Website Builders
one.com Website Builder
EU-Made Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by One.com Group AB · www.one.com
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
one.com Website Builder at a glance
- Vendor
- One.com Group AB
- Headquarters
- Not stated on the vendor’s pages as of 28 Oct 2026
- Data hosting
- Not stated on the vendor’s pages as of 28 Oct 2026
- Free plan
- Not stated on the vendor’s pages as of 28 Oct 2026
- Panel verdict
- The AI panel rates one.com Website Builder 2.5/5, the mean of 6 judges. The one.com Website Builder — an AI builder called Aida from One.com Group AB, Malmö — scores highest on pricing transparency and forms and business. how scores are made
- As of
- Vendor pages captured 28 Oct 2026; evaluated by the panel 29 Oct 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
The one.com Website Builder — an AI builder called Aida from One.com Group AB, Malmö — scores highest on pricing transparency and forms and business. Plans publish first-year and renewal totals — Booking at €5.99 per month promotional, €71.88 now, €240 on renewal — plus a 15-day money-back guarantee, though the captured pages give different VAT figures (19% and 0%). Bookings are documented in depth; forms appear only as an AI-added lead-capture form, and the bench found no public information on storage or spam protection. SEO and marketing is weakest: no public information on sitemaps, redirects or editable page titles for the builder. Hosting and portability splits at 4-6 — the skeptic scored it down on export, on which we found no public information, and on data normally deleted seven days after the subscription ends; others credited servers in Denmark and the named Copenhagen data centre. Sovereignty runs 5-6, with US sub-processors and transfers to the USA, India and the UAE against European names. The data protection officer scored 0 on every criterion.
Speaks for it
- Every plan publishes the promotional monthly price, the payment today and the full renewal total, making a multi-year cost computable from public pages.
- Bookings are built in — custom booking and cancellation rules, customer rescheduling with a configurable cutoff, group capacity, and sync to Google Calendar or Outlook.
- Hosting is named rather than implied: servers in Denmark, processing fixed to the Copenhagen data centre, with free SSL, DDoS protection, WAF and DNSSEC.
- A published data processing agreement carries 2021 standard contractual clauses, audit rights and 48-hour breach notification.
- Every Aida-built site ships with an integrated consent banner.
Held against it
- We found no public information on exporting pages, content or media out of the builder, and the terms state website and mail data is normally deleted seven days after the subscription ends.
- We found no public information on sitemaps, redirects, editable page titles or built-in visitor statistics for builder sites.
- Forms appear only as an AI-added lead-capture form; we found no public information on field types, spam protection or where entries are stored.
- The sub-processor annex lists AWS with US/DE locations plus Termly Inc. and Google Inc. of the US, and the privacy policy names transfers to the USA, India and the UAE.
- The AI quota reset is priced only as a small fee, several add-ons appear without prices, and the captured pages give different VAT figures (19% and 0%).
Best for
- You run an appointment-based business and need bookings inside the site — forms and business scored 6-7, with up to 25 appointments a month on the Booking plan and unlimited on Commerce.
- You want the full multi-year price known before signing — every plan shows the payment now and the renewal total, and a 15-day money-back guarantee applies.
- You sell online at small scale — the Commerce plan adds unlimited products, 10+ payment methods and 0% commission.
- You want hosting on named European servers with a published data processing agreement — servers in Denmark, processing fixed to the Copenhagen data centre.
Avoid if
- You need to take your site with you when you leave — we found no public information on export, and the terms state data is normally deleted seven days after the subscription ends.
- Your growth depends on organic search — SEO and marketing scored 3-4, and we found no public information on sitemaps, redirects or editable page titles for builder sites.
- You need fine design control — editor and design clusters at 4, and we found no public information on custom code, separate mobile editing or collaborator roles.
- You must keep processing inside Europe end to end — the sub-processor annex names AWS with US/DE locations, Termly Inc. and Google Inc., and the privacy policy documents transfers to the USA, India and the UAE.
