Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Planio

VERIFIED

Planio GmbH, Berlin, Germany

Git hosting · Germany
Founded 2009 · plan.io ↗

Berlin-based hosted Redmine (Planio GmbH) with unlimited Git and SVN repositories, on the company's own German servers; account-gated Art. 28 DPA.

In short

Planio, in the Git hosting category, is an EU-owned service with Germany as its hosting location and no identified CLOUD Act exposure.

Assessment notes

Planio is a Berlin-based hosted Redmine platform operated by Planio GmbH, a founder-owned, bootstrapped German company (managing director Jan Schulz-Hofen), that bundles hosted Git and Subversion repositories into a project-management product. Signals: EU-owned German GmbH, all data on the company's own servers in Germany (an ISO 27001-certified Hetzner facility in the Vogtland region, with encrypted backup to a second data centre in Frankfurt), no US ownership and no US sub-processors: [[planio.cloud_act]]. A commissioned data-processing agreement under Art. 28 GDPR is offered free of charge, but it is reachable only inside a logged-in customer account rather than published openly, which caps the score at 4/5. Note that Git here is repository hosting inside a Redmine issue-tracker, not a GitHub-style forge: there is no pull-request review flow, CI/CD, or package or container registry.

CLOUD ACT
OWNERSHIP
SUB-PROCS
1 · 0 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Planio

Planio is a hosted project-management platform built on the open-source Redmine framework, operated by Planio GmbH in Berlin. Founded in 2009 by Jan Schulz-Hofen and run as a bootstrapped, founder-owned company, it bundles issue tracking, agile boards, a help desk, team chat, and file storage with unlimited hosted Git and Subversion repositories governed by Redmine's role-based permissions and reachable over HTTPS or SSH. It is best understood as a project-management tool with integrated version control rather than a GitHub-style forge.

For an EU-sovereignty audit Planio's posture is strong on the fundamentals: it is an EU-owned German GmbH, and all customer data is kept on the company's own servers in Germany, in an ISO 27001-certified Hetzner facility in the Vogtland region, with an encrypted backup to a second data centre in Frankfurt. Planio states a deliberate policy of avoiding third-party cloud services for customer data, so there is no US sub-processor and no CLOUD Act exposure: [[planio.cloud_act]]. A commissioned data-processing agreement under Art. 28 GDPR is provided free of charge and can be signed online, but it lives inside the logged-in customer account rather than on a public page, which is the single factor holding the compliance score at 4/5 for buyers who need to review the DPA before signing up.

Pricing is a freemium model: a free Bronze tier (1 project, 2 users, 1 GB) up to paid plans from [[planio.price_from]] per month, all including unlimited Git and SVN repositories. The important trade-off versus a dedicated forge is feature scope: Planio has no pull-request or merge-request review workflow, no built-in CI/CD, and no package or container registry, because its centre of gravity is Redmine project management. Best fit: German and European teams, agencies, and public-sector buyers who want issue tracking and hosted repositories in one EU-owned, German-hosted tool, and who value data residency over forge-specific developer features.

SUB-PROCESSORS

Sub-processor map · 1

  • Hetzner Online GmbH EU
    Germany

    Server hosting / colocation (ISO 27001-certified facility, Vogtland) and encrypted off-site backup (Frankfurt)

Zero US-incorporated sub-processors.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-07-21).
FEATURES

Capability matrix

Self-hostable No
CI/CD No
Pull/merge requests No
Issue tracking Yes
Package registry No
Container registry No
Repo import/migration Yes
Free tier Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option No
PRICING

Pricing & tiers

FREEMIUM
from €19/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement. This is recorded as no public DPA (see How we assess).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    plan.io/data-protection…
    Open ↗
ALTERNATIVES

Alternatives in this category

Codebahn
Sweden
EU-SOVEREIGN

Swedish-run (Hackerman AB) managed Forgejo forge with EU-only CI: flat-rate, bootstrapped, all-EU sub-processors, public DPA.

Public DPA Sub-processors Open source
FROM
€9/mo
CLOUD ACT
NONE
Codeberg
Germany · Founded 2018
EU-SOVEREIGN

Berlin non-profit (Codeberg e.V.) running the open-source Forgejo forge: free, EU-hosted, community-governed GitHub alternative.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE
GitLab by Stackhero
France
EU-BASED

French-operated managed GitLab CE (Stackhero) on a dedicated EU-region VM; ISO 27001:2022, public DPA; hosting region is customer-selected.

Public DPA Sub-processors Open source
FROM
€49/mo
CLOUD ACT
MINOR