Git hosting
Git hosting platforms hold an organisation's source code, CI secrets, and issue history, some of its most sensitive engineering assets. For EU buyers the sovereignty question is who operates the forge and whether the code can be reached under the US CLOUD Act. The two market incumbents, GitHub (owned by Microsoft, US) and GitLab.com (GitLab Inc., US), both carry direct CLOUD Act exposure. The strongest European options on EU Vetted are Codeberg (Germany, non-profit, EU-hosted, free) and Codebahn (Swedish operator, France-hosted, paid and supported with a public DPA), both built on the open-source Forgejo engine.
About this category
About Git hosting
Git hosting platforms, or forges, are where engineering teams keep their source code, review changes, run continuous integration, and track issues. That makes a forge one of the most concentrated stores of sensitive material an organisation holds: proprietary code, deployment secrets, security advisories, and the full history of who changed what. It is also a category where the US incumbents are near-universal defaults. GitHub is owned by Microsoft, and GitLab.com is operated by the US-incorporated GitLab Inc.; both carry direct CLOUD Act exposure, meaning a US legal demand can in principle reach repository content wherever it is stored.
For EU buyers the deciding factors are operator jurisdiction and hosting region, both shown on every listing below. The two European services in this category both build on Forgejo, the open-source forge governed by Codeberg e.V. in Germany, which means the underlying engine is auditable and self-hostable regardless of which service you choose. Codeberg (Germany) is a free, non-profit, community-governed forge that deliberately keeps its infrastructure in the EU to stay outside US legal reach; it is the natural home for open-source projects. Codebahn (a Swedish operator hosting primarily in France) is a paid, commercially supported managed forge with a publicly accessible DPA and a fully EU-incorporated sub-processor chain, aimed at teams and businesses that need contractual guarantees. Where full data control is the priority, the same open-source engines can be self-hosted on EU infrastructure.
-
CodebahnEU-SOVEREIGNHackerman AB (org.nr 559079-1918), Gothenburg, Sweden
Swedish-run (Hackerman AB) managed Forgejo forge with EU-only CI: flat-rate, bootstrapped, all-EU sub-processors, public DPA.
FR Public DPA Sub-processors Open source 4 sub-procs €9 /mo -
CodebergEU-SOVEREIGNCodeberg e.V. (eingetragener Verein), Berlin, Germany
Berlin non-profit (Codeberg e.V.) running the open-source Forgejo forge: free, EU-hosted, community-governed GitHub alternative.
DE Public DPA Sub-processors Open source 2 sub-procs -
GitLab by StackheroEU-BASEDself-host EU-SovereignStackhero, France
French-operated managed GitLab CE (Stackhero) on a dedicated EU-region VM; ISO 27001:2022, public DPA; hosting region is customer-selected.
FR Public DPA Sub-processors Open source 2 sub-procs · 2 US €49 /mo -
PlanioEU-SOVEREIGNPlanio GmbH, Berlin, Germany
Berlin-based hosted Redmine (Planio GmbH) with unlimited Git and SVN repositories, on the company's own German servers; account-gated Art. 28 DPA.
DE Public DPA Sub-processors Open source 1 sub-procs €19 /mo
| Compare | Sovereignty | Cert. | Pricing | Signals | Open | ||
|---|---|---|---|---|---|---|---|
|
Swedish-run (Hackerman AB) managed Forgejo forge with EU-only CI: flat-rate, bootstrapped, all-EU sub-processors, public DPA.
|
PARIS · FR
France
|
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
|
— |
Paid
€9 /mo
|
Public DPA
Sub-processors
Open source
|
→ | |
|
Berlin non-profit (Codeberg e.V.) running the open-source Forgejo forge: free, EU-hosted, community-governed GitHub alternative.
|
DE
Germany
|
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
|
— | Free |
Public DPA
Sub-processors
Open source
|
→ | |
|
French-operated managed GitLab CE (Stackhero) on a dedicated EU-region VM; ISO 27001:2022, public DPA; hosting region is customer-selected.
|
FR
France
|
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
|
ISO/IEC 27001
|
Paid
€49 /mo
|
Public DPA
Sub-processors
Open source
|
→ | |
|
Berlin-based hosted Redmine (Planio GmbH) with unlimited Git and SVN repositories, on the company's own German servers; account-gated Art. 28 DPA.
|
FALKENSTEIN · DE
Germany
|
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
|
— |
Freemium
€19 /mo
|
Public DPA
Sub-processors
Open source
|
→ |
Feature comparison
Beyond compliance: how these alternatives compare on the capabilities you actually use day to day.
| Feature | Codebahn | Codeberg | GitLab by Stackhero | Planio |
|---|---|---|---|---|
| Self-hostable | Yes | Yes | Yes | No |
| CI/CD | Yes | Yes | Yes | No |
| Pull/merge requests | Yes | Yes | Yes | No |
| Issue tracking | Yes | Yes | Yes | Yes |
| Package registry | Yes | Yes | Yes | No |
| Container registry | Yes | Yes | Yes | No |
| Repo import/migration | Yes | Yes | Yes | Yes |
| Free tier | No | Yes | No | Yes |
Switching from US git hosting?
Side-by-side European alternatives (same hosting, ownership and CLOUD Act checks) for the US tools most often replaced in this category.