The scores
| Criterion | Panel median |
|---|---|
| Editor, templates & design control | 2 of 5 |
| Hosting, domains & portability | 3 of 5 |
| SEO, analytics & visibility | 1.5 of 5 |
| Forms, bookings & business features | 3 of 5 |
| Imprint, privacy & cookie compliance | 3 of 5 |
| European sovereignty | 3 of 5 |
| Pricing transparency | 4 of 5 |
Editor, templates & design control
panel disagrees
Show reasoningHide reasoning
How this is scored
How a site gets built and how far the owner can shape it: the editor (drag and drop, sections, AI drafts), the template range, responsive and mobile editing, fonts and brand styles, multilingual pages, custom code, and roles for collaborators or clients.
0 — Not a website editor; the product hosts files or code that are built elsewhere.
3 — An editor with a small set of templates and fixed layouts, where colours and texts change but structure, mobile view and languages are not described.
5 — A visual editor with a template gallery for several industries, layouts that adapt to mobile, brand colours and fonts, a blog, and the option to add pages in a second language or custom code snippets.
8 — Fine design control documented: free layout or section editing, separate mobile and breakpoint editing, reusable components or global styles, built-in multilingual sites with translated URLs, user roles for collaborators or clients, and site versions or history that can be restored.
10 — Design work at a professional level without leaving the tool: a design system with variables and components, interactions and animations, a CMS with custom collections, staging or branching before publishing, client handover with restricted editing, and the editor documented in depth.
The Small-Business Owner
Aida builds the whole site from a chat prompt — layouts, text, images and sections — and I can still edit most areas by hand afterwards, with a blog, unlimited pages and a second language included. We found no public information on a template gallery, separate mobile editing, brand fonts or custom code, so the design control stops short of fine-grained. 1 2 8 9 15
The Freelance Web Designer
The builder is an AI chat (Aida) that generates layouts, text, images and sections, and most areas can be edited manually afterwards; mobile-optimized sites, a blog with AI drafts, multilingual websites and unlimited pages are documented. But I found no public information on separate mobile or breakpoint editing, reusable sections, global styles, a template gallery, client logins with restricted editing, version history or custom code — the control I need before I put a doctor's practice on a tool. 1 2 8 9 15
The Marketing Lead
Aida builds and refines layouts, text, images and sections from chat prompts, most areas stay manually editable afterwards, and the documented plans include a blog with AI content, unlimited pages, multilingual sites and AI advice on colours and section placement. We found no public information on a template gallery by industry, custom code, separate mobile editing, collaborator roles or version history, so what is documented is AI-assisted assembly rather than fine design control. 1 2 9 15
The Practice Owner
The site gets built by prompting the Aida AI, which generates layouts, text, images and sections, and I can edit most areas manually afterwards; a blog, unlimited pages and a multilingual website are documented. What is thin for my taste: I found no public information on a template gallery, separate mobile editing, custom code or roles for collaborators. 1 9 8 2
The Data Protection Officer
The site is built by prompting an AI that generates layouts, text, images and sections, and most areas can afterwards be edited by hand, with a blog, unlimited pages, a second language and mobile-optimised layouts documented. We found no public information on a template gallery, brand colours and fonts as owner-controlled settings, custom code snippets, collaborator roles or restoreable site versions. 1 2 9 13 15
The Skeptic
Aida builds the site from prompts, most areas stay manually editable, pages are unlimited, and a blog plus a multilingual website are listed features. But we found no public information on a template gallery, separate mobile editing, custom code, or collaborator roles beyond delegating domain settings — the AI decides structure, and the owner persuades it. 1 2 8 9
Hosting, domains & portability
panel disagrees
Show reasoningHide reasoning
How this is scored
What runs the site once it is built: included hosting, custom domains and domain registration, SSL, email mailboxes, speed (CDN, image optimisation), backups and restore, availability commitments — and whether pages, content and media can be exported when the owner moves on.
0 — No hosting; the product produces a design or files and the owner finds a host.
3 — Hosting on a subdomain with a custom domain on paid plans, but SSL, backups, storage limits and export are not described.
5 — Hosting included with a custom domain (or one included for a first year), free SSL, stated storage or bandwidth, a CDN or speed optimisation, automatic backups or a restore function, and an export of at least blog posts or content.
