Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Element (Matrix)

VERIFIED
Video conferencing · United Kingdom
Founded 2017 · element.io ↗

UK-headquartered open-source Matrix protocol commercialisation; powers Bundeswehr BwMessenger + French Tchap + NATO + UN.

In short

Element (Matrix), in the Video conferencing category, offers EU hosting with United Kingdom as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.

Assessment notes

Element Creations Limited (UK, formerly New Vector Ltd, founded 2017; renamed 2025) is the commercial entity behind the open-source Matrix decentralised messaging protocol created by Matthew Hodgson and Amandine Le Pape. Independent custody of the protocol sits with the Matrix.org Foundation (2018). The company holds ISO/IEC 27001:2022, Cyber Essentials Plus, and OpenChain ISO/IEC 5230, runs regional subsidiaries in Germany (Element Software GmbH) and France (Element Software SARL) for EU-customer contracting, and powers the German Bundeswehr's BwMessenger (Bundeswehr-wide secure messaging) and the French government's Tchap + Visio inside La Suite numérique. Other customers: NATO, UN, HM Government, US Space Force, US Marines, Swedish agencies. Open-source Matrix protocol + self-host as the default deployment pattern + multi-entity EU contracting: ISO 27001 certified, public DPA with disclosed sub-processors, open-source clients. The managed Element Cloud carries material CLOUD Act exposure: it runs on AWS (US hyperscaler) with US-incorporated sub-processors for CRM (HubSpot), analytics (PostHog) and comms (Twilio). Message content is E2EE, but account/operational data sits with US-jurisdiction processors, the same managed-vs-self-host duality as other sovereign messengers. Self-hosting on EU infrastructure removes the exposure entirely (effective_cloud_act_if_self_hosted: none), which is the procurement-default path for the Bundeswehr BwMessenger and French Tchap deployments.

CLOUD ACT
OWNERSHIP
SUB-PROCS
6 · 5 US
CLOUD Act by deployment

Exposure depends on how you run this product.

Hosted SaaS (default)

Vendor-operated: the sub-processors below apply.

Self-hosted (open-source)

Deploy on your own EU infrastructure and you control hosting and every sub-processor.

Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Element (Matrix)

Element is the commercial entity behind the open-source Matrix decentralised messaging-and-collaboration protocol, a Slack / Microsoft Teams / WhatsApp / Signal alternative engineered specifically for digital sovereignty and federation. The protocol was created in 2014 by Matthew Hodgson (CEO/CTO) and Amandine Le Pape (COO) while they were working at Amdocs; the commercial entity New Vector Ltd was spun out in 2017, rebranded to Element in 2020, and renamed Element Creations Limited in 2025. The Matrix protocol itself is custodied by the independent Matrix.org Foundation (established 2018), separate from Element the company, which gives the protocol the same kind of structural independence that the Linux Foundation provides for Linux.

Element's procurement-grade positioning is unmatched in the EU-sovereignty conversation. The German Bundeswehr's BwMessenger (the official secure messenger used daily by the entirety of Germany's Armed Forces) is a fork of Element built by BWI GmbH (Bundeswehr's IT supplier) and Element together; BwMessenger is described in Bundeswehr / BWI communications as "the cornerstone of the Bundeswehr's communication infrastructure". The French government's Tchap and Visio (the chat and video-conferencing components of La Suite numérique, the French government workspace suite) are both built on Matrix. Other reference customers include NATO, UN, HM Government, US Space Force, US Marines, and Swedish agencies. Certifications: ISO/IEC 27001:2022, Cyber Essentials Plus, OpenChain ISO/IEC 5230 (open-source supply-chain compliance).

Deployment is sovereign-friendly by design. Element Server Suite is sold as software that customers run on their own infrastructure, including air-gapped deployments for defence and government use, and the Matrix protocol itself is fully open source (Apache 2.0). Element's regional structure includes Element Software GmbH (Germany) and Element Software SARL (France) for EU-customer contracting, alongside the UK parent (Element Creations Ltd) and a US subsidiary (Element Software Inc). Element Cloud is the managed SaaS option. Investors include Automattic, Notion, First Minute Capital, Status, Protocol Labs, and Metaplanet. Best fit: governments, defence ministries, regulated industries, and any organisation that wants federated cross-organisation communication on a sovereign-deployable open-source protocol. The UK post-Brexit jurisdiction (other ownership tier) is the only nuance for the strictest procurement criteria. The German + French subsidiaries are available for buyers who need an EU-incorporated counterparty.

SUB-PROCESSORS

Sub-processor map · 6

Source ↗
  • Amazon Web Services (AWS) US
    United States

    Cloud infrastructure / hosting

  • HubSpot US
    United States

    CRM / customer management

  • PostHog US
    United States

    Product analytics

  • Stripe US
    United Kingdom

    Payment processing (UK entity, US parent)

  • Twilio US
    United States

    Communications / SMS services

  • Zammad EU
    Germany

    Customer support / ticketing

5 of 6 sub-processors are US-incorporated. CLOUD Act exposure applies.
CERTIFICATIONS

Frameworks & certifications

ISO/IEC 27001
ACTIVE
FEATURES

Capability matrix

Self-hostable Yes
Screen sharing Yes
End-to-end encryption Yes
Browser join (no app) Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option Yes
PRICING

Pricing & tiers

PAID
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    element.io/data-processing-agreement…
    Open ↗
  • Sub-processors list
    element.io/data-processing-agreement…
    Open ↗
  • Terms of Service
    element.io/terms-of-use…
    Open ↗
ALTERNATIVES

Alternatives in this category

kMeet (Infomaniak)
Switzerland · Founded 1994
EU-SOVEREIGN

Free Swiss browser-based video meetings (Infomaniak, Geneva, since 1994); no guest account, own Swiss DCs, ISO 27001, no CLOUD Act.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE
Olvid
France · Founded 2019
EU-BASED

French E2EE messenger (Olvid SAS, Paris, founded 2019), ANSSI CSPN certified, mandated for French government ministers; no phone number/identifier, content + metadata encrypted.

Public DPA Sub-processors Open source
FROM
€10/mo
CLOUD ACT
MINOR
Pexip
Norway · Founded 2012
EU-HOSTED

Norwegian Euronext-listed (Oslo Børs) video collaboration platform, defense + government grade; self-host or hyperscaler-cloud-of-choice.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL