Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Codebahn

VERIFIED

Hackerman AB (org.nr 559079-1918), Gothenburg, Sweden

Git hosting · Sweden

Swedish-run (Hackerman AB) managed Forgejo forge with EU-only CI: flat-rate, bootstrapped, all-EU sub-processors, public DPA.

In short

Codebahn, in the Git hosting category, is an EU-owned service with France as its hosting location and no identified CLOUD Act exposure.

Assessment notes

Codebahn is a managed, commercially supported Forgejo forge operated by Hackerman AB (Gothenburg, Sweden), positioned as an independent European GitHub alternative for teams. It hits every 5/5 criterion: EU-owned Swedish operator, EU-only infrastructure (Scaleway fr-par in Paris for compute and storage, Hetzner Falkenstein in Germany for encrypted backups), a publicly accessible DPA at codebahn.net/dpa, a public sub-processors list where all four named sub-processors (Scaleway FR, Hetzner DE, Mollie NL, Crisp FR) are EU-incorporated, and no US legal entity anywhere in the data path: [[codebahn.cloud_act]]. The product is built on the open-source Forgejo engine with one-click open-format export, so there is no vendor lock-in. No third-party certification (ISO 27001 / SOC 2) is published yet, but the rubric does not require one for 5/5 given the fully transparent all-EU posture.

CLOUD ACT
OWNERSHIP
SUB-PROCS
4 · 0 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Codebahn

Codebahn is a managed, commercially supported Git hosting and CI platform operated by Hackerman AB (org.nr 559079-1918), a bootstrapped Swedish company based in Gothenburg. It markets itself as a focused, independent GitHub alternative for European teams: unlimited users on every plan, flat-rate pricing, and hosted CI runners included on every paid organisation tier. The service is built on the open-source Forgejo engine (GPL-3.0), and Codebahn provides one-click export in an open format so customers can leave without lock-in.

The infrastructure story is the differentiator. Primary compute, object storage, managed PostgreSQL, the container registry, transactional email and observability all run on Scaleway fr-par (Paris, France), with encrypted daily backups (via Restic) stored separately on Hetzner Falkenstein (Germany). Codebahn publishes a full sub-processors list naming exactly four vendors, all EU-incorporated: Scaleway (France), Hetzner (Germany), Mollie (Netherlands, payments) and Crisp (France, in-app support). There is no US entity in the data path, and the DPA is public at codebahn.net/dpa without a login. Feature coverage includes repositories, issues, pull requests with branch protection, webhooks, container registry, releases, a package registry, EU-based CI/CD, GitHub workflow compatibility, and migration import of up to 100 repositories with full history preserved.

Pricing runs from Personal at 9 EUR/month (5 GiB, bring-your-own CI runners) through Starter (39 EUR, 25 GiB, 3,000 CI minutes), Team (119 EUR, 200 GiB, 10,000 minutes) and Scale (249 EUR, 500 GiB, 25,000 minutes), with annual billing saving two months and a 30-day money-back guarantee. As a bootstrapped company with no investors, Codebahn positions its terms as stable with no acquisition risk. Best fit: European teams and businesses that want a paid, supported managed forge with a contractual DPA and a verifiably all-EU sub-processor chain, rather than a free community service.

SUB-PROCESSORS

Sub-processor map · 4

Source ↗
  • Crisp EU
    France

    In-app support chat

  • Hetzner EU
    Germany

    Encrypted backup storage (fsn1 / Falkenstein)

  • Mollie EU
    Netherlands

    Payment processing

  • Scaleway EU
    France

    Compute, object storage, managed PostgreSQL, container registry, transactional email, observability (primary, fr-par / Paris)

Zero US-incorporated sub-processors.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-07-21).
FEATURES

Capability matrix

Self-hostable Yes
CI/CD Yes
Pull/merge requests Yes
Issue tracking Yes
Package registry Yes
Container registry Yes
Repo import/migration Yes
Free tier No
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option Yes
PRICING

Pricing & tiers

PAID
from €9/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    codebahn.net/dpa…
    Open ↗
  • Sub-processors list
    codebahn.net/docs…
    Open ↗
  • Terms of Service
    codebahn.net/terms…
    Open ↗
ALTERNATIVES

Alternatives in this category

Codeberg
Germany · Founded 2018
EU-SOVEREIGN

Berlin non-profit (Codeberg e.V.) running the open-source Forgejo forge: free, EU-hosted, community-governed GitHub alternative.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE
GitLab by Stackhero
France
EU-BASED

French-operated managed GitLab CE (Stackhero) on a dedicated EU-region VM; ISO 27001:2022, public DPA; hosting region is customer-selected.

Public DPA Sub-processors Open source
FROM
€49/mo
CLOUD ACT
MINOR
Planio
Germany · Founded 2009
EU-SOVEREIGN

Berlin-based hosted Redmine (Planio GmbH) with unlimited Git and SVN repositories, on the company's own German servers; account-gated Art. 28 DPA.

Public DPA Sub-processors Open source
FROM
€19/mo
CLOUD ACT
NONE