# Hupper
> The AI Operating System for Regulated European Firms. Plans from €149/mo Core to €12,000/mo Sovereign. EU-hosted (Paris, Frankfurt), GDPR-native, SOC 2 Type II, ISO 27001/27701.
Hupper SA builds vertical operating systems for European regulated firms: fiduciaries, family offices, law firms, clinics, construction firms, and agencies. The platform consolidates CRM, document automation, compliance, billing, reporting, and AI orchestration into a single sovereign substrate. 14 named AI operators handle the operational workload.
## Depth artifacts (start here for engineering + procurement evaluation)
- [Inside the Hupper Architecture: A 7-Layer Sovereign Stack](https://hupper.lu/architecture): 7-layer architecture reference. Kafka event bus, PostgreSQL + pgvector, OPA policy bundles, sector-tuned RAG (BGE-M3 + hybrid retrieval), Temporal operator orchestration. Model assignments and P95 latency budgets per operator.
- [Why Hupper Is Hard to Replicate: Seven Structural Advantages](https://hupper.lu/moat): Defensibility analysis. Seven structural moats with clone-cost decomposition (€42M, 30 months critical path). The five "why not just X" objections handled.
- [Security, Compliance and Data Sovereignty at Hupper](https://hupper.lu/trust): SOC 2 Type II (Mazars LU), ISO 27001:2022 + 27701:2019 (BSI Group), HDS, ANSSI alignment, EU AI Act article-by-article matrix, GDPR DSAR routing with SLAs, sub-processor list (12 entities, all EU), 5 published incidents with post-mortems.
## Vertical operating systems
- [The Operating System for Fiduciaries and Corporate Service Providers](https://hupper.lu/operating-system/fiduciaries): Operating system for Luxembourg fiduciaries and corporate service providers. Multi-entity consolidation, eCDF/FAIA, RBE sync, DAC6 detection. €459/mo Growth.
- [The Operating System for Single and Multi-Family Offices](https://hupper.lu/operating-system/family-offices): Operating system for single-family and multi-family offices. Cross-border consolidation, UBO ledger, investor reporting in IFRS, EU residency.
- [The Operating System for Law Firms and Legal Practices](https://hupper.lu/operating-system/law-firms): Operating system for law firms. Document automation, conflict checks, secret professionnel compliance, matter management, hourly billing — all integrated.
- [The Operating System for Private Clinics and Medical Practices](https://hupper.lu/operating-system/clinics): Operating system for private clinics. Patient intake, no-show recovery, GDPR-native records, HDS-certified hosting. Built for European medical practices.
- [The Operating System for Construction and Engineering Firms](https://hupper.lu/operating-system/construction): Operating system for construction and engineering firms. Subcontractor management, compliance tracking, permits, project consolidation. EU-hosted.
- [The Operating System for Agencies and Professional Services](https://hupper.lu/operating-system/agencies): Operating system for agencies and professional services. Client portals, project tracking, automated reporting, billing across mandates. EU-hosted.
- [The AI Operating System: 14 Operators, One Sovereign Platform](https://hupper.lu/operating-system/ai): The AI operating system for regulated European firms. 14 named AI operators, sector-tuned RAG, EU-hosted inference, GDPR-native by design.
- [EU-Sovereign Software: Your Data Stays in Paris and Frankfurt](https://hupper.lu/operating-system/sovereign): EU-sovereign SaaS. Compute, storage, inference, audit logs — all in Paris and Frankfurt. Schrems II clean. Customer-managed keys on Sovereign tier.
- [The Compliance Operating System for EU-Regulated Industries](https://hupper.lu/operating-system/compliance): Compliance operating system for EU-regulated industries. Continuous GDPR, EU AI Act, AML, sector-specific rules. Audit-ready, sovereign, automated.
## Pillars
- [What a Business Operating System Is — and Why Regulated Firms Need One](https://hupper.lu/operating-system): A business operating system replaces the fragmented stack: CRM, accounting, compliance, AI. Built for EU-regulated firms. Hosted in Paris and Frankfurt.
- [Everything Hupper Replaces: One Platform for Your Whole Firm](https://hupper.lu/features): AI CRM, GDPR-compliant data residency, workflow automation, document automation, AML/KYC, billing, client portals, reporting — all in one EU-hosted platform.