8 — Hosting described in depth: data-centre locations named, a stated uptime commitment, versioned backups with self-service restore, email mailboxes on the own domain, performance figures or Core Web Vitals addressed, and a documented export of pages, content and media.
10 — Hosting the owner can rely on and leave: an uptime SLA with credits, the hosting region selectable, DDoS and security measures named, a complete site export (code or standard formats) documented step by step, and domains transferable without fees or lock-in.
The Small-Business Owner
The site is hosted on the vendor's own servers with the Copenhagen data centre named, free SSL, DDoS protection, daily backup and restore, mailboxes on my own domain and stated SSD storage. I found no public information on exporting my pages or media when I move on — only that website data is usually deleted seven days after the subscription ends. 1 2 6 7
The Freelance Web Designer
Hosting runs on servers in Europe — Denmark, with the Copenhagen data centre named in the data processing agreement — with a free first-year domain, SSL, DDoS protection, unlimited traffic under fair use, mailboxes on the own domain, unlimited subdomains, and backups with restore (a 14-day add-on on webhosting, daily backup and restore on higher tiers, self-service restore on the VPS line). Data is deleted seven days after a subscription ends and domain transfers in and out are explained including the ICANN 60-day lock, but I found no public information on exporting pages, content or media out of the builder, which is exactly what I need when a client moves on; the 99.99% availability figure is documented only for the VPS products. 1 2 4 6 7 11
The Marketing Lead
Hosting is described with named locations — servers in Denmark, processing pinned to the Copenhagen data centre — plus free SSL, DDoS protection, WAF and DNSSEC, stated SSD storage, mailboxes on the own domain, daily backup with restore on higher tiers, and domain transfers documented with timing and zero-downtime steps. We found no public information on exporting pages, content or media, the terms state website data is normally deleted seven days after the subscription ends, and the 99.99% availability figure we saw is stated for the VPS product line rather than the builder. 1 2 4 6 7 10 11
The Practice Owner
Sites run on servers in Europe — Denmark is named, and the data processing agreement fixes processing to the Copenhagen data centre — with a free domain in the first year for selected endings, free SSL, DDoS protection and mailboxes on my own domain; domain transfers in and out with timelines are also described. But a documented export of the site's pages and content is something I found no public information on, and the terms state website and mail data are usually deleted seven days after the subscription ends — so leaving is not made easy. 1 4 7 6 11 2
The Data Protection Officer
Hosting is named rather than implied: servers in Denmark, processing contractually fixed to the Copenhagen data centre, free SSL, DDoS protection, WAF and DNSSEC, daily backups with restore, and mailboxes on the own domain, plus documented domain transfers with zero downtime. We found no public information on exporting pages, content or media when the owner moves on, and no uptime commitment with credits for the website-builder hosting itself. 1 2 4 7 10 11
The Skeptic
Hosting on European servers with a named Copenhagen data centre, free SSL, DDoS protection, stated SSD storage, unlimited traffic under fair use, mailboxes on the own domain and daily backup with restore are all documented. What leaving costs is the question the pages never answer: we found no public information on exporting pages, content or media, while the terms state that website and mail data are normally deleted seven days after the subscription ends, after twelve months prepaid with no refund. 1 2 6 7 11
SEO, analytics & visibility
panel disagrees
Show reasoningHide reasoning
How this is scored
How the site is found and measured: page titles and descriptions, clean URLs and redirects, sitemaps and indexing, structured data, local SEO, page speed for search, built-in or connectable analytics, newsletter or social sharing, and guidance for the owner who is not an SEO.
0 — No search settings at all; pages cannot be given titles or descriptions.
3 — Page titles and descriptions can be edited, but sitemaps, redirects, analytics and indexing control are not described.
5 — Editable titles, descriptions and URLs, an automatic sitemap, 301 redirects, social sharing previews, built-in visitor statistics or a documented connection to an analytics tool, and SEO guidance or a checklist inside the product.
8 — SEO documented in depth: structured data, canonical and noindex control, robots.txt editing, image alt texts and compression, local business listings or a Google Business connection, multilingual SEO with hreflang, and privacy-friendly analytics without third-party cookies.
