Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Liberapay

VERIFIED

Association Liberapay (French non-profit association, RNA W144000981), 7 lieu dit La Croix Rouge, 29310 Querrien, France

Membership platforms · France
Founded 2015 · liberapay.com ↗

French non-profit association running an open-source recurring-donation platform: 0% platform cut, but hosted on AWS Ireland with Stripe and PayPal as the only payment routes.

In short

Liberapay, in the Membership platforms category, offers EU hosting with Ireland as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.

Assessment notes

Liberapay is a French non-profit association (RNA W144000981) running an open-source recurring-donation platform, and it is the only entry in this category that takes no cut at all: the service is funded by donations to its own Liberapay account. Governance is as clean as it gets here, with no company, no investors and an AGPL codebase. The infrastructure is the opposite. Liberapay's own legal page states that the site is hosted on AWS (Ireland), naming Amazon Web Services, Inc. in Seattle and Amazon Data Services Ireland Ltd in Dublin, and the site is fronted by Cloudflare. Payments run exclusively through Stripe and PayPal, both US-incorporated, which the project documents openly on a dedicated payment-processors page: that page is the most honest disclosure in the category and is exactly why the shortcoming is visible: Material. As a volunteer non-profit it offers no commercial DPA, which caps the score at 3/5 independently of the hosting.

CLOUD ACT
OWNERSHIP
SUB-PROCS
4 · 4 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Liberapay

Liberapay is a recurring-donation platform run as a French non-profit association, legally founded in 2015 and registered under RNA W144000981 with a postal address in Querrien, Brittany. It exists to let people fund the work of others continuously rather than in one-off bursts, and its centre of gravity is free software and open knowledge: maintainers, translators, documentation writers and similar. The platform itself is open source under AGPL, the association is run by volunteers, and the whole thing is deliberately small.

Its defining property is that Liberapay takes no cut of donations at all. The association is funded by donations to its own Liberapay account, the same mechanism it offers everyone else, so donors pay only the payment processor's fees. There are no membership tiers, no gated posts, no shop and no rewards: it is a pledge pipe, not a publishing platform, which is why several of the capability rows below are empty. The interface has been community-translated into around thirty languages, and the API and codebase are public.

For a sovereignty audit Liberapay is a study in the gap between governance and infrastructure. The governance is as European as this category gets: a French association, no investors, no company, no acquisition risk. The infrastructure is not. Liberapay's own legal page states that the site is hosted on AWS (Ireland) and names both Amazon Web Services, Inc. in Seattle and Amazon Data Services Ireland Ltd in Dublin, so records sit in Ireland under an American operator, and Cloudflare sits in front of the site. Payments go through Stripe and PayPal only, both US-incorporated, a fact the project sets out plainly on its own payment-processors page rather than hiding: Material. That page is the single best piece of disclosure in this category and is also the clearest illustration of the category's central problem. As a volunteer association Liberapay signs no commercial DPA. Best fit: open-source and free-knowledge projects for whom a zero-commission, non-profit, auditable platform outweighs the American plumbing underneath.

SUB-PROCESSORS

Sub-processor map · 4

Source ↗
  • Amazon Data Services Ireland Ltd (AWS) US
    Ireland

    Website and application hosting in Dublin; the legal page names Amazon Web Services, Inc. (Seattle) alongside the Irish entity

  • Cloudflare, Inc. US
    United States

    CDN and DDoS protection in front of liberapay.com (named in the privacy page as setting cookies on visitors)

  • PayPal (Europe) S.à r.l. et Cie, S.C.A. US
    Luxembourg

    Donation processing for donors and creators outside Stripe's supported countries

  • Stripe, Inc. US
    United States

    Donation processing, SEPA direct debits, automatic renewals and creator payouts

4 of 4 sub-processors are US-incorporated. CLOUD Act exposure applies.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-08-10).
FEATURES

Capability matrix

Recurring memberships Yes
One-off tips No
Pay-per-post No
Members-only content hosting No
Digital shop No
Connect your own payment account No
VAT collected and remitted for you No
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option Yes
PRICING

Pricing & tiers

FREE
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement. This is recorded as no public DPA (see How we assess).
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    liberapay.com/about…
    Open ↗
  • Terms of Service
    liberapay.com/about…
    Open ↗
ALTERNATIVES

Alternatives in this category

Herohero
Czechia · Founded 2021
US-LINKED

Czech creator membership platform (Herohero a.s., Prague): flat 10% all-in fee and strong local reach, but the terms also contract through a Delaware corporation and content sits on Google Storage.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
DIRECT
Ko-fi
United Kingdom
EU-HOSTED

UK creator platform (Ko-fi Labs Limited) for tips, memberships and digital shops: 0-5% service fee, but payouts run only through PayPal, Inc. or Stripe, Inc., with no EU payment option.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL
Patronite
Poland · Founded 2015
EU-HOSTED

Poland's creator membership platform (Crowd8 sp. z o.o.): 6.5% commission with Polish payment rails, Tpay and ING's Imoje, on AWS Frankfurt infrastructure.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MATERIAL