Breakcold

France · owned by Independent (France) · www.breakcold.com · 22 vendors

Breakcold is an AI-native CRM platform designed for SMBs, agencies, startups, and consultants. It autonomously moves leads through sales pipelines, creates follow-up tasks, and eliminates manual admin work by integrating with LinkedIn, email, WhatsApp, Telegram, and other channels. The platform positions itself as a fully autonomous CRM built from the ground up with AI at its core, rather than a traditional CRM with AI features added on.

Resilience scores

Disruption prediction

Breakcold has an estimated 17% probability of disruption in the next 6 months.

14 of Breakcold's 22 vendors monitored for disruptions.

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 22 sub-vendors.

Insights

Last updated 2026-07-02 · revision 14

22 direct vendors, 287 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Breakcold exhibits a high degree of migration readiness, largely attributable to its cutting-edge, cloud-native technology stack. The core product, an AI-native CRM, is built on modern infrastructure utilizing AWS, OpenAPI, REST APIs, and integrates with leading LLMs (Claude, ChatGPT). This API-first and modular architecture, including a native MCP server and webhooks, inherently supports portability and reduces the complexity typically associated with migrating monolithic or legacy systems. The open-source "Breakcold Agent Skill" further demonstrates a commitment to open standards and flexible integration, minimizing proprietary application-level lock-in. However, certain factors present challenges that need careful consideration during any migration. The "Vendor Lock-in Risk" is explicitly unknown, which is a critical blind spot. While the company leverages major cloud and AI providers (AWS, Anthropic, OpenAI), the depth of integration and the effort required to potentially switch these foundational vendors are not detailed. Furthermore, Breakcold's strong GDPR compliance and commitment to EU data residency (primary processing in AWS Frankfurt, SCCs for US sub-processors) mean that any migration strategy must meticulously ensure continuous adherence to these strict regulatory and data sovereignty requirements, which can add significant planning and execution complexity. The absence of SOC2 and ISO 27001 certifications might also suggest a less formalized approach to internal security and operational processes, which could impact the smooth execution of a complex migration project.

Compliance

8 in-scope frameworks identified; showing 3.

ePrivacy Directive — Partially Compliant

Breakcold uses multiple tracking technologies including Google Analytics cookies, Hotjar session recording, Facebook social widgets, and — most significantly — social media cookies (LinkedIn, Instagram) for AI-powered data scraping and personalization. The Terms & Conditions acknowledge cookie usage but the 'Do Not Track' section states the application does not support DNT requests. Risk is Medium because: (1) The social media cookie scraping feature is a novel and potentially non-compliant use of cookies under ePrivacy rules — using a user's LinkedIn/Instagram session cookies to scrape prospect data on behalf of the user raises questions about whether this constitutes processing of third-party personal data without adequate consent; (2) CNIL has been active in enforcing cookie consent requirements; (3) No cookie consent management platform (CMP) or granular cookie consent mechanism is described in the publicly available documentation.

Evidence: https://www.breakcold.com/terms-and-conditions, https://www.breakcold.com/privacy-policy

NIS2 (source) — Assessment Required

NIS2 applies to 'Important Entities' in the digital providers sector, which includes online marketplaces, online search engines, and cloud computing service providers. Breakcold is a SaaS CRM platform — it is not an online marketplace, search engine, or cloud infrastructure provider in the NIS2 sense. The 'digital providers' category under NIS2 Annex II is narrowly defined and does not straightforwardly capture all SaaS companies. However, if Breakcold's customer base grows to serve entities in critical sectors, or if it is classified as an ICT service management provider (managed service provider), NIS2 could apply. The size threshold (50+ employees or €10M+ turnover) is also uncertain — Breakcold appears to be a small startup (the DPA explicitly states 'small team' with no legal staff), likely below the NIS2 size threshold. Risk is Low because: (a) the company's sector (CRM/sales software) is not among the explicitly listed NIS2 essential or important entity sectors; (b) the company appears to be below the size threshold; (c) France's NIS2 transposition (via ANSSI) focuses enforcement on larger, more critical operators. Assessment is still 'Required' because exact employee count and revenue are not publicly confirmed.