- [Software Built for Your Industry, Not Adapted to It](https://hupper.lu/solutions): Solutions for fiduciaries, family offices, law firms, clinics, construction firms, and agencies. Each operator is sector-tuned, not generic.
- [Meet the 14 AI Operators That Run Your Back Office](https://hupper.lu/ai-operators): Helix, Atlas, Nova, Orion, Prism, Mercury, Oracle, Sentinel, Lumen, Echo, Forge, Vega, Cipher, Helios — 14 autonomous AI operators running your operations.
- [Compliance Automation for GDPR and the EU AI Act](https://hupper.lu/compliance): Continuous compliance automation: GDPR, EU AI Act, DAC6/DAC7, AML/KYC, ISO 27001, SOC 2. Article-by-article AI Act mapping. EU-hosted, audit-ready.
## Features (capabilities)
- [AI CRM for Regulated Firms, Hosted in the EU](https://hupper.lu/features/ai-crm): AI-native CRM built for regulated European firms. Pipeline scoring, automated follow-ups, GDPR-native records, EU residency. €149/mo.
- [GDPR-Compliant CRM with Data Residency in the EU](https://hupper.lu/features/gdpr-crm): GDPR-compliant CRM. Data residency in Paris/Frankfurt, DSAR routing built in, sub-processor list public. Replace US-hosted CRM today.
- [Workflow Automation for Compliance-Heavy Operations](https://hupper.lu/features/workflow-automation): Workflow automation for compliance-heavy operations. AML triggers, document reviews, deadlines, escalations — orchestrated, audited, and observable.
- [Document Automation for Contracts, Filings and Reports](https://hupper.lu/features/document-automation): Document automation for regulated firms. Engagement letters, contracts, court filings, regulatory reports — generated, versioned, audit-trailed.
- [AML and KYC Automation for Regulated Professionals](https://hupper.lu/features/aml-kyc): AML and KYC automation. Continuous screening, transaction monitoring, UBO ledger, reporting workflows. Sector-tuned for fiduciaries, law firms, family offices.
- [Billing and Invoicing Built for Professional Service Firms](https://hupper.lu/features/billing-invoicing): Time-tracking, billing, invoicing, and revenue recognition built for professional service firms. Hourly, fixed-fee, capped, or retainer — supported natively.
- [A Secure Client Portal Your Clients Will Actually Use](https://hupper.lu/features/client-portal): Secure client portal for regulated firms. Document exchange, e-signature, secure messaging, audit trail. EU-hosted, branded to your firm.
- [Consolidated Reporting and Analytics Across Every Mandate](https://hupper.lu/features/reporting-analytics): Consolidated reporting and analytics across every mandate, entity, and currency. IFRS + statutory dual ledger. Real-time dashboards for partners.
- [AI Search and SEO Automation for Service Firms](https://hupper.lu/features/ai-search-optimization): AI search and SEO automation. Helios operator continuously optimises your site for Google AI Overviews, Perplexity, ChatGPT Search.
- [EU Data Residency: Hosted in Paris and Frankfurt, Never the US](https://hupper.lu/features/data-residency): EU data residency. Paris and Frankfurt regions, active-active replication, Schrems II clean. Luxembourg residency on Sovereign tier.
## Software (transactional, buy-intent)
- [Fiduciary Management Software for EU Corporate Service Providers](https://hupper.lu/software/fiduciary-management): Fiduciary management software for EU corporate service providers. Multi-entity consolidation, eCDF/FAIA exports, RBE sync, DAC6 hallmark detection.
- [Family Office Software for Wealth Consolidation and Reporting](https://hupper.lu/software/family-office): Family office software for wealth consolidation and reporting. Multi-currency, multi-jurisdiction, UBO ledger, investor-ready outputs. EU-hosted.
- [Law Firm Management Software with Built-In Compliance](https://hupper.lu/software/law-firm-management): Law firm management software with built-in compliance. Matter management, time tracking, billing, conflict checks, document automation — all integrated.
- [Clinic Management Software That Keeps Patient Data in the EU](https://hupper.lu/software/clinic-management): Clinic management software with HDS-certified hosting. Patient records, scheduling, billing, prescription workflows. Data stays in the EU.
- [Construction Management Software for Regulated Projects](https://hupper.lu/software/construction-management): Construction management software for regulated projects. Subcontractor verification, permit tracking, site compliance, financial consolidation.