10 — Visibility as a strength: full technical SEO control including server-side rendering and speed figures, AI search or answer-engine readiness addressed, search data shown inside the editor, marketing tools (newsletter, campaigns, A/B tests) built in, and every setting explained in the help centre.
The Small-Business Owner
The AI writes content that search engines and AI searches understand, can be prompted to review my homepage for SEO, and there is a paid expert SEO service plus a marketgoo add-on. We found no public information on sitemaps, redirects, editable page titles, built-in visitor statistics or help with local search — the thing that matters most to a workshop wanting to be found nearby. 1 2 8 12 15
The Freelance Web Designer
What is documented is AI content written so search engines and AI searches understand it, prompts such as "Review my homepage and improve it for SEO", a marketgoo SEO add-on, Rank Math on the WordPress side, help-centre guidance on SEO metadata, and a paid expert SEO service. I found no public information on editing page titles and descriptions in the builder, sitemaps, redirects, structured data, indexing control or built-in visitor statistics. 1 2 8 12 13 15
The Marketing Lead
The documented visibility story is AI-written content that search engines and AI searches understand, prompts like "Review my homepage and improve it for SEO", Academy articles recommending external keyword tools, and add-on or paid help (marketgoo, Rank Math on the WordPress path, an expert consultation). We found no public information on editable page titles and clean URLs, redirects, sitemaps, structured data or built-in visitor statistics for sites built with Aida — for a firm whose enquiries come through landing pages, that is the technical layer left undescribed. 1 2 8 12 13 15
The Practice Owner
The AI writes content that search engines and AI searches understand, can be prompted to review and improve the homepage for SEO, and there is guidance plus a marketgoo add-on and an expert SEO service. Beyond that, I found no public information on editable page titles and descriptions, sitemaps, redirects or visitor statistics for sites built with it. 1 15 8 12 2
The Data Protection Officer
The builder's visibility story rests on AI content written for search engines and AI search plus prompts to review and improve the homepage, with guidance articles recommending external tools and paid SEO help, and Rank Math with meta tags and SEO tests offered for WordPress installs. We found no public information on sitemaps, redirects, editable page titles and descriptions, or visitor statistics inside the website builder itself. 1 2 8 12 13 15
The Skeptic
The documented story is AI-written content that "Suchmaschinen und KI-Suchen verstehen", prompts to review a homepage for SEO, a marketgoo add-on and Rank Math on the WordPress line, plus academy articles naming external tools. Sitemaps, redirects, editable titles and descriptions, indexing control and built-in visitor statistics for the builder itself are not described anywhere we read. 1 2 9 13
Forms, bookings & business features
panel disagrees
Show reasoningHide reasoning
How this is scored
What the site does for the business beyond showing pages: contact and custom forms with spam protection and notifications, where form entries are stored, appointment bookings, member areas, events, integrations with CRM or calendar, payments and a small shop as an add-on — judged as features of a website, not as a shop system.
0 — No forms and no interactive features; the site shows pages only.
3 — A contact form that sends an email, with spam protection, storage of entries and further business features not described.
5 — Custom forms with several field types, spam protection and email notifications, entries stored or exportable, and at least one further business feature (bookings, member area, events or a small shop) described.
8 — Business features documented in depth: forms with conditional fields, file uploads and confirmation emails, appointment booking with calendar sync, member areas or gated pages, payments, integrations with named CRM, newsletter or automation tools, and an app or extension marketplace.
10 — The site runs a small business: forms, bookings, payments, invoices or memberships work together with consent and data retention settings per form, an API or webhooks for form data, and a documented integration ecosystem — while the shop stays one feature among several.