Evidence: https://www.breakcold.com/data-protection-agreement, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555

GDPR (source) — Partially Compliant

Breakcold (operated by Logike SAS, Paris, France) is unambiguously subject to GDPR as an EU-established controller and processor. Positive indicators include: a published DPA referencing EU SCCs (Commission Decision 2021/914), explicit GDPR legal bases documented in the Terms & Conditions, data subject rights enumerated, 72-hour breach notification commitment, and sub-processor list (Exhibit D). However, several risk factors elevate the risk level: (1) The DPA was last updated September 2023 and may not reflect the latest EDPB guidance; (2) Primary processing infrastructure includes multiple US-based sub-processors (Stripe, Sentry, Cloudflare, Vercel, Upstash, Firebase/Google, SplitBee) requiring SCCs for ex-EEA transfers — the adequacy of transfer impact assessments (TIAs) for each is unverified; (3) The product involves scraping social media data (LinkedIn, Instagram) via user cookies for AI personalization, which raises significant GDPR Article 6 lawful basis and Article 9 (if special category data is inadvertently collected) concerns; (4) No DPO appointment is publicly disclosed, which may be required if large-scale systematic monitoring of individuals is a core activity; (5) No CNIL registration or public record of supervisory authority engagement found; (6) The DPA explicitly states 'we cannot agree to sign customers' DPAs' and 'we don't have a legal team on staff,' indicating limited internal compliance maturity. Risk is Medium rather than High because the company has made genuine structural compliance efforts (DPA, SCCs, sub-processor list, data subject rights), but gaps in transfer governance and social data scraping practices remain material.

Evidence: https://www.breakcold.com/data-protection-agreement, https://www.breakcold.com/terms-and-conditions, https://www.breakcold.com/privacy-policy

Financials

Three-year financials

Financial Resilience Score: 5/10

Breakcold is a small, bootstrapped French B2B SaaS company operating in the CRM space with no publicly disclosed audited financials. The company appears to have viable niche SaaS economics, with self-reported traction of 1,000+ paying customers, strong third-party reviews (4.8/5 on G2 and 4.9/5 on Capterra), and a product-led growth model that suggests capital efficiency. Founder communications indicate ARR likely in the low seven figures USD, consistent with a lean, bootstrapped trajectory with limited dilution and low burn. However, financial resilience is constrained by the company's small scale, dependence on a very small team (2-10 or 11-50 employees), and heavy reliance on third-party platforms (LinkedIn, WhatsApp, Instagram, Gmail) whose API/TOS changes could materially impair the product. The competitive field is intense, with well-capitalized rivals like HubSpot, Pipedrive, Attio, Folk, Salesforce, and Close. FX exposure (USD-denominated pricing vs. EUR cost base) and founder key-person concentration add further risk. The absence of published accounts makes runway, gross margin, and net retention impossible to verify externally, warranting a mid-range resilience score.

Key strengths: Bootstrapped with no announced VC funding - implies capital efficiency and low burn, Product-led SaaS with self-serve signup and low CAC via content marketing, Strong third-party reviews (4.8/5 G2, 4.9/5 Capterra) suggesting healthy retention, 1,000+ paying customers across agencies, startups, and consultants, Sticky niche with meaningful switching costs once integrated with workflows, Timely AI-Native CRM repositioning aligned with buyer demand

Risk factors: Small scale - loss of a few larger accounts would be materially felt, Intense competition from better-capitalized rivals (HubSpot, Pipedrive, Attio, Folk, Salesforce), Platform dependency risk on LinkedIn, WhatsApp, Instagram, Gmail APIs, Founder/key-person concentration in a very small team, FX exposure - USD pricing but French EUR cost base, Limited financial transparency - no published accounts to assess runway or margins

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report