Lire en français
A Sovereign European Alternative for Your Business Password Manager
Zero-knowledge encryption, European hosting, European jurisdiction. And a migration that takes an afternoon.
Why companies look for a European alternative
A password manager holds the keys to everything else: email, banking, cloud consoles, customer systems. More and more European companies want that tool to be governed by European law from end to end: the company that builds it, the servers that host it, and the contracts behind it. Some are driven by NIS2 supply-chain requirements, some by public-sector or client procurement rules, some by concerns about extraterritorial laws such as the CLOUD Act.
Heimlane Vault is built for that choice: a French company, infrastructure exclusively in France and Germany, and zero-knowledge encryption, so the vault content stays unreadable to us in any case.
Who makes the switch
The reasons differ, the requirement is the same: keep credentials secure, and keep them in Europe.
Companies preparing for NIS2
Article 21 asks for access control, MFA and supplier security. A password manager under European jurisdiction simplifies the supply-chain part of the story.
Public sector and regulated activities
Procurement rules and client contracts increasingly ask where data is hosted and which law applies to the provider.
MSPs standardizing their stack
Managed service providers who want one sovereign password manager they can deploy and support across all their customers.
Teams that want predictable costs
Public prices in euros, no sales call required, and a free plan to start.
What to look for in an alternative
A practical checklist, whichever tool you end up choosing.
True zero-knowledge encryption
Encryption and decryption must happen on your devices only. The provider should be technically unable to read or recover your vault.
European company, European hosting
Check both where the servers are and where the company is incorporated: hosting in the EU is not enough if the provider answers to another jurisdiction.
Real team features
Shared vaults with roles and policies, per-member permissions, an audit log, and clean offboarding when someone leaves.
A painless migration path
Imports from the common export formats, and a way to handle the exports that no importer recognizes.
Every device your team uses
Web vault, browser extensions, desktop and mobile apps, with autofill and built-in two-factor codes.
Transparent pricing
Published prices per user, per month, so you can budget before you talk to anyone.
How Heimlane Vault answers it
Everything on the checklist, from the free plan to the Business plan.
Heimlane Vault
Zero-knowledge business password manager, hosted in France and Germany
- Client-side encryption: AES-256, RSA-2048, Argon2id key derivation
- Shared vaults with roles, groups, policies and audit log
- Emergency Access, FIDO2 security keys, breach checks
- Web vault, iOS and Android apps, desktop apps and browser extensions
Switching in practice
Import, check, roll out
- Import JSON, CSV, KDBX or XML exports from your current tool or browser
- Custom CSV import with column mapping and a live preview
- Duplicate detection after import (merging from Premium)
- Deployed and supported by a Heimlane partner, or self-service for small teams
Frequently Asked Questions
Is Heimlane Vault a European password manager?
Yes. Heimlane is a French company headquartered in Paris, and Vault runs exclusively on European infrastructure: two cloud providers and three datacenters, OVH in Gravelines and Strasbourg (France) and Hetzner in Nuremberg (Germany). No vault data leaves the European Union.
Can Heimlane read our passwords?
No. Vault uses zero-knowledge encryption: your data is encrypted on your device before it is sent, with keys derived from your master password. Heimlane stores only encrypted data and cannot read or recover it.
How do we switch from Dashlane, 1Password, LastPass or Bitwarden?
Export your data from your current password manager or browser, then import the file into Vault. Exports from 1Password, LastPass, Bitwarden, KeePass and the major browsers are supported directly, and for any other manager, such as Dashlane, a custom CSV import lets you map the columns yourself. Teams already on the Bitwarden apps can keep them: they work with Vault. Items are encrypted on your device during the import.
Do our users need to learn new apps?
No steep learning curve: Vault comes with a web vault, apps for iOS and Android, desktop apps and browser extensions for Chrome, Edge and Firefox, with autofill and built-in two-factor codes on every platform.
How much does it cost?
Personal use starts with a free plan. Business plans are sold through partners, with a public MSRP starting at €3.50 per user per month (Teams, annual billing) on the pricing page. MSP partners buy well below MSRP at volume-based partner pricing, and your partner sets your final price.
Try the European alternative
Start free, or ask for a demo and a quote through our partner network.