A single roll-up of ownership and CLOUD Act exposure.
Codeberg e.V. (eingetragener Verein), Berlin, Germany
Berlin non-profit (Codeberg e.V.) running the open-source Forgejo forge: free, EU-hosted, community-governed GitHub alternative.
Codeberg, in the Git hosting category, is an EU-owned service with Germany as its hosting location and no identified CLOUD Act exposure.
Codeberg is the community-governed non-profit Git forge operated by Codeberg e.V., a registered association (eingetragener Verein) based in Berlin, Germany. It runs the open-source Forgejo engine (a hard fork of Gitea that Codeberg itself backs and develops), is funded by association membership and donations rather than venture capital, and deliberately keeps all infrastructure inside the EU to sit outside US DMCA and CLOUD Act reach. Signals: EU-owned (German e.V.), EU-hosted, no US legal entity, no US sub-processors, Forgejo engine open-source and self-hostable, no CLOUD Act exposure. Gap: as a free community service Codeberg does not offer a signed commercial DPA / AVV and publishes no formal sub-processors list, which is the single factor keeping this below 5/5 for procurement buyers who need a self-serve DPA.
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
Where ultimate control over the operating company sits.
Codeberg is a free, non-profit Git hosting service operated by Codeberg e.V., a registered association based in Berlin, Germany. Established in September 2018 and launched publicly as codeberg.org in January 2019, it exists specifically to give open-source projects a European home that is not subject to US corporate ownership or US legal pressure. As of late 2025 it hosts over 300,000 repositories and more than 200,000 registered accounts, sustained by 1,100+ paying association members rather than any venture capital.
The platform runs Forgejo, the open-source (GPL-3.0) forge software that Codeberg forked from Gitea in 2022 and now backs as its primary sponsor; Forgejo development itself happens on Codeberg's own infrastructure. Feature-wise it covers the full GitHub-style workflow: repositories, pull requests and code review, issue tracking, a package registry and container registry, webhooks, and hosted CI (Codeberg CI, based on Woodpecker), plus Codeberg Pages for static web hosting and one-click migration import from GitHub and GitLab.
For an EU-sovereignty audit Codeberg's posture is among the cleanest in the directory: German non-profit operator, EU-only infrastructure chosen deliberately to avoid US DMCA and CLOUD Act reach: [[codeberg.cloud_act]], no US legal entity, and no US sub-processors. Because Forgejo is open source, organisations can also self-host the identical engine on their own EU infrastructure as a zero-counterparty escape hatch. The one procurement caveat is that, as a free community service, Codeberg does not sign a commercial DPA and publishes no formal sub-processors list. Best fit: open-source maintainers, privacy-conscious developers, and public-sector or education teams that want a European, non-commercial forge and are comfortable with a donation-funded governance model.
Backups, redundancy, disaster recovery, DDoS protection, spare-resource efficiency
Backups, redundancy, disaster recovery, DDoS protection, spare-resource efficiency
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| Hetzner Online GmbH | Germany | Backups, redundancy, disaster recovery, DDoS protection, spare-resource efficiency | EU |
| netcup GmbH | Germany | Backups, redundancy, disaster recovery, DDoS protection, spare-resource efficiency | EU |
Swedish-run (Hackerman AB) managed Forgejo forge with EU-only CI: flat-rate, bootstrapped, all-EU sub-processors, public DPA.
French-operated managed GitLab CE (Stackhero) on a dedicated EU-region VM; ISO 27001:2022, public DPA; hosting region is customer-selected.
Berlin-based hosted Redmine (Planio GmbH) with unlimited Git and SVN repositories, on the company's own German servers; account-gated Art. 28 DPA.