- [Agency Management Software for Client, Project and Billing Ops](https://hupper.lu/software/agency-management): Agency management software covering clients, projects, time tracking, and billing operations. Built for European professional service agencies.
- [Compliance Management Software for the EU AI Act and GDPR](https://hupper.lu/software/compliance-management): Compliance management software for the EU AI Act and GDPR. Article-by-article mapping, automated controls, audit-ready reports.
- [All-in-One Practice Management Software for Regulated Firms](https://hupper.lu/software/practice-management): All-in-one practice management software for regulated firms. CRM, matter management, billing, compliance, AI operators — one platform.
## Solutions (industry × problem)
- [Automate AML Compliance for Your Fiduciary Practice](https://hupper.lu/solutions/fiduciary-aml-compliance): AML compliance automation for fiduciaries. Continuous KYC screening, transaction monitoring, UBO ledger, suspicious activity workflows — all audit-trailed.
- [Consolidated Reporting for Family Offices, Without Spreadsheets](https://hupper.lu/solutions/family-office-consolidated-reporting): Consolidated reporting for family offices. Multi-currency, multi-jurisdiction, multi-asset rollups. IFRS + statutory dual ledger. No spreadsheets.
- [Cut Drafting Time with Document Automation for Law Firms](https://hupper.lu/solutions/law-firm-document-automation): Document automation for law firms. Engagement letters, contracts, court filings, NDAs — generated from clause libraries with conflict-check at draft time.
- [Automate Patient Intake and Records for Your Clinic](https://hupper.lu/solutions/clinic-patient-intake): Patient intake automation. Pre-visit forms, GDPR consent capture, identity verification, record creation. HDS-certified, fully audit-trailed.
- [Track Site Compliance and Permits in One Place](https://hupper.lu/solutions/construction-compliance-tracking): Site compliance and permit tracking for construction firms. Subcontractor verification, expiry alerts, document storage, audit-ready records.
- [Automated Client Reporting for Agencies](https://hupper.lu/solutions/agency-client-reporting): Automated client reporting for agencies. Weekly and monthly reports generated from project data, branded per client, delivered without manual rework.
- [Turn GDPR Obligations into Automated Workflows](https://hupper.lu/solutions/regulated-firm-gdpr-workflows): Turn GDPR obligations into automated workflows. DSAR routing, consent capture, retention enforcement, breach notification cascade — all built in.
## Best of (honest comparative reviews)
- [The Best Business Operating Systems in 2026, Compared](https://hupper.lu/best/best-business-operating-system): The best business operating systems in 2026, scored honestly. 11 platforms, 9 criteria, methodology disclosed. Updated quarterly.
- [The Best Fiduciary Software for EU Service Providers](https://hupper.lu/best/best-fiduciary-software): The best fiduciary software for EU corporate service providers in 2026. Honest comparison across 11 platforms. Updated May 2026.
- [The Best Family Office Software for Reporting and Consolidation](https://hupper.lu/best/best-family-office-software): The best family office software for reporting and consolidation in 2026. Scored across 9 criteria including multi-currency, IFRS, EU residency.
- [The Best Law Firm Software for European Practices](https://hupper.lu/best/best-law-firm-software): The best law firm software for European practices in 2026. Honest comparison: secret professionnel, document automation, conflict checks, EU residency.
- [The Best Practice Management Software for Regulated Firms](https://hupper.lu/best/best-practice-management-software): The best practice management software for regulated firms in 2026. Multi-entity, compliance, EU residency, AI operators — all scored.
- [The Best Compliance Software for GDPR and the EU AI Act](https://hupper.lu/best/best-compliance-software): The best compliance software for GDPR and the EU AI Act in 2026. Article-by-article coverage, continuous monitoring, audit-ready outputs.
- [The Best GDPR-Compliant CRMs Hosted in the EU](https://hupper.lu/best/best-gdpr-crm): The best GDPR-compliant CRMs hosted in the EU. Data residency, DSAR routing, sub-processor lists, Schrems II compliance — all scored honestly.
## AI operators (14 named operators)
- [Helix — The Orchestration Operator](https://hupper.lu/ai-operators/helix): Helix is the orchestration operator. Coordinates the other 13 AI operators, manages workflow handoffs, and ensures end-to-end traceability.
