Twenty
Open-source CRM with people, companies and opportunities, no-code workflows and custom objects, offered as a cloud service or for self-hosting.
Alternative to Salesforce
3 / 6 how we score
What it does
Open-source CRM with people, companies and opportunities, no-code workflows and custom objects, offered as a cloud service or for self-hosting.
Paraphrased from the project README ('open-source CRM', 'objects, views, workflows, and AI agents', managed Cloud or Docker Compose self-hosting) and the home page.
Legal entity
Twenty.com PBC
Terms of Service: 'Twenty.com PBC is a public benefit corporation incorporated in Delaware, United States.' Governing law: Delaware; disputes in Delaware courts. No postal address stated in the terms.
Headquarters
US
Country of incorporation (Delaware) per the terms. Physical office location is not stated on the terms, DPA, FAQ or home pages fetched. A directory listing France was not confirmed; no French entity found.
Pricing from
USD 9 per user per month (Pro, billed yearly); Organization USD 19; Enterprise from USD 50,000 per year; self-hosted core free
Unlimited seats noted for all plans. API rate limit on Pro: 50 calls per minute.
Jurisdiction unknown
Contracting entity
Twenty.com PBC (US)
Contracting entity for the Cloud Service. Incorporated in Delaware. No company register entry was fetched (Delaware has no open register to fetch).
Ultimate parent
Unknown
No parent company or shareholder disclosure found on the vendor's legal pages. No registry source fetched.
Foreign-law exposure fail
Based on the same ownership chain as jurisdiction.
Data residency pass
EU storage by default
Yes
Legal FAQ: 'Twenty Cloud runs on AWS servers located in Frankfurt, Germany.' Backups stay in the same jurisdiction. Region selection is planned for 2027, so Frankfurt is the only region now.
EU processing by default
Yes
Cloud runs on AWS Frankfurt. AI features send data to the model provider configured for the workspace (Terms); where those providers process data was not found. Trust Center list was not readable.
Regions
Germany (AWS Frankfurt)
Region choice planned for 2027, starting with new workspaces. Self-hosting is possible anywhere, or via Twenty's hosting partners.
Subprocessors unknown
Public list
Yes
FAQ and Terms say the full list is at https://trust.twenty.com/?tab=subprocessors. That page is rendered by script and its entries could not be read in this run, so the contents are unchecked.
Non-EU in core processing
Unknown
Trust Center list not readable; FAQ gives no sub-processor countries. FAQ says EU SCCs (with UK and Swiss terms) cover transfers to all sub-processors. Hosting provider AWS is a US company.
DPA pass
GDPR Art. 28 available
Yes
Terms: where GDPR applies, Twenty processes Customer Data as processor under its DPA, which customers generate and sign in workspace settings (/settings/legal/dpa). The DPA text itself is behind login; Art. 28 clauses not checked.
Lock-in pass
Open source
Yes
Mostly AGPLv3. Files marked '@license Enterprise' fall under the Twenty.com Commercial License; some packages (SDK, UI) are MIT.
Self hostable
Yes
README: runs on your own infrastructure via Docker Compose; pricing page says the open-source core can be self-hosted for free. Enterprise-licensed features may need a paid license.
Full data export
Yes
Terms: customer can export Customer Data at any time during the subscription or trial using export features and APIs; after suspension data is kept at least 14 days. Pricing page lists CSV import and export on all plans. Export formats and completeness not checked in the product.
Features not scored
Contact management
Yes
People and Companies are core objects shown on the home page.
Pipeline management
Yes
Table, kanban and calendar views; Opportunities grouped by stages (home page).
Email integration
Yes
Gmail, Outlook, plus IMAP/SMTP and CalDAV; syncs every 5 minutes and links emails and events to records.
Automation
Yes
No-code workflows with record, schedule, manual and webhook triggers. Pricing page: Pro includes 50 workflow credits per year.
Reporting
Yes
Custom dashboards with widgets, charts and filters.
Custom fields
Yes
Custom objects and custom fields with 20+ field types, on all plans per the pricing page.
API
Yes
REST and GraphQL APIs, webhooks and an MCP server on all plans; rate limits by plan.
Mobile app
Unknown
No mobile app mentioned on the home, pricing, key-features or docs pages fetched.
What changed
- 2026-10-17 Research: Twenty (vendor and product)
Every change to these facts is kept in version history. Each one was reviewed before publishing.