Nozbe
Polish task and project management SaaS with task-based communication, multi-workspace separation, offline apps, and vendor-hosted EU primary infrastructure.
Shortlist Nozbe when a small remote or hybrid team wants a simple Polish SaaS for GTD-style projects, tasks, and comments—with German primary hosting and a public B2B DPA. Skip when you need self-hosting, published ISO/SOC attestation, enterprise portfolio PM, or a path free of US-group cloud/SaaS subprocessors; consider Nextcloud (self-host) or a chat-first peer such as Fleep instead.
Key capabilities
Work is organized as projects containing tasks; discussion, checklists, @mentions, reactions, attachments, and task links live on the task so context does not scatter across email or chat. Suited to teams that want asynchronous ownership without a heavy workflow engine.
Create separate spaces for a company, department, or personal life under one account. Free plan starts with one free space; Premium adds capacity; Business is positioned for unlimited workspaces when you run several teams or businesses.
Each user can forward mail to a personal Nozbe address to turn messages and attachments into tasks. Recurring workflows (onboarding, reports, orders) can be saved as project templates and re-instantiated instead of rebuilding checklists by hand.
Dedicated clients for Windows, Mac, iOS, and Android plus the web app at nozbe.app; About also lists Linux. Apps sync with servers in Germany and are marketed as usable offline for hybrid and mobile work.
Invite-only projects (Premium) restrict visibility inside a space; joint projects let you collaborate with other Nozbe spaces (clients, subcontractors) without migrating everyone onto one workspace. Complements space-level multi-tenant style separation.
Premium-oriented features include Create using AI (describe a project or import CSV to generate tasks), time tracking, and richer history/storage limits than Free. Confirm current plan gates on the official feature comparison before procurement.
Best fit when
- Small businesses and service teams that want projects → tasks → comments instead of channel chat or heavy PM suites
- Remote/hybrid groups that need coherent desktop and mobile clients with offline capture
- Buyers who want a Polish legal entity, German primary hosting, and a downloadable Art. 28 DPA
- People who separate work and personal life via multiple workspaces in one product
- Teams that capture actionable email as tasks and reuse project templates for repeat client work
Poor fit when
- Organizations that require self-hosted or fully air-gapped deployment
- Procurement that mandates public ISO 27001 or SOC 2 reports before shortlisting
- Enterprises needing portfolio resource management, complex automations, or deep Kanban/Gantt tooling
- Buyers whose policy forbids US-group cloud providers even for EU-region backups, email, or analytics
- Teams seeking a full Microsoft 365 / Google Workspace replacement (mail, docs, meetings) rather than a task system
Consider instead when
When: You must self-host collaboration data and control subprocessors yourself
Consider: Nextcloud
Broader content collaboration hub; operational ownership shifts to your team.
When: You need Swiss-hosted classic groupware (mail, calendar, contacts) more than task PM
Consider: Kolab Now
Different product shape; not a drop-in Nozbe substitute.
When: Chat-first team messaging with conversation tasks is enough and you prefer Estonia HQ
Consider: Fleep
Messenger-centric; weaker as a full multi-workspace project system.
When: Your org is already standardized on Microsoft collaboration and only needs lightweight tasks
Consider: Microsoft Teams / Microsoft 365 Planner-style workflows
Lower integration friction; different jurisdiction and product philosophy.
- Independent security / no-logs audit·Not found
- ISO 27001·Not found
- SOC 2 / SOC 3·Not found
- GDPR / EU data protection·Vendor claimed
- +3
Considerations & known limitations
- MediumUS-group cloud and SaaS subprocessors
Core tasks run on Hetzner DE, but encrypted backups/files use Amazon S3 and privacy lists Mailgun, Google, Facebook, Stripe/Verifone, and Cloudflare. EU HQ does not eliminate US-group provider exposure for procurement policies that ban those vendors.
- MediumNo public ISO/SOC or independent audit report
Security practices are described by the vendor (encryption, backups, limited staff access, external tests) without published certificates. Enterprise security questionnaires may stall until documents are shared under NDA.
- MediumSaaS-only; no self-host option
Data and availability depend on Nozbe’s multi-tenant service. Air-gapped or customer-controlled deployment is not offered publicly.
- LowNarrow feature surface vs enterprise PM
Deliberately simple projects/tasks/comments model may lack portfolio, advanced automation, or complex permission matrices expected in large PMO tools—confirm fit before migrating from Asana/Jira-class suites.
Open questions for due diligence
- Will the vendor provide a current subprocessor list with legal entities and transfer mechanisms (SCCs) for AWS, Mailgun, Google, and payment providers?
- Are independent penetration-test or ISO/SOC materials available under NDA for enterprise procurement?
- What is the exact production region set today for Ireland vs Germany/France relative to the DPA wording?
- What retention, export formats, and support SLAs apply on Business vs Premium for regulated clients?
- How is optional Nozbe AI implemented (model provider, data used for training, opt-out)?
Frequently Asked Questions
According to Nozbe Terms, Privacy Policy, and security blog: primary application servers run on Hetzner in Germany. Encrypted database backups go to Amazon S3 (Paris; Terms also reference Frankfurt). User-uploaded files are stored encrypted on S3 in Frankfurt. The public DPA states infrastructure on AWS and Hetzner with servers/copies in Germany, Ireland, and France. Cloudflare is used for printing. Treat this as vendor documentation—validate regions in your own DPA/subprocessor review.
Yes. Nozbe publishes a GDPR Art. 28 DPA PDF at nozbe.com/gdpr. Customers download, complete, sign, and return it (support/questions email addresses are listed on that page). Privacy Policy also notes you can request a Personal Data Processing Agreement via support when you regularly enter third-party personal data in the product.
No public self-host or on-prem offering was found. Nozbe is a multi-tenant SaaS synchronized to vendor-operated servers. Buyers who need full infrastructure control should evaluate self-hosted stacks such as Nextcloud rather than Nozbe.
Nozbe’s core loop is task-based communication: comments and files hang on tasks inside projects, not on open channels. It replaces sticky notes, personal to-do apps, and light project tools more than it replaces Microsoft Teams as an org-wide chat/meeting hub or Asana/ClickUp-style portfolio automation. Optional Messages exist, but the product philosophy is fewer meetings and more work captured as tasks.
Freemium SaaS with a Free tier limited to a small number of users and active projects, Premium for unlimited projects/tasks with seat-based billing (monthly or yearly), and Business for unlimited workspaces. Payment processors named in Terms include Verifone, Stripe, and Przelewy24 (plus app-store merchants). Always confirm current limits and terms on nozbe.com—do not rely on third-party price tables.
No public ISO 27001 certificate or SOC 2 report was found on official legal/security pages at research time. Nozbe documents encryption, restricted staff access, backups, and states that security tests are performed internally and by external firms—without publishing those reports. Procurement that requires formal attestation should ask under NDA or shortlist vendors with published certifications.