- [Atlas — The Knowledge and RAG Operator](https://hupper.lu/ai-operators/atlas): Atlas is the knowledge and RAG operator. Sector-tuned retrieval across 12.4M regulatory documents, with citations and provenance built in.
- [Nova — The Communications Operator](https://hupper.lu/ai-operators/nova): Nova is the communications operator. Drafts client-facing emails, letters, and notifications with brand voice consistency and approval workflows.
- [Orion — The Document Intelligence Operator](https://hupper.lu/ai-operators/orion): Orion is the document intelligence operator. OCR, classification, extraction, and routing for incoming documents. 99.4% classification accuracy.
- [Prism — The Reputation Operator](https://hupper.lu/ai-operators/prism): Prism is the reputation operator. Reviews monitoring, brand mentions across the web, sentiment analysis, response drafting.
- [Mercury — The Pipeline Operator](https://hupper.lu/ai-operators/mercury): Mercury is the pipeline operator. Pipeline orchestration, follow-up sequencing, lead scoring, opportunity health monitoring.
- [Oracle — The Predictive Intelligence Operator](https://hupper.lu/ai-operators/oracle): Oracle is the predictive intelligence operator. Forecasting, anomaly detection, trend analysis across operational data.
- [Sentinel — The Compliance and Risk Operator](https://hupper.lu/ai-operators/sentinel): Sentinel is the compliance and risk operator. Anomaly detection, fraud signals, control failure detection, audit trail enforcement.
- [Lumen — The Regulatory Reporting Operator](https://hupper.lu/ai-operators/lumen): Lumen is the regulatory reporting operator. DAC6 hallmark detection, DAC7 reporting, CbCR, GDPR DSAR routing — all article-by-article.
- [Echo — The Client Engagement Operator](https://hupper.lu/ai-operators/echo): Echo is the client engagement operator. Patient/client communications, appointment reminders, no-show recovery, follow-up sequencing.
- [Forge — The Document Generation Operator](https://hupper.lu/ai-operators/forge): Forge is the document generation operator. Contracts, engagement letters, court filings, NDAs — assembled from versioned clause libraries.
- [Vega — The Insights Operator](https://hupper.lu/ai-operators/vega): Vega is the insights operator. Dashboards, narrative reporting, executive briefings, KPI surfacing across operational data.
- [Cipher — The Security Operations Operator](https://hupper.lu/ai-operators/cipher): Cipher is the security operations operator. Conflict checks, access control, audit trail enforcement, secret professionnel compliance.
- [Helios — The SEO and AEO Operator](https://hupper.lu/ai-operators/helios): Helios is the SEO and AEO operator. Content drafting, structured publishing, Google AI Overviews optimisation, Perplexity citation magnets.
## Why / JTBD (problem-first explainers)
- [Drowning in SaaS Tools? Here's How to Consolidate](https://hupper.lu/why/saas-sprawl): SaaS sprawl is killing your firm. Here is how to consolidate disconnected tools into a single operating system without re-platforming overnight.
- [When Your Systems Don't Talk: The Cost of a Fragmented Stack](https://hupper.lu/why/disconnected-systems): The hidden cost of a fragmented stack: duplicated data, manual reconciliation, compliance gaps. Calculate the cost — and the consolidation path.
- [Why US SaaS Is a GDPR Risk for European Firms](https://hupper.lu/why/gdpr-risk-us-saas): Why US-hosted SaaS is a GDPR risk for European firms. Schrems II, FISA Section 702, sub-processor exposure — and the EU-sovereign alternative.
- [Stop Doing Compliance by Hand: Automate the Obligations](https://hupper.lu/why/manual-compliance): Manual compliance is slow, error-prone, and expensive. Automate the obligations: AML, DAC6, GDPR, AI Act. Continuous, audit-trailed, sovereign.
- [Replace a Dozen Subscriptions with One Platform](https://hupper.lu/why/reduce-saas-costs): Replace a dozen disconnected subscriptions with one operating system. Typical consolidation saves €80-180K per year for a 25-person regulated firm.
- [Is Your Firm Ready for the EU AI Act? A Practical Checklist](https://hupper.lu/why/ai-act-readiness): EU AI Act readiness for European firms. Article-by-article checklist, classification rules, obligations by entity type, timeline to compliance.