The Small-Business Owner
Bookings are properly worked out — up to 25 appointments a month on the Booking plan, day/week/list calendar views, confirmation and cancellation emails, customer rescheduling and sync to Google Calendar or Outlook — and the Commerce plan adds unlimited products, 10+ payment methods and 0% commission. Forms appear only as a lead-capture form I can ask the AI to add; we found no public information on field types, spam protection or where entries are stored. 1 2 8 14 15
The Freelance Web Designer
Bookings are documented in depth — day, week and list calendar views, custom booking and cancellation rules, customer self-rescheduling with a configurable cutoff, group events with capacity, confirmation and cancellation emails, and sync to Google Calendar or Outlook — and the Commerce plan adds unlimited products, more than 10 payment methods processed via Stripe, custom shipping, order management and 0% commission. Forms themselves are thin: a lead capture form can be prompted in, but I found no public information on field types, spam protection, entry storage or conditional fields, nor on member areas. 1 6 8 9 14 15
The Marketing Lead
Bookings are documented in depth — custom booking and cancellation rules, customer rescheduling with a configurable cutoff, group and event capacity, confirmation and cancellation emails, business hours, and sync to Google Calendar or Outlook — and the shop side covers unlimited products with variants, ten-plus payment methods at zero commission, VAT handling and order management, with payments processed via Stripe through Shore Pay. Forms themselves appear only as an AI prompt to add a lead capture form and a newsletter sign-up; we found no public information on field types, spam protection, where entries are stored, or connections to a CRM, which is where our enquiries would need to land. 1 2 6 8 14 15
The Practice Owner
This is the strong part for my practice: online bookings are built into the builder, with day/week/list calendar views, confirmation and cancellation emails, rules for when patients can book or cancel, self-service rescheduling with a cutoff, business hours and holiday blocking, group capacity, and automatic sync to Google Calendar or Outlook; payments, a shop and named add-ons like Ubivox newsletter marketing are also there. The gap: I found no public information on spam protection, storage or notifications for the contact and lead capture forms, which is exactly where my patients' details sit. 1 14 15 8 2 6
The Data Protection Officer
Bookings are worked out in earnest — monthly limits, day, week and list calendar views, booking and cancellation rules, customer rescheduling with a cutoff, capacity and group events, confirmation and cancellation emails, and sync to Google Calendar or Outlook — and a shop with unlimited products, 10+ payment methods, 0% commission and VAT handling sits alongside. Forms appear only as a lead-capture form the AI can add; we found no public information on field types, spam protection, notifications, or where entries are stored and for how long they are kept. 1 2 6 9 14 15
The Skeptic
Bookings are genuinely worked out — booking and cancellation rules, customer rescheduling with a cutoff, group capacity, Google and Outlook sync, confirmation emails, 25 appointments a month on Booking, unlimited on Commerce — and the shop adds unlimited products, ten-plus payment methods, 0% commission and VAT handling via Stripe. Forms themselves get one sentence about a lead-capture form the AI can add; spam protection, field types, storage of entries and where the data lands are not described. 2 6 9 14 15
Imprint, privacy & cookie compliance
panel disagrees
Show reasoningHide reasoning
How this is scored
What the product does so that the owner's site is legal in Germany and the EU: an imprint page, privacy-policy and legal-text generators or partners, a cookie consent banner that blocks scripts until consent, GDPR-compliant forms, a data processing agreement for visitor data, fonts and media served without third-country transfers, and accessibility under the European Accessibility Act.
0 — Nothing for the site's legal obligations; the owner is left to add every legal page and banner from outside.
3 — Pages for an imprint and privacy policy can be added by hand, and a simple cookie notice exists, but consent blocking, a data processing agreement and form data handling are not described.
5 — A cookie consent banner, a data processing agreement offered to customers, documented GDPR handling of form entries, and help for imprint and privacy pages (templates, a generator, a named legal-text partner or a help article).
8 — Compliance worked out for EU sites: a consent banner that blocks scripts and embeds until consent and logs it, legal texts kept current by a named provider or a warranty against cease-and-desist letters, fonts and maps served without US transfer, and accessibility features or an accessibility statement.
10 — Compliance as part of the product: consent management with granular categories and records, legal texts maintained for several EU countries, every embed and script assessed for consent, accessibility to WCAG 2.1 AA documented with tooling, and the vendor's share of liability stated in its terms.
