OneStopDigital.eu Start a project

Shopify vs Custom Webshop: EU Compliance & Cost Comparison

Shopify vs a custom webshop for EU sellers: real 3-year costs in EUR, GDPR and data-location differences, and which setup fits which kind of shop.

For most small EU shops, Shopify is the faster and initially cheaper route: €36/month (Basic, annual billing) plus transaction fees gets you a working store in days. A custom webshop costs more upfront — realistically €1.000–15.000 depending on who builds it — but removes per-sale fees, gives you full control over where customer data lives, and stops the app-subscription creep that quietly pushes many Shopify stores past €150–300/month. Over three years, the totals are much closer than the sticker prices suggest, and on EU compliance the two models fail in different places.

The honest summary: choose Shopify if you need to validate a product fast, sell a standard catalog, and can live with US-linked data processing covered by the current EU–US Data Privacy Framework. Choose custom if you have non-standard requirements (B2B pricing, configurators, ERP integration), care about margins on volume, or want your customer data on EU infrastructure under your own control. The rest of this article puts numbers and legal specifics behind that summary.

Shopify vs custom webshop: what each actually is

Shopify is a hosted SaaS platform: Shopify runs the servers, the checkout, the security patching, and the PCI compliance. You rent the machinery, customize a theme, and extend with apps from their marketplace. You can leave, but you export data, not the shop itself.

A custom webshop, in the sense we build them, is a shop you own: open-source or framework-based e-commerce (a headless storefront, WooCommerce, Medusa, or fully bespoke) running on hosting you choose, with a payment provider like Stripe, Mollie, or Adyen handling cards. “Custom” spans a huge range — a tuned WooCommerce install and a bespoke headless build are different animals — which is why cost ranges are wide.

Neither is categorically better. They trade convenience against control, and the right answer depends on which of those your shop is short of.

Cost comparison in EUR: year one and year three

Market figures below are honest ranges; the OneStopDigital figures are our own published prices (first-party data).

Cost itemShopifyCustom (agency market range)Custom (OneStopDigital)
Build / setup€0–2.000 (theme + config); €3.000–15.000 with an agency€3.000–25.000€1.000 (Establish) – €2.200+ (Build) one-time
Platform fee€36/mo Basic, €99/mo Grow (annual billing)€0€0
Hostingincluded€10–100/mo (EU VPS/managed)included in monthly plan
Apps / pluginscommonly €50–250/mo once reviews, email, bundles, translations add up€0–50/mo (mostly one-time or open source)included in scope
Payment feesPSP fee + Shopify transaction fee (0.5–2% unless Shopify Payments)PSP fee only (e.g. Stripe ~1.5% + €0.25 EU cards)PSP fee only
Maintenanceincluded (platform) + app updates€50–300/mo agency retainer€50/mo Essential – €130/mo Growth
Year-1 realistic total (small shop)€1.500–5.000€4.000–20.000€1.600–3.760
3-year total (small shop)€4.500–12.000+€6.000–28.000€2.800–6.880

Three things the table hides. First, transaction fees scale with success: an extra 1% on €300.000/year of Shopify revenue is €3.000/year, which alone can fund custom maintenance. Second, app creep is the real Shopify budget killer — stores rarely stay at €36/month once they need subscriptions, B2B pricing, or serious email flows. Third, custom quotes vary because scope varies: our €1.000–2.200 fixed prices work because we standardize the stack; a bespoke build with custom logistics integration legitimately costs five figures anywhere. For the broader cost picture, see how much does a website cost in Europe.

EU compliance: where Shopify and custom each stand

Data location and transfers

Shopify Inc. is a Canadian company with substantial US processing; EU customer data is processed under the EU–US Data Privacy Framework and SCCs, and Shopify offers EU data residency options for some data. Canada additionally holds an EU adequacy decision. That is a lawful setup today — but the DPF is the third transfer framework after the CJEU struck down Safe Harbor and Privacy Shield (Schrems II), and it is under challenge. If it falls, every DPF-dependent stack has a transfer problem again overnight, as we lay out in EU hosting vs US cloud.

A custom shop lets you choose: EU hosting provider, EU-region database, EU-hosted email and analytics. Done that way, the transfer question largely disappears rather than being answered. That is not automatic — a custom shop pointed at US SaaS for email and analytics inherits the same DPF dependency — but with custom, EU-only is achievable; with Shopify, some non-EU processing is structural.

This is where Shopify stores commonly fail in practice. A default Shopify theme plus typical apps loads trackers whose behavior you do not fully control; each installed app is a data processor you are responsible for vetting, and app-injected scripts frequently fire before consent. Shopify’s Customer Privacy API can gate its own tracking on consent, but making a real app stack honestly consent-gated takes work that most store owners never do. On a custom build, every script is one you (or your developer) put there, so blocking non-essential scripts pre-consent is straightforward — the standard we describe in the GDPR checklist for online shops.

Where each model is stronger

Compliance areaShopifyCustom
PCI DSS / payment securityHandled by platform — genuine advantageHandled by PSP (hosted fields); your job to wire correctly
Security patchingAutomaticYour/your agency’s responsibility (this is what maintenance plans are for)
Data location controlLimited; DPF-dependentFull — EU-only stack achievable
Consent-gating trackersHard with an app stackStraightforward
Processor inventory (Art. 28/30)One DPA with Shopify + one per app, behavior partly opaqueFewer, chosen processors; fully knowable
Data rights (export/deletion)Built-in tooling, but spans all appsMust be built, then fully under your control

Neither platform makes you compliant by itself. Shopify removes the security-patching failure mode and adds the opaque-tracker failure mode; custom does the reverse — unless someone is actually maintaining it, which is non-negotiable either way.

VAT and invoicing

EU distance-selling rules (OSS/IOSS, per-country VAT rates, B2B reverse charge) apply identically to both. Shopify calculates EU VAT rates but is famously weak on compliant sequential invoicing without paid apps; custom builds implement whatever your accountant specifies. Budget for either — this is a compliance area people discover late.

Which should your shop choose?

Choose Shopify when: you are validating a product and speed beats everything; your catalog and checkout are standard; you have no in-house or agency technical support; your revenue is small enough that fees and app costs stay trivial; and you accept US-linked processing under the DPF.

Choose a custom webshop when: you have non-standard requirements — B2B price lists, product configurators, ERP/PIM integration, unusual shipping logic — which on Shopify mean fighting the platform through apps; your volume makes per-transaction economics matter; data location and a fully consent-clean setup are commitments, not preferences (agencies, regulated-adjacent sectors, privacy-positioned brands); or you are past validation and tired of app subscriptions.

The migration pattern we see most: start on Shopify, validate, then move to custom in year two or three once requirements and revenue justify it. That is a legitimate path — just budget for the migration (data export is easy; URL redirects and SEO preservation are the careful part).

Our position, plainly: we build custom webshops on EU infrastructure at published fixed prices — €1.000 Establish or €2.200+ Build one-time, with maintenance at €50–130/month (full pricing) — precisely because the “custom is a five-figure gamble” assumption is what pushes small shops onto rented platforms by default. At those numbers, custom is cost-competitive with Shopify from year one for many shops, with the compliance control included rather than bolted on. If you want to talk through which side of this table your shop lands on, start with our webshop development service.