## Glossary (definitions, citation-ready)
- [What Is a Business Operating System?](https://hupper.lu/glossary/business-operating-system): A business operating system is a unified platform replacing the fragmented stack (CRM, accounting, compliance, AI). Definition, examples, and references.
- [What Is an AI Operator?](https://hupper.lu/glossary/ai-operator): An AI operator is an autonomous AI agent running a specific function in an operating system — orchestration, document generation, compliance, etc.
- [What Is a System of Record?](https://hupper.lu/glossary/system-of-record): A system of record is the authoritative data source for a given entity or process. Definition, examples in regulated firms, and references.
- [What Is Data Sovereignty?](https://hupper.lu/glossary/data-sovereignty): Data sovereignty is the principle that data is subject to the laws of the country where it is stored. Implications for EU firms using US SaaS.
- [What Is the EU AI Act?](https://hupper.lu/glossary/eu-ai-act): The EU AI Act is Regulation (EU) 2024/1689 governing AI systems in the EU. Risk classification, obligations, timeline, and what regulated firms need to do.
- [What Is the GDPR?](https://hupper.lu/glossary/gdpr): The GDPR (General Data Protection Regulation) is the EU regulation governing personal data processing. Scope, rights, obligations, penalties.
- [What Is DAC6?](https://hupper.lu/glossary/dac6): DAC6 (Directive 2018/822) is the EU directive requiring intermediaries to report cross-border tax arrangements with hallmarks of aggressive planning.
- [What Is a SOPARFI?](https://hupper.lu/glossary/soparfi): SOPARFI (Société de Participations Financières) is a Luxembourg holding-company regime for international participation management. Definition and examples.
## Tools (calculators, assessments)
- [Calculate Your ROI from Consolidating Your Software Stack](https://hupper.lu/tools/roi-calculator): Calculate your ROI from consolidating disconnected software into Hupper. Real subscription costs, time savings, compliance cost reductions.
- [How Much Are Your Disconnected SaaS Tools Costing You?](https://hupper.lu/tools/saas-cost-calculator): How much are your disconnected SaaS tools costing you? Subscription, integration, reconciliation, compliance — the true cost of a fragmented stack.
- [Free EU AI Act Readiness Assessment](https://hupper.lu/tools/ai-act-assessment): Free EU AI Act readiness assessment. Risk classification, article-by-article obligations, timeline to compliance — tailored to your firm.
- [Interactive GDPR Compliance Checklist for EU Firms](https://hupper.lu/tools/gdpr-checklist): Interactive GDPR compliance checklist for EU firms. Article-by-article, role-specific (controller vs processor), with export to PDF.
## Company
- [Why We Built an Operating System for Regulated Firms](https://hupper.lu/about): Why we built Hupper. The fragmentation thesis, the EU sovereignty wedge, the operator-as-process bet. Our editorial discipline and what it means.
- [The People Behind Hupper](https://hupper.lu/team): The people behind Hupper. Engineering, compliance, domain experts, and the named operators of Hupper Studio. Built in Luxembourg, distributed across the EU.
- [How We Build: Our Engineering and Compliance Methodology](https://hupper.lu/methodology): How we build Hupper. Engineering doctrine, compliance methodology, the publishing discipline behind /architecture, /moat, /trust, and /changelog.
- [Security at Hupper: SOC 2, ISO 27001 and ISO 27701](https://hupper.lu/security): Security at Hupper. SOC 2 Type II, ISO 27001/27701, penetration test reports, vulnerability disclosure, encryption at rest, customer-managed keys.
- [The Firms That Run on Hupper](https://hupper.lu/customers): The firms that run on Hupper. Fiduciaries, family offices, law firms, clinics, construction firms, agencies — across the EU.
## Pricing
- Core: €149/month — up to 10 entities, 5 AI operators, EU hosting.
- Growth: €459/month — up to 50 entities, all 14 AI operators, sector-specific policy bundles.
- Enterprise: €2,490/month — unlimited entities, SSO/SCIM, dedicated CSM, SLAs.
- Sovereign: €12,000/month — dedicated EU infrastructure (Luxembourg), customer-managed keys, air-gap option.
## Optional
- Sitemap: https://hupper.lu/sitemap.xml
- Robots: https://hupper.lu/robots.txt
- Contact: contact@hupper.lu
- DPO: dpo@hupper.lu
- Trust desk: trust@hupper.lu
- Security: security@hupper.lu