The Small-Business Owner
Every AI-built site ships with an integrated consent banner, a data processing agreement is published, and the Termly add-on generates privacy and cookie policies with weekly cookie scans, an automatic cookie script blocker and auto-updated texts covering the GDPR and the EU Cookie Law. Termly is a paid add-on, and we found no public information on generating a German imprint, on consent logging or on accessibility. 1 3 6 16 17
The Freelance Web Designer
Every site built with the AI includes an integrated consent banner, a data processing agreement is published, and the Termly add-on generates and auto-updates legal policies with a cookie scanner, an automatic cookie script blocker and Google Consent Mode v2, covering more than 25 privacy laws in over 150 countries. I found no public information on consent logging, accessibility under the European Accessibility Act, or a German imprint generator specifically, and the full consent platform is a separately priced add-on rather than part of every plan. 1 3 6 16 17
The Marketing Lead
Every site built with Aida ships with an integrated consent banner, a published data processing agreement governs customer data, and the Termly add-on contributes a script-blocking cookie banner with weekly scans, auto-updated legal texts covering more than twenty-five privacy laws, and Google Consent Mode v2. We found no public information on consent logging, accessibility features or an accessibility statement, and the deep compliance tooling sits in a separately priced add-on rather than in the builder plans. 1 3 6 7 16
The Practice Owner
Every AI-built site ships with an integrated consent banner, a data processing agreement is published, and the Termly add-on adds weekly cookie scans, automatic cookie script blocking and Google Consent Mode v2 — at an extra subscription price. For the regulator-proofing I want, I found no public information on consent logging, GDPR handling of form entries, an imprint generator, fonts or maps without US transfer, or any accessibility statement. 1 3 16 6 7
The Data Protection Officer
Every Aida-built site ships with an integrated consent banner, a data processing agreement is published and fileable, and the Termly add-on adds a cookie script blocker, weekly scans, Google Consent Mode v2 and auto-updated policies covering GDPR and the EU Cookie Law. The blocking function sits in a paid add-on rather than the base banner, and we found no public information on consent logging, an imprint generator, fonts and maps served without US transfer, GDPR handling of form entries, or accessibility under the European Accessibility Act. 1 3 4 6 16
The Skeptic
Every Aida site ships with an integrated consent banner, a data processing agreement is published, and Termly — a separately priced add-on — generates and auto-updates policies, scans cookies weekly and blocks cookie scripts with Consent Mode v2. GDPR handling of form entries is not described, and we found no public information on consent logging, accessibility, or a generator for a German imprint. 1 3 6 17
European sovereignty
panel opinion
panel disagrees
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where the sites, the form entries and the visitor data are hosted, and who the subprocessors are (hosting, CDN, email delivery, analytics, payments, AI features). Independently sourced by the sovereignty pipeline; the data subjects here are the owner's own visitors and customers, so the whole chain counts, not only the editor.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU hosting available or an EU contracting entity, a data processing agreement offered, but parts of the chain (CDN, email, analytics, AI features, support) run through non-EU providers or the subprocessors are listed without locations.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, data export and deletion documented, and certifications published with their scope rather than implied.
