whats-best.ai
Search Sign in

CRM

Odoo CRM

EU-Made Report an error

Panel rating · 6 judges · How to read the stars

Category median

Sovereignty: not determined

0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.

by Odoo SA · www.odoo.com

Compare with Zoho CRM → Report an error on this page Is this your product? →

Read this page as one judge. Each weighs the same scores by what they care about.

The Data Protection Officer

Weighted verdict

Knows a CRM is a database of other people's personal data before it is a sales tool. Optimizes for GDPR posture: EU hosting, DPA, subprocessor hygiene, consent fields, retention and deletion that actually delete. Rejects US-default hosting and enrichment features that scrape contacts from the open web.

Same scores as the panel view — this lens weights them the way this judge cares.

Scored by The Data Protection Officer

Contact & data model

How this is scored

Depth and hygiene of the core records — contacts, companies, deals, custom fields, deduplication.

0 — A flat address book; no relations between people, companies and deals.

3 — The standard three objects exist but customization is cosmetic: few field types, no required fields, duplicates accumulate unchecked.

5 — Custom fields across objects, basic dedupe on create, activity history on the record; complex models still need workarounds.

8 — Rich field types with validation, merge and dedupe tooling, relationships beyond the standard model, permissioned field access.

10 — A genuinely modelable system: custom objects or equivalent, bulk hygiene tooling, field-level history — the data model bends to the business, not the reverse.

Report an error

The Data Protection Officer

The standard objects exist with persons linked to companies via import, custom fields on contacts, multi-company support, and record visibility governed by sales access-right groups — but the captured forum threads show linking people to employers on import is an External ID procedure that changed between versions and needed three parts in Odoo 13. We found no public information on duplicate detection or merge tooling, and unchecked duplicates in a database of other people's personal data is a records-hygiene problem before it is a sales one. 1 4 5 6

Report an error

Pipeline & forecasting

How this is scored

Whether the pipeline enforces a process and produces reporting a finance department accepts.

0 — A kanban of deals with amounts; nothing is enforced, nothing rolls up.

3 — Multiple pipelines and stage probabilities exist, but no required fields per stage and only canned reports.

5 — Stage requirements, win/loss capture and standard forecast views; custom reporting is limited or an add-on.

8 — Enforceable process (required fields, stage gates, routing), custom report builder, forecast by team and period with quota tracking.

10 — Forecasting a CFO signs: weighted and commit-based views, historical snapshots, attainment tracking, and reporting composable enough to answer questions the vendor never anticipated.

Report an error

The Data Protection Officer

The captured pages show a Kanban pipeline you drag opportunities across, quotations, and insight into planned or probable revenue — while a forum capture reports that recurring subscriptions do not come back in the sales forecast and revenues are booked as lump sums. We found no public information on required fields per stage, win/loss capture, quota tracking or custom reporting, so nothing here evidences a process a finance department would sign. 1 7

Report an error

Automation & workflows

How this is scored

Triggers, sequences and routing that remove manual work without a consultant.

0 — No automation beyond email templates.

3 — Simple if-this-then-that on records; no multi-step sequences, no branching.

5 — Multi-step workflows with delays and branching, email sequences, basic lead routing — capped by tier or count.

8 — Full workflow builder across objects with webhooks as steps, round-robin routing, sequence analytics.

10 — Automation as infrastructure: versioned workflows, error handling, per-step logs, and limits generous enough that the feature is not its own upsell.

Report an error

The Data Protection Officer

Automation is real but thin and gated: lead creation, team assignment and scheduled activities are advertised, and the captures describe record-triggered automation rules — yet only users in the Administration/Settings group can create automated actions, and a forum capture shows the create-time trigger deprecated in favor of an On Save trigger whose official workaround is firing on the creation date. We found no public information on branching, delays or multi-step sequences. 1 8 9

Report an error

Integrations & API

How this is scored

Two-way email/calendar sync, native connections, and an API that treats external systems as first-class.

0 — No API, no sync; data enters by CSV and leaves never.

3 — One-way email logging (BCC), a handful of Zapier triggers, a read-mostly API.

5 — Two-way email and calendar sync for the major providers, a documented REST API with sane limits, a modest native directory.

8 — Deep native integrations for the revenue stack, webhooks, OAuth apps, API parity with the UI for core objects.

10 — An ecosystem: public API covering everything the UI does, event streams, a marketplace, and sync so reliable the CRM can be the system of record without being the only system.

Report an error

The Data Protection Officer

The captured pages list Email, Live chat, SMS and VoIP as channels with incoming mail added to the pipeline automatically, plus an XML-RPC API for external tools — while the pricing capture lists External API among the Custom plan's features, so what API access other tiers include is not shown. We found no public information on two-way calendar sync, webhooks, OAuth applications or a native integration directory. 1 2 10 13

Report an error

European sovereignty

How this is scored

Where other people's personal data actually lives and under whose law — entity, hosting, subprocessors, DPA.

0 — US entity, US-default hosting, no public DPA or subprocessor list.

3 — A DPA exists and an EU region is available on request or on top tiers; subprocessor exposure to US CLOUD Act reach is broad and undocumented.

5 — EU hosting selectable at signup, published DPA and subprocessor list; core processing still touches US entities.

