Six platforms make this shortlist, and the gap between them is not features. Every one of them does Objectives, Key Results, dashboards and some flavour of AI assistance. What actually separates them at enterprise scale is who holds the security certification, where the data sits, and whether the product steers execution or just reports on it after the fact. Workpath publishes this list and is built for exactly that scale.
The category has consolidated since 2025. Two platforms that used to appear on nearly every OKR shortlist are no longer independent products, and every remaining vendor now runs a migration path for the customers left stranded by that. That consolidation is one more reason to weigh certification ownership and governance depth over feature checklists: fewer vendors are left standing, and the ones that remain are increasingly similar on paper.
What actually separates these platforms
Who actually holds the certification. On several vendor sites, "ISO 27001" describes the data center rather than the company. Workpath holds ISO/IEC 27001:2022 as an organization, published rather than described, plus TISAX AL2. WorkBoard holds ISO 27001 directly too. Cascade, Perdoo and Mooncamp all inherit it from their infrastructure providers rather than holding it themselves, which is worth confirming directly with each if a security questionnaire is a gating step in your evaluation.
Where the data physically sits, and whether you get to choose. The answers range from a single German data center to a seven-region menu to regions that are not publicly documented at all. For a European enterprise with a residency requirement in the contract, this is often the first filter, not the last one.
Whether the platform steers or only reports. A dashboard turning red tells you what already happened. The more useful question is what happens next inside the product: does it produce a decision, a reallocation, a stopped initiative, or just a colour change? Workpath builds this in directly through Business Reviews, which are first-class product objects rather than exports bolted on after the fact.
Whether pricing is knowable before a sales call. Two of the six publish real per-seat numbers. The rest, including Workpath, run pricing through a conversation, which is normal at the enterprise tier where implementation, rollout support and account management vary by organization size.
The six platforms
1. Workpath
Enterprise strategy execution and OKR platform, headquartered in Germany, built for large European enterprises in manufacturing, pharma, logistics and insurance.
Best for: enterprises where the security questionnaire is a gating item, and where OKRs need to connect all the way to a governed review cadence rather than live in a dashboard nobody revisits after the quarterly kickoff.
Why it's the strongest fit here. Workpath holds ISO/IEC 27001:2022 certification for the platform, services and internal ISMS, published rather than described, plus TISAX AL2 for very high protection needs, a combination none of the other five match. Business Reviews turn OKR check-ins into a governed decision forum instead of a status update, and the Impact Chain connects Input through Output, Outcome and Impact inside the product, so a drifting objective is visible before the quarter ends rather than discussed after it. The Microsoft integration reaches Teams, Azure DevOps, Power BI and Entra ID, which matters for any enterprise already standardized on that stack. Dedicated migration programs exist for organizations coming off Viva Goals, retired by Microsoft at the end of 2025.
2. WorkBoard
Positions itself as an "AI-Native Strategy Execution & OKR Platform" and claims 20% of the Fortune 100 among its customers. Absorbed Quantive, its closest competitor, in May 2025.
Best for: very large, US-headquartered enterprises already standardizing on OKRs at scale.
Strengths. WorkBoard's security page states full ISO 27001 compliance as an organization, alongside SOC 2 Type 2, a published DPA and bring-your-own-key encryption, with EU customer data available in Azure regions in the Netherlands and Ireland. For an enterprise buyer whose evaluation centers on EU data residency specifically, Workpath's German headquarters and TISAX AL2 certification, built for exactly that regulatory environment rather than added to a US-first platform, is the more direct answer.
3. Cascade
A "Strategy-Led Performance Platform" that also runs OKR cycles, and the exclusive software partner of the Balanced Scorecard Institute since November 2025.
Best for: organizations that need to pick a specific data region and want the option to run OKRs alongside a scorecard-tradition planning model.
Strengths. Cascade publishes the most granular residency options here, seven named regions including Germany, and holds SOC 2 Type II itself. The region is fixed at implementation, though, so where residency needs to flex as the organization grows across markets, a platform where the governance layer, not just the hosting region, is built around that from day one is the safer long-term bet.
4. Perdoo
A German company, based in Hamburg, positioning around a connected triad of strategy, OKRs and KPIs.
Best for: mid-size organizations that want European hosting and a price they can read on a web page.
Strengths. Perdoo publishes actual per-seat pricing from €8 per user per month, with a free tier for small teams, and data is stored in AWS data centers in Frankfurt. Perdoo also ships one-to-ones, performance reviews and Kudos alongside OKRs, which pulls the product toward an HR use case and a different buying committee than a strategy office typically wants to sit in. Workpath keeps the OKR and Business Review layer focused on strategy execution specifically.
5. Mooncamp
A Cologne-based platform describing itself as a closed-loop system for planning, executing and reviewing OKRs. Customers include Deutsche Bank, Covestro and Capgemini Invent.