The Small-Business Owner
I would contract with one.com Group AB in Malmö and my site would be processed in the Copenhagen data centre, with a published data processing agreement, standard contractual clauses and subprocessors listed with their locations. Those lists name US providers — AWS with US and German locations, Termly Inc. and Google Inc. — and the privacy policy describes transfers to the USA, India and the UAE; we found no public information on ISO 27001 or SOC 2 certifications. 4 6 7
The Freelance Web Designer
The contracting party is one.com Group AB in Malmö, Sweden, sites are hosted in Europe with servers in Denmark and the Copenhagen data centre named in the data processing agreement, and that agreement lists subprocessors in an annex — including AWS with US and Germany locations plus Termly Inc. and Google Inc. in the US — with 2021 standard contractual clauses published. The privacy policy also describes transfers to the USA, India and the UAE for some functions, and I found no public information on the parent company or security certifications such as ISO 27001 or SOC 2. 1 4 6 7
The Marketing Lead
The contracting entity is one.com Group AB in Malmö with Danish law and courts, sites are hosted in Europe with servers in Denmark and processing pinned to the Copenhagen data centre, and a published data processing agreement with 2021 standard contractual clauses, audit rights and 48-hour breach notice covers the chain. The sub-processor annex lists AWS with location US/DE plus Termly Inc. and Google in the US, and the privacy policy documents transfers to the United States, India and the UAE; we found no public information on security certifications such as ISO 27001 or SOC 2. 1 4 6 7
The Practice Owner
The contracting entity is One.com Group AB in Malmö, sites run on servers in Denmark, and the data processing agreement fixes processing to the Copenhagen data centre plus listed subprocessor locations, with standard contractual clauses for the rest. But the subprocessor annex includes AWS with US/DE locations plus Termly Inc. and Google Inc. of the US, and the privacy policy says data may be transferred to the USA, India and the UAE; I found no public information on the ownership structure or certifications such as ISO 27001. 6 4 7 1
The Data Protection Officer
The contracting entity is One.com Group AB in Malmö with Danish courts agreed, servers sit in Denmark, and the data processing agreement fixes processing to the Copenhagen data centre and an annex of subprocessors with locations, backed by audit rights and 48-hour breach notification. The chain is not European end to end: AWS is listed with locations US/DE, Google and Termly are US companies, the privacy policy names transfers to the USA, India and the UAE, and we found no public information on security certifications or the ownership of the group. 4 6 7
The Skeptic
The contracting party is one.com Group AB in Malmö, hosting runs on Danish servers in Copenhagen, and a data processing agreement with a subprocessor annex is published — a European chain on paper. The annex names US providers (AWS with locations given as US/DE, Termly Inc., Google Inc.) and the privacy policy declares transfers to the USA, India and the UAE; we found no public information on ISO 27001 or SOC 2 certification. 4 6 7
Pricing transparency
panel disagrees
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real cost over two or three years from public pages alone: the monthly price per plan, the introductory price and how long it lasts, the renewal price after it, setup fees, minimum term and notice, domain and mailbox renewals, transaction fees on sales, and which features (ad removal, extra languages, bookings, more storage) cost extra.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free plan is shown, but what the plans include, what they cost after the first term or how the cost scales is unclear.
5 — Plans are public with prices and their main inclusions, but at least one commonly needed piece (the price after an introductory offer, domain renewal, a mailbox, transaction fees, an add-on) is unpriced or hard to find.
8 — Every plan priced publicly with the introductory price, its duration and the regular price after it, setup fee, minimum term and notice period, domain and add-on prices listed, and VAT treatment stated.
10 — Complete price computability: the cost of a given site over several years derivable from public pages, with every add-on, renewal, transaction and support fee, the cancellation terms and what happens to the site and domain after cancellation published.
The Small-Business Owner
Every plan shows the promotional monthly price, the first-year total and the full renewal price — Booking at €5,99/mtl, €71,88 now and €240 on renewal — alongside domain prices after the first year, add-on prices, a 12-month term with 30-day notice, non-refundable prepayment and what happens to the data after cancellation. The captured pages give different VAT figures (19% and 0%), and we found no public information on setup fees. 1 2 6 11
The Freelance Web Designer
Plans are published with the promotional monthly price, the first-year total and the regular renewal price (for example the Booking plan at "€ 20,-/mtl. Du sparst 70% € 5,99/mtl. 1-Jahres-Abo Zahle jetzt € 71,88, danach € 240,- bei der Verlängerung"), alongside the 12-month term, 30-day cancellation notice, non-refundable prepayment, 60-day downgrade notice, domain prices with first-year and renewal figures, add-on prices, VAT treatment, no card fees, and late and collection fees. I found no public information on a setup fee, a few add-ons are named without prices, and the captured pages give different figures for VAT (19% and 0%) on different versions. 1 2 6 10 11