8 — EU entity or EU-default hosting with published subprocessors, consent-friendly fields, retention and deletion controls; residual US exposure named and narrow.

10 — European entity, EU-only processing including subprocessors, deletion that provably deletes — sovereignty a DPO can sign off without a caveat file.

Report an error

The Data Protection Officer

The captured privacy page shows a Belgian entity with EU-region production in France and Belgium on French infrastructure (OVH, Outscale, Scaleway, including SecNumCloud), a published subprocessor list naming each processor and purpose, and self-service database deletion — a serious European posture. I hold it below the top of the range because EU-hosted customers still carry a Canada-based backup until a transition dated Q4 2026, personal data can persist in backups for up to 12 months after deletion, and Clearbit is used to retrieve business info on visitors coming from EU companies, an open-web enrichment practice I do not sign off. We found no public information on a published data processing agreement or on consent-management fields, and the US processors named (FullStory for trial recordings in Google Cloud US, AWS) are both marked currently inactive. 3

Report an error

Import, export & exit

How this is scored

Getting in with history intact, and out with everything — the anti-lock-in criterion.

0 — Import is a support ticket; export is contacts-only CSV missing notes, activities and files.

3 — Self-serve CSV import with mapping; export covers main objects but drops activity history, attachments or relations.

5 — Guided migration from major competitors, full-object CSV export, API access sufficient to rebuild the database elsewhere with effort.

8 — Complete export (all objects, history, files) self-serve in open formats, import with dedupe and dry-run, no API metering that prices exit out of reach.

10 — Exit as a feature: documented full-fidelity export, migration tooling both directions, and contractual data-return terms — leaving is a weekend, which is exactly why you can stay.

Report an error

The Data Protection Officer

Getting out is self-serve: a complete database backup from the control panel, CSV export from list views across nearly all data, and CSV import with a Validate step that acts as a dry run before committing. The captured forum threads show contact-to-company linking on import requires External ID workarounds, we found no public information on dedupe at import, and after deletion personal data can remain in backups for up to 12 months — an exit that still leaves copies behind. 3 4 12

Report an error

Pricing transparency

How this is scored

Whether a buyer can compute the real invoice — per seat, per month, at renewal — from public pages alone.

0 — No public prices at all; every tier is a sales conversation.

3 — An entry price exists, but the tiers most buyers need are unpriced, or per-seat maths is obscured by bundles, minimums or mandatory onboarding fees.

5 — Most tiers carry real numbers with billing period and VAT treatment stated, but at least one commonly needed capability hides in an unpriced tier or usage-metered add-on.

8 — Every tier priced publicly including annual/monthly split; limits, seat minimums and overage rules stated; only genuine enterprise contracts are custom.

10 — Complete price computability: every tier, add-on, usage meter and renewal rule public, with a calculator or table that makes the invoice at 3 and 30 seats a two-minute exercise.

Report an error

The Data Protection Officer

The captures show a One App Free plan at € 0 with unlimited users, an all-apps single fee for the Standard and Custom plans, and a worked example totalling €4,776.00 / year for 20 users — but not the per-seat rate behind it, the billing-period split or VAT treatment, and the discount is valid for 12 months for initial users ordered, which obscures the renewal invoice. Odoo.sh hosting cost is stated as not included and the Custom plan carries no numbers in the captures, and we found no public information on usage metering for the optional in-app purchase services. 1 2

Report an error

European sovereignty — proven facts

0 of 4 dimensions proven

Built only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.

Ownership Not determined — uncited Report an error
Data residency Not determined ⚠ unverified — uncited Report an error
Subprocessors Not determined ⚠ unverified — uncited Report an error

Where this could be wrong

What we left out

A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.

Do you know more about Odoo CRM? Tell us Report an error on this page

Sources (13)

The pages every claim on this page was read from — each one checked, dated, and kept verifiable.

  1. 1 Vendor product page www.odoo.com Checked 15 Sep 2026 Details →
  2. 2 Vendor pricing page www.odoo.com Checked 15 Sep 2026 +1 earlier capture: 11 Sep 2026 Details →
  3. 3 Privacy policy www.odoo.com Checked 15 Sep 2026 Details →
  4. 4 Contact & data model — found from sitemap www.odoo.com Checked 1 Oct 2026 Details →
  5. 5 Contact & data model — found from sitemap www.odoo.com Checked 1 Oct 2026 Details →
  6. 6 Pipeline & forecasting — found from sitemap www.odoo.com Checked 1 Oct 2026 Details →
  7. 7 Pipeline & forecasting — found from sitemap www.odoo.com Checked 1 Oct 2026 Details →
  8. 8 Automation & workflows — found from sitemap www.odoo.com Checked 1 Oct 2026 Details →
  9. 9 Automation & workflows — found from sitemap www.odoo.com Checked 1 Oct 2026 Details →
  10. 10 Integrations & API — found from sitemap www.odoo.com Checked 1 Oct 2026 Details →
  11. 11 Integrations & API — found from sitemap www.odoo.com Checked 1 Oct 2026 Details →
  12. 12 Import, export & exit — found from sitemap www.odoo.com Checked 1 Oct 2026 Details →
  13. 13 Import, export & exit — found from sitemap www.odoo.com Checked 1 Oct 2026 Details →