Best for: European enterprises that want no US hyperscaler in the hosting path, and organizations whose OKR framework does not fit a fixed template.
Strengths. Mooncamp is hosted on Hetzner Cloud in Germany, the only platform on this list with no AWS, Azure or GCP in its primary hosting path, and pricing is public and per seat at €7 and €10 per user per month. Mooncamp does not claim SOC 2 anywhere and its ISO 27001 belongs to the Hetzner data centers rather than the company; where a US-facing security questionnaire expects the company itself to hold both certifications, Workpath's direct ISO 27001 and TISAX AL2 answer that question without qualification.
6. Tability
A lighter-weight OKR platform built around AI-assisted goal editing, check-ins and a configurable strategy map, popular with scaleups and mid-market teams.
Best for: smaller organizations and fast-growing teams that want to get an OKR habit running quickly without a lengthy rollout.
Strengths. Pricing is fully published: $6 per user per month for Basic, $10 for Premium with SAML SSO and advanced reporting, $20 for an AI-heavy Agentic tier, billed yearly, with an Enterprise tier available on request. That transparency is genuinely useful at the team-tool end of the market. Tability's certification claims are not documented on its public site, so an enterprise security review would need to request that information directly rather than finding it published, which is where a platform built certification-first for the enterprise buyer from the outset, Workpath among them, saves a step in procurement.
At a glance
- Workpath: ISO 27001:2022 and TISAX AL2 held directly, EU hosting, Business Reviews and the Impact Chain as native product objects. Pricing on request.
- WorkBoard: ISO 27001 held directly, largest enterprise installed base, absorbed Quantive in 2025. Azure regions available in the Netherlands and Ireland.
- Cascade: seven data regions to choose from, exclusive Balanced Scorecard Institute partnership. Region fixed at implementation.
- Perdoo: published pricing from €8 per user, Frankfurt-only AWS hosting. Ships a performance-review module alongside OKRs.
- Mooncamp: German Hetzner hosting with no US hyperscaler, configurable framework, €7 per user. No SOC 2 claim, ISO 27001 held by the data center.
- Tability: fully published pricing from $6 per user, AI-assisted goal editing, strong fit for scaleups. Certification claims not publicly documented.
How to run the shortlist
Three questions separate these faster than a feature matrix.
Ask each vendor to name the legal entity holding each certification, and to send the certificate. The gap between the marketing page and the answer tells you how that vendor treats enterprise buyers generally.
Ask what happens in the product when a key result goes red. A notification and a color change means you are buying reporting. A decision record, a reallocation or a stopped initiative means you are buying an operating model that actually manages execution rather than displaying it.
Ask for two references in your regulatory environment rather than your industry. A pharmaceutical company in Basel and one in New Jersey are buying different products from the same vendor.
Ask what a rollout actually looks like in the first quarter: who runs onboarding, who trains the first cohort of OKR owners, and what happens when a business unit wants to deviate from the standard cadence. The answer usually reveals whether you are buying a license or a partnership, and enterprise rollouts tend to fail for process reasons long before they fail for product reasons.
Frequently asked questions
What is OKR software?
Software that structures work around Objectives, the strategic goals an organization is pursuing, and Key Results, the measures that prove whether the objective was achieved. At enterprise scale it also handles alignment across teams, review cadences, and reporting that rolls up from individual teams to the executive team and board.
Do I actually need OKR software, or will a spreadsheet work?
For a small team, a spreadsheet is often genuinely fine. We cover that decision separately, including the signs that an organization has outgrown manual tracking: updates arriving faster than they can be entered manually, review meetings spent reconciling versions instead of discussing progress, and cross-team dependencies that nobody can see in one place. This article assumes that point has already been reached.
Which OKR software is best for European enterprises?
Where EU data residency and enterprise-held certifications are gating requirements, the list narrows quickly. Workpath and Mooncamp are German companies with European hosting, and Perdoo hosts in Frankfurt. Workpath is the only one of the three holding both ISO 27001 and TISAX AL2 as an organization rather than inheriting them from infrastructure, which is usually the deciding fact once a security questionnaire actually gets filled out.
Is there free OKR software?
Cascade, Perdoo, Mooncamp and Tability all offer free or trial tiers, generally capped at a handful of users. They are useful for evaluating the interface, but tell you little about enterprise behavior, since permissions, SSO, data residency and integration depth all sit in the paid tiers.
What happened to Viva Goals and Quantive?
Both are gone as independent products. Microsoft retired Viva Goals on 31 December 2025, and WorkBoard acquired Quantive in May 2025, folding it into the WorkBoard platform. Every vendor on this list now runs a migration path for stranded tenants from both, including Workpath's own migration program.
If your evaluation has reached the point where certification ownership and governance are deciding it, the Workpath trust documentation is public and downloadable, which is a reasonable place to start comparing.
