Skip to content
Independently verified · Quarterly re-audit
EU VETTED
Alternatives to

European alternatives to GitHub.

US-incorporated code-hosting and collaboration platform owned by Microsoft (Redmond, US). Direct CLOUD Act exposure.

In short

Codeberg (Germany, Berlin, non-profit, EU-hosted, free, CLOUD Act exposure: None) and Codebahn (Swedish operator, France-hosted, paid and supported with a public DPA, CLOUD Act exposure: None) are the strongest European alternatives to GitHub. Both run the open-source Forgejo engine, so the same platform can also be self-hosted on your own EU infrastructure. GitHub itself is owned by Microsoft (US) and carries direct CLOUD Act exposure; the European options here are EU-owned and EU-hosted, and each listing shows its verified exposure level.

ALTERNATIVES
4
CLOUD-ACT · NONE
3
WITH BSI C5
0
FREE TIER
2

DISCLOSURE   Some links on this site are affiliate links. We may earn a commission at no extra cost to you. Editorial signals and rankings are never influenced by affiliate relationships.

TOP PICKS

Which are the closest GitHub alternatives?

Ordered by feature parity and migration friction, which is weighted higher than feature breadth.

Planio
Germany · Founded 2009
EU-SOVEREIGN
★ #1 PICK

Berlin-based hosted Redmine (Planio GmbH) with unlimited Git and SVN repositories, on the company's own German servers; account-gated Art. 28 DPA.

Public DPA Sub-processors Open source
FROM
€19/mo
CLOUD ACT
NONE
GitLab by Stackhero
France
EU-BASED
★ #2 PICK

French-operated managed GitLab CE (Stackhero) on a dedicated EU-region VM; ISO 27001:2022, public DPA; hosting region is customer-selected.

Public DPA Sub-processors Open source
FROM
€49/mo
CLOUD ACT
MINOR
Codeberg
Germany · Founded 2018
EU-SOVEREIGN
★ #3 PICK

Berlin non-profit (Codeberg e.V.) running the open-source Forgejo forge: free, EU-hosted, community-governed GitHub alternative.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE
SIDE-BY-SIDE

How do the 4 European alternatives to GitHub compare?

All 4 alternatives, benchmarked against GitHub.

Feature comparison

Beyond compliance: how these alternatives compare on the capabilities you actually use day to day.

Feature Planio GitLab by Stackhero Codeberg Codebahn
Self-hostable No Yes Yes Yes
CI/CD No Yes Yes Yes
Pull/merge requests No Yes Yes Yes
Issue tracking Yes Yes Yes Yes
Package registry No Yes Yes Yes
Container registry No Yes Yes Yes
Repo import/migration Yes Yes Yes Yes
Free tier Yes No Yes No
WHAT YOU'RE LEAVING
What are you leaving behind with GitHub?

Listed for transparency. Every product on this page is benchmarked against this baseline.

GitHub US-incorporated

US-incorporated code-hosting and collaboration platform owned by Microsoft (Redmond, US). Direct CLOUD Act exposure.

US-based
OWNERSHIP
US-OWNED
CLOUD ACT
DIRECT
HOSTING
Likely AWS · US
SCHREMS II
Default SCC + supp.
Why switch

Why look for a GitHub alternative?

What you keep, what you give up

What do you keep, and what do you trade off?

Migration tips

How do you migrate from GitHub?

Picking the right one

Which GitHub alternative should you pick?

FAQ

Frequently asked questions

Is GitHub usable under GDPR?
GitHub publishes a Standard Contractual Clauses-based DPA, so using it from the EU is legally workable. What keeps it on procurement watchlists is the layer underneath: GitHub, Inc. is a wholly owned subsidiary of Microsoft Corporation (US), and the consolidated group falls within reach of the US CLOUD Act regardless of where repository data is stored. That is usually the first thing a Schrems II transfer impact assessment flags.
Which GitHub alternative has the strongest compliance profile?
Codebahn (Swedish operator, France-hosted) is the strongest on paper: it publishes a public DPA, names an all-EU sub-processor chain (Scaleway, Hetzner, Mollie, Crisp), and carries CLOUD Act exposure: None. Codeberg (Germany) is a non-profit run on the association's own hardware in Berlin, EU-owned and EU-hosted with CLOUD Act exposure: None; as a free community service it does not sign a commercial DPA, which is the one gap for procurement buyers who need a self-serve agreement.
Will my repositories and git history transfer?
Yes. Both alternatives run Forgejo, whose migration importer pulls a repository over HTTPS with an access token and preserves the full git history, along with issues, pull requests, labels, milestones, releases, and the wiki in most cases. The git data itself is portable by design, so even a bare `git push --mirror` moves every branch and tag. Plan a little extra time for anything GitHub-specific (see the trade-off list below).
Do the alternatives support CI/CD like GitHub Actions?
Both offer hosted CI, though not with GitHub Actions' exact syntax or marketplace. Codeberg provides Codeberg CI, based on Woodpecker; Codebahn includes EU-based CI runners on its paid organisation tiers. Migrating a pipeline means rewriting the workflow file and re-pointing any Actions-marketplace steps to equivalents, which is usually the largest single piece of a GitHub migration.
Does GitHub fall under the US CLOUD Act?
Yes. GitHub, Inc. is a US-incorporated Microsoft subsidiary, so the CLOUD Act can in principle compel production of repository content, CI logs, and metadata regardless of storage location. The European alternatives here are not US-incorporated, which removes direct exposure: Codeberg (Germany) carries CLOUD Act exposure: None and Codebahn (Swedish operator) carries CLOUD Act exposure: None. These classifications track incorporation and ownership as publicly disclosed.
Is there a free European alternative to GitHub?
Yes. Codeberg is a free, donation-funded non-profit forge, which makes it the natural home for open-source and personal projects. Codebahn is a paid, commercially supported service from €9 per month, better suited to businesses that need a contractual DPA, hosted CI, and support. Both run the same open-source Forgejo engine.
Can I self-host a GitHub alternative on EU infrastructure instead?
Yes. Forgejo and Gitea (both open source) and GitLab Community Edition run on any EU infrastructure such as Hetzner, OVHcloud, Scaleway, IONOS, or STACKIT. Self-hosting removes the platform operator as a third-party processor entirely, which is the strongest posture for code that contains trade secrets or regulated data. The trade-off is that you take on operations, backups, and security patching yourself.
METHODOLOGY

How we verified each row above.

For every product we read the public DPA, sub-processors document, hosting region declaration, and corporate ownership records. Each is timestamped. Signals are editorial, re-verified quarterly. We never accept self-attestation.

Reviewed by the EU Vetted editorial team · Editorial guidelines

Last verified July 2026

Read methodology →