1Password Business
Enterprise password manager with EU hosting and GDPR DPA
- Data residency
- EU + US (DPF)
- DPA available
- Yes
- Pricing
- Subscription
- Art. 9 data
- Not suitable
Who this tool is for
Industries
- Teams eliminating weak or shared passwords
- IT departments needing central secret control
- Service, retail and legal practices
- Companies wanting EU-region credential storage
1Password Business is a zero-knowledge password and secrets manager built for teams, with an admin console offering granular permissions. For German SMBs it pairs strong security architecture with practical compliance options: an EU data residency option and SOC 2 Type II certification.
A DPA and SCCs are provided in 1Password's contract bundle, so an AV-Vertrag is available. The underlying residency is classified EU/US, meaning the EU option must be actively chosen and a transfer-risk assessment may still apply depending on configuration. It fits service firms, retailers and law practices that want to eliminate weak and reused passwords across the team while keeping admin oversight.
Pros and cons
Strengths
- Zero-knowledge architecture protects secrets
- EU data residency option available
- SOC 2 Type II certified
- Granular admin permissions and oversight
- DPA and SCCs included
Trade-offs
- Default residency is EU/US, EU must be chosen
- No free tier for business
- Vendor lock-in for stored secrets
- Cross-border config may need assessment
Where it sits with GDPR
Good fit for
- EU data residency option keeps data in the EU
- Zero-knowledge design minimises exposure
- AV-Vertrag and SCCs available
Think twice / not suitable for
- EU/US default requires choosing the EU region deliberately
- Not classified for Art. 9 special-category data
Data protection note
EU data residency available; DPA + SCCs in 1Password BAA bundle.
Frequently asked questions
Is 1Password Business GDPR compliant?
Yes. It offers an EU data residency option, a DPA, SCCs, and SOC 2 Type II certification.
Where is 1Password data stored?
Residency is EU/US; an EU data residency option is available and must be selected for EU-region storage.
Does 1Password offer an AV-Vertrag?
Yes, a DPA and SCCs are included in the 1Password contract bundle.
Is 1Password zero-knowledge?
Yes. It uses a zero-knowledge architecture, so secrets are not readable by the provider.
Reviews are written and reviewed by Eduardo personally. They describe what a tool does and where it sits with data protection, but they do not constitute legal advice.