedicated tab, separating the vendor's documentation from the customer's own data. Named provider, disclosed architecture, dedicated governing terms, public register and in product source attribution together clear this band comfortably. The only softening is that the provider list is introduced as including rather than limited to that provider, and no model family or version is stated.

The independent record is extensive and the vendor's own first party evidence was not reached on the pages read, so this row is held at the middle band and flagged. What is verified is substantial but external: this is one of the most reviewed products in its category across every major directory, with independent analyst and comparison coverage running to detailed current examinations of plans, ceilings and trade offs, several of them updated within weeks.

That volume of scrutiny is itself a form of accountability most vendors in this index do not face. What was not located is any named customer, quantified outcome, case study figure or measurement method published by the vendor, and no scale claim of its own was reached. Verifying the customer stories surface is the outstanding check on this row.

Genuine and unusually well aimed guidance on the customer's own legal position, and no located position on the mechanics of sending. The vendor publishes substantial material explaining that European data protection law treats the salesperson as the controller and that the obligations fall on them rather than on the tool, which is both correct and against the grain of a category that usually lets buyers assume the platform absorbs the risk.

Against that, this platform sends campaign mail and sequences as priced additions, with published sequence ceilings per plan, and no statute governing commercial mail or telephone contact was named, and no unsubscribe obligation, suppression mechanism, complaint route or consent requirement was located on the pages read. Terms of service exist and were not read.

The document set is complete, the roles are explained correctly, and the transfer question is answered structurally rather than on paper. A processing addendum is published at its own public address and grants sub processor authorisation by reference to the specific article of the European regulation that governs it.

The sub processor register lives at its own public address and is named in that addendum as authoritative, so a buyer can see who touches their data and check it later without asking. A dedicated regulation page and a detailed documentation article set out the roles plainly and correctly: the customer is the controller, their stored contacts are the data subjects, and the vendor is the processor acting on instruction, which is the distinction most vendors in this index blur.

Data subject requests to delete, modify or transfer are addressed with a named handling path. The decisive disclosure is the corporate structure: European customers contract with the vendor's European entity, so that transfer stays inside the European economic area rather than relying on a transfer mechanism to bridge it. Answering the hardest question in this axis by arranging the company rather than by citing a clause is what puts this at the top band.

The core platform holds the customer's own records, which is clean, and the vendor separately sells access to contact data, which is not sourced. A prospecting product supplies leads with what the vendor describes as model powered verification keeping the data accurate and current, and asserts that it is fully compliant with European data protection law.

That is a compliance claim rather than a provenance statement: no database, partner, collection method, coverage figure, refresh cadence, accuracy rate or lawful basis is published anywhere located. Contact level phone and mail enrichment is separately listed as a top tier capability with the same silence. Asserting compliance while identifying no source is the pattern this axis exists to catch, and it sits oddly beside the vendor's otherwise strong published position on data protection roles.

Official routes throughout and no stated conformance position. Integration runs through a first party marketplace carrying several hundred applications, a public interface, and documented two way synchronisation with named tools across scheduling, communications, documents and marketing. Nothing scrapes, rotates an identity or ships an extension that extracts from a platform the vendor has no arrangement with.

One dependency is worth noting for accuracy rather than as a criticism: the top tier advertises discounted partner pricing with three named third party products, one of which is a professional network extension, so a customer is being routed toward a tool whose own platform conformance is a separate question the vendor does not address. Off the top band because no conformance statement for any connected platform was located.

The contractual architecture is exactly the right shape and the specific commitment was not read. Model functionality is governed by its own supplemental terms, separate from the general terms of service and linked directly from the documentation describing the assistant, which is the structure that earned the top band elsewhere in this index.

Beneath it sit a published processing addendum and a public sub processor register that names the model providers, so the parties handling customer content during a generation are identifiable before purchase rather than after. The assistant's in product source attribution further shows a user which material informed each answer.

Off the top band because the supplemental terms were not opened, so whether customer content is excluded from training, whether any retention arrangement is in place with the named provider, and whether anything crosses between accounts all remain unverified. Reading that document is the single highest value check available on this vendor.

No position on article 50 of the European artificial intelligence regulation was located, which is a conspicuous gap at a vendor that engages European data protection law this thoroughly and contracts through a European entity. Three surfaces reach people with machine involvement they are not told about: a generator drafts outbound mail from a natural language instruction, context aware replies are composed inside the mail view, and a chatbot answers website visitors and collects their details around the clock.

Mail tracking runs alongside. The transparency mechanic the vendor does ship, showing the sources behind an assistant answer, is directed at the user rather than at the person on the other end of the message, so it does not bear on this axis.

