Skip to content
Independently verified · Quarterly re-audit
EU VETTED

HumHub

VERIFIED
Docs & wikis · Germany
Founded 2015 · humhub.com ↗

Munich-based AGPLv3 open-source enterprise social network + intranet (HumHub GmbH & Co. KG, 2015), 4,500+ organisations, self-hostable on EU infra.

In short

HumHub, in the Docs & wikis category, is an EU-owned service with Germany as its hosting location and no identified CLOUD Act exposure.

Assessment notes

HumHub GmbH & Co. KG (Munich, Germany; spun off as an independent company in early 2015 from the Munich-based web agency zeros+ones) is an AGPLv3 open-source enterprise social network and intranet platform with optional commercial licence, 4,500+ organisations on the platform across 30+ languages, both Community (free open source) and Professional (commercial) editions, and an 80+ module marketplace. Used by corporations, municipalities, charities, foundations, clubs, political parties, schools, and universities: strong cross-sector EU adoption pattern. Signals: EU-owned (German GmbH & Co. KG), EU-hosted, AGPLv3 open source, no PE / VC / parent on record, no CLOUD Act exposure on self-hosted deployments. Gap: no publicly accessible DPA download link and no formal sub-processors list for the hosted Professional Edition.

CLOUD ACT
OWNERSHIP
SUB-PROCS
0 none disclosed
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About HumHub

HumHub is a Munich-headquartered German open-source enterprise social-network and intranet platform operated by HumHub GmbH & Co. KG and originally spun off from the Munich web agency zeros+ones in early 2015 as an independent company. The codebase is built on the Yii PHP framework and licensed under GNU Affero General Public License v3 with an optional commercial licence for buyers who need exemption from the AGPL copyleft. The product reports 4,500+ organisations on the platform across 30+ UI languages: a customer base that spans corporations and SMEs, cities and municipalities, social and charitable institutions, foundations and clubs, political parties, and educational institutions (schools, universities).

Two product editions ship: Community Edition is fully open-source, free to self-host on any infrastructure (Hetzner, OVHcloud, Scaleway, IONOS, STACKIT, on-bare-metal); Professional Edition is commercially licensed with enterprise features, formal support, and managed SaaS hosting. The 80+ optional modules are distributed via the HumHub marketplace and cover use-cases like LDAP / SAML SSO, calendar, tasks, polls, custom pages, Mattermost-style chat, file storage, and dozens of integrations. The combination of a permissive baseline + paid-tier monetisation gives HumHub structural sustainability without requiring VC dilution: the company is HumHub GmbH & Co. KG with no PE / VC / parent on record.

For procurement-grade EU buyers HumHub sits at the top of the docs / wikis / knowledge category by ownership architecture: German GmbH & Co. KG legal structure, AGPLv3 source-availability, self-host as the recommended default for sovereignty, "Open Source Software made in Germany" branded positioning, and a cross-sector public-sector + non-profit customer base that signals procurement-friendliness. Pricing for the Professional Edition is enterprise / sales-engaged; specific EUR tier figures were not captured at audit. Best fit: German and EU corporates building internal intranets and social networks, EU public-sector and educational buyers needing AGPLv3 source-availability for forking flexibility, non-profits and clubs that benefit from the free Community Edition, and any procurement-grade buyer who wants a structurally clean German open-source vendor.

SUB-PROCESSORS

Sub-processor map · none disclosed

Source ↗
Vendor discloses zero sub-processors. All data processing happens in-house.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-18).
FEATURES

Capability matrix

Self-hostable Yes
Public publishing Yes
Version history Yes
Granular permissions Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option Yes
PRICING

Pricing & tiers

FREEMIUM
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

DPA accessibility is not scored for this listing. Self-hosted or local software, vendors that are not data processors, and products carrying a SecNumCloud, EUCS or BSI C5 certification are not assessed on DPA accessibility. See How we assess.
  • Data Processing Addendum (DPA)
    — not assessed
    n/a
  • Sub-processors list
    www.humhub.com/en…
    Open ↗
  • Terms of Service
    www.humhub.com/en…
    Open ↗
ALTERNATIVES

Alternatives in this category

Anytype
Germany · Founded 2019
EU-SOVEREIGN

Berlin-based local-first peer-to-peer E2E-encrypted knowledge OS (Anytype, 2019); Any Source Available License; data lives on user device.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE
BookStack
United Kingdom · Founded 2015
EU-BASED

UK solo-dev MIT-licensed self-hosted wiki + documentation platform (Dan Brown, 2015); no SaaS, no vendor counterparty risk.

Public DPA Sub-processors Open source
FROM
€0/mo
CLOUD ACT
NONE
Collabora Online
United Kingdom · Founded 2012
EU-BASED

Cambridge-based LibreOffice Online (MPL-2.0/LGPL) by Collabora Productivity Ltd: free CODE dev edition + €3/user/mo Business; self-hostable on EU infra.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MINOR