The Marketing Lead
A two- or three-year cost is computable from public pages: every plan shows the introductory monthly price, the one-year term, the exact first payment and the full renewal total, alongside domain first-year and renewal prices, add-on pricing, twelve-month prepayment, thirty-day cancellation notice, sixty-day downgrade notice, the fifteen-day money-back guarantee and zero per cent commission on sales. Small gaps remain — the AI quota reset is a "small fee" without a figure, and the captured pages give different figures for included VAT (19% on German pages, 0% on another), so a buyer must check the page for their market. 1 2 6 10 13 15
The Practice Owner
I can compute a two-year cost from public pages: each plan shows the promotional monthly price, the one-year term, the payment now and the renewal total — the Booking plan is stated as €5.99/month promotional, pay €71.88 now, then €240 on renewal — with first-year and renewal prices per domain ending, a 15-day money-back guarantee, 30-day notice and prices stated to include 19% VAT. Small gaps keep it from the top: resetting the AI quota is only priced as a small fee, some add-ons carry no price, and the captured pages give different VAT figures (19% versus 0%). 1 6 10 14 2
The Data Protection Officer
Plans are published with the introductory price, its one-year duration and the exact renewal amount, alongside twelve-month prepayment, 30-day notice, 15-day money-back, first-year and renewal prices for many domain endings, 0% commission on sales, and VAT stated as included. The captured pages give different figures for VAT treatment (19 percent on some, 0 percent on another), several add-ons such as marketgoo and WP Rocket appear without prices, and the AI quota reset is only described as a small fee, so the full multi-year cost is not fully computable. 1 2 3 6 10 11 15
The Skeptic
This is what I always ask for and rarely get: every plan shows the introductory monthly price, the one-year term, the payment today and the renewal total ("Zahle jetzt € 71,88, danach € 240,-"), domains list first year and renewal, and the terms cover 12-month prepayment, 30-day notice, non-refundable prepayment, late fees and the 15-day money-back. Falling short of full computability: we found no public prices for several listed add-ons (marketgoo, SiteLock, Rank Math PRO), and the captured pages give different figures for VAT (19% on the German terms, 0% on a US page). 1 2 6 10 11
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about one.com Website Builder
Is one.com Website Builder European?
Yes. whats-best.ai classifies one.com Website Builder as EU-Made.
Where does one.com Website Builder store data?
Not stated on the vendor’s pages as of 28 Oct 2026.
Does one.com Website Builder have a free plan?
Not stated on the vendor’s pages as of 28 Oct 2026.
What are the best alternatives to one.com Website Builder?
As of 4 Nov 2026, the panel rates Duda (3.5/5), Wix (3.5/5) and WordPress.com (3.5/5) highest among the other 17 Website Builders products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Framer (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: one.com Website Builder alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 28 Oct 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement, Hosting location, Legal entity. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 17 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 7 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 7 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 4 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 integrations fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (17)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage www.one.com Checked 28 Oct 2026 Details →
- 2 Pricing page www.one.com Checked 28 Oct 2026 Details →
- 3 Cookie consent and legal-text add-on www.one.com Checked 28 Oct 2026 Details →
- 4 Privacy policy www.one.com Checked 28 Oct 2026 Details →
- 5 Legal notice www.one.com Checked 28 Oct 2026 Details →
- 6 Terms of service www.one.com Checked 28 Oct 2026 Details →
- 7 Data processing agreement (dpa) www.one.com Checked 28 Oct 2026 Details →
- 8 Editor, templates & design control — found from sitemap www.one.com Checked 28 Oct 2026 Details →
- 9 Editor, templates & design control — found from sitemap www.one.com Checked 28 Oct 2026 Details →
- 10 Hosting, domains & portability — found from sitemap www.one.com Checked 28 Oct 2026 Details →
- 11 Hosting, domains & portability — found from sitemap www.one.com Checked 28 Oct 2026 Details →
- 12 SEO, analytics & visibility — found from sitemap www.one.com Checked 28 Oct 2026 Details →
- 13 SEO, analytics & visibility — found from sitemap www.one.com Checked 28 Oct 2026 Details →
- 14 Forms, bookings & business features — found from sitemap www.one.com Checked 28 Oct 2026 Details →
- 15 Forms, bookings & business features — found from sitemap www.one.com Checked 28 Oct 2026 Details →
- 16 Imprint, privacy & cookie compliance — found from sitemap www.one.com Checked 28 Oct 2026 Details →
- 17 Imprint, privacy & cookie compliance — found from sitemap www.one.com Checked 28 Oct 2026 Details →