Skip to content
EU VETTED

Planio

Planio GmbH, Berlin, Germany

Git hosting · Germany
Founded 2009 · plan.io

Berlin-based hosted Redmine (Planio GmbH) with unlimited Git and SVN repositories, on the company's own German servers; account-gated Art. 28 DPA.

Planio is an EU-owned service hosted in Germany, with no identified CLOUD Act exposure. It is listed under Git hosting.

Assessment notes

Planio is a Berlin-based hosted Redmine platform operated by Planio GmbH, a founder-owned, bootstrapped German company (managing director Jan Schulz-Hofen), that bundles hosted Git and Subversion repositories into a project-management product. Signals: EU-owned German GmbH, all data on the company's own servers in Germany (an ISO 27001-certified Hetzner facility in the Vogtland region, with encrypted backup to a second data centre in Frankfurt), no US ownership and no US sub-processors: None. A commissioned data-processing agreement under Art. 28 GDPR is offered free of charge, but it is reachable only inside a logged-in customer account rather than published openly, which caps the score at 4/5. Note that Git here is repository hosting inside a Redmine issue-tracker, not a GitHub-style forge: there is no pull-request review flow, CI/CD, or package or container registry.

Findings

CLOUD Act
Ownership
Sub-processors
1 · 0 US

Verified signals

Jurisdiction
  • EU / adequacy hosting: Yes
  • EU / adequacy operator: Yes
  • No US CLOUD Act exposure: Yes
Transparency
  • Public DPA: No
  • Sub-processors disclosed: No
  • Open-source clients: No
  • Third-party certification: No
Jump to

About Planio

Planio is a hosted project-management platform built on the open-source Redmine framework, operated by Planio GmbH in Berlin. Founded in 2009 by Jan Schulz-Hofen and run as a bootstrapped, founder-owned company, it bundles issue tracking, agile boards, a help desk, team chat, and file storage with unlimited hosted Git and Subversion repositories governed by Redmine's role-based permissions and reachable over HTTPS or SSH. It is best understood as a project-management tool with integrated version control rather than a GitHub-style forge.

For an EU-sovereignty audit Planio's posture is strong on the fundamentals: it is an EU-owned German GmbH, and all customer data is kept on the company's own servers in Germany, in an ISO 27001-certified Hetzner facility in the Vogtland region, with an encrypted backup to a second data centre in Frankfurt. Planio states a deliberate policy of avoiding third-party cloud services for customer data, so there is no US sub-processor and no CLOUD Act exposure: None. A commissioned data-processing agreement under Art. 28 GDPR is provided free of charge and can be signed online, but it lives inside the logged-in customer account rather than on a public page, which is the single factor holding the compliance score at 4/5 for buyers who need to review the DPA before signing up.

Pricing is a freemium model: a free Bronze tier (1 project, 2 users, 1 GB) up to paid plans from €19 per month, all including unlimited Git and SVN repositories. The important trade-off versus a dedicated forge is feature scope: Planio has no pull-request or merge-request review workflow, no built-in CI/CD, and no package or container registry, because its centre of gravity is Redmine project management. Best fit: German and European teams, agencies, and public-sector buyers who want issue tracking and hosted repositories in one EU-owned, German-hosted tool, and who value data residency over forge-specific developer features.

Sub-processor map · 1

  • Hetzner Online GmbH EU
    Germany

    Server hosting / colocation (ISO 27001-certified facility, Vogtland) and encrypted off-site backup (Frankfurt)

Source: the vendor’s published sub-processor list, read 21 Jul 2026.

No US-owned or US-based sub-processors.

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-07-21).

Capability matrix

Table 2Capabilities of Planio

Self-hostable No
CI/CD No
Pull/merge requests No
Issue tracking Yes
Package registry No
Container registry No
Repo import/migration Yes
Free tier Yes

Integration & access

REST API Yes
SSO (SAML / OIDC) Yes

Compliance & governance

Audit log Yes
Self-host / on-prem option No

Pricing & tiers

from €19/mo
Freemium
View pricing page

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement. This is recorded as no public DPA (see How we assess).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    plan.io/data-protection…
    Open

Alternatives in this category

  • Codebahn
    Sweden · €9/mo
    EU-Sovereign
    Public DPA: Yes Sub-processors: Yes Open source: Yes
  • Codeberg
    Germany
    EU-Sovereign
    Public DPA: No Sub-processors: No Open source: Yes
  • GitLab by Stackhero
    France · €49/mo
    EU-Based
    Public DPA: Yes Sub-processors: Yes Open source: Yes
See all git hosting alternatives

Featured in these guides