Complete on every dimension this axis measures and among the broadest in the index. A first party marketplace carries several hundred applications spanning lead generation, video calling, project management and marketing, with tailored suggestions surfaced from what a customer already uses. A public interface and developer surface support programmatic access, documented two way synchronisation covers mail and named third party tools, and native applications ship for mobile.

The knowledge base documents integration behaviour at article level rather than leaving it to sales conversations, including a published register of sub processors that doubles as a map of the vendor's own dependencies. The top tier adds a sandbox account, which is a developer and administrator capability rather than a marketing one. Nothing material is gated in a way that prevents a buyer assessing the programmatic surface before purchase.

Two hosting providers are named outright on the vendor's own product page, which is more architectural disclosure than most platforms of this scale offer, and the residency question is answered structurally for the region where it matters most. European customers contract with the vendor's European entity, and the vendor states that the resulting data transfer therefore remains within the European economic area rather than crossing it under a safeguard.

Pricing renders in local currency by region, which evidences a genuinely international operation rather than a single market product. Off the top band because no data centre location, country list or region choice is enumerated anywhere located, no residency option is offered to a customer outside Europe, and the two named hosting providers are given without saying which workloads or regions sit on which.

A real and specifically named control set, published where a buyer meets it. Encryption is named with the actual cipher rather than described as bank grade, the two hosting providers are named, access is role based with customisable permissions, and the top tier adds account security rules and activity alerts as named capabilities. A service organisation control audit is held and independent current analysis reports it as the second type. Off the top band on three counts.

The vendor's own product page asserts full compliance with that audit without stating its type, which is the enumeration this axis rewards and which matters because the two types differ substantially. No audit period, audit date or auditor is published anywhere located.

And no trust centre, self service report, penetration test summary or vulnerability disclosure route was reached, so the evidence behind the certification is not available to a prospect the way it is at the vendors graded higher here.

The decisive disclosure is one almost no vendor makes: this platform publishes hard usage ceilings for every plan in its own documentation, and does not describe even the top tier as unlimited. Five hundred custom fields, five hundred reports per user, two hundred and fifty automations, fifty sequences, twenty thousand leads and deals per seat and a company level cap are all stated, so a buyer can determine before purchase whether the plan they are considering will actually hold their workload, and can see that paying for the top tier does not make the limits disappear.

Around that sits a complete price surface: four tiers each carrying a per seat rate on both monthly and annual cycles, a fourteen day trial requiring no card, self service cancellation through billing settings, and the honest disclosure that annual subscriptions are non refundable while monthly ones cancel at the next cycle.

The two additions most likely to change the real bill, campaign sending and website visitor tracking, are named and priced separately on every plan including the highest. The vendor states plainly that no discount exists for nonprofit or educational buyers rather than leaving it to be asked. Prices render in local currency by region with the buyer told to confirm their own checkout total.

The contractual foundations are strong and the operational detail was not located. The processing addendum and the regulation documentation commit to responding to requests to delete, modify or transfer personal data, and the vendor correctly identifies itself as processor acting on the customer's instruction, which puts the legal right where it belongs.

A public interface makes programmatic bulk retrieval available, import tooling for delimited files exists, and cancellation is self service through billing settings rather than requiring a conversation. Against that, no export function, file format, post termination retrieval window, deletion timeline or retention period was located on any page read, and the disclosure that annual subscriptions are non refundable tells a customer what they lose commercially without telling them what happens to their records. The terms of service were not read and are flagged.

Sending is real but peripheral to this product and no discipline was located around it. Campaign mail is sold as a priced addition on every plan, sequences carry published per plan ceilings, and two way mail synchronisation runs through the customer's own mailbox, which leaves ordinary correspondence reputation where it belongs. The published sequence limits function as a de facto volume governor and are worth crediting as such.

Beyond them, no warmup guidance, sender authentication position, complaint rate threshold, bounce handling policy, address verification or reputation monitoring was located on any page read, and the campaign product's sending infrastructure is not described at all.

The ladder itself does the segmentation and does it honestly. Each of the four tiers carries a stated buyer, running from a small team needing the core pipeline through growing teams adding automation and mail synchronisation, to larger teams needing lead capture and project tooling, to organisations needing governance and security rules across multiple teams.

The vendor is explicit that the top tier is bought for administrative allowances and security controls rather than for removing limits, which is an unusually candid account of what the money buys. International reach is evidenced structurally rather than claimed, through regional currency rendering, localised site paths and a separate European contracting entity.

Off the top band because no customer count, seat band, region list, language list or industry breakdown was located on the pages read, and there is no vendor published statement of who this product is wrong for, a gap independent reviewers fill unprompted by naming buyers whose primary need is lifecycle marketing.