Taiga
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign This listing EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Spanish open-source agile PM (Taiga by Kaleidos, Madrid, 2014), MPL-2.0, Scrum + Kanban; self-hostable + tree.taiga.io managed cloud.
Taiga is an EU-owned service hosted in Spain, with no identified CLOUD Act exposure. It is listed under Project management.
Assessment notes
Taiga is the open-source agile project-management platform operated by Kaleidos (Madrid, Spain; founded 2014), released under Mozilla Public License 2.0 with the full server-side stack available on GitHub for self-host on any EU infrastructure: Scrum, Kanban, issue tracking, customisable dashboards; the hosted tier (tree.taiga.io) provides the managed alternative for teams who don't want to operate the stack themselves. Self-hosting on EU infrastructure gives the customer full data control with no CLOUD Act exposure; the managed-cloud tier is EU-owned with a public DPA and ES-only named sub-processors (verified 2026-05-18), hosted at the Interxion MAD3 datacentre in Madrid, where Digital Realty/Interxion acts only as the physical colocation landlord with no logical access to customer data and no US-owned hyperscaler sits in the customer-data path, so under a customer-data-at-rest definition CLOUD Act exposure is none.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned This listing EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- 2 · 1 US
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Yes
-
Public DPA: Yes
-
Sub-processors disclosed: Yes
-
Open-source clients: Yes
-
Third-party certification: No
Jump to
About Taiga
Taiga is the open-source agile project-management platform operated by Kaleidos, a Madrid-based Spanish software cooperative that built and continues to maintain the project since 2014. The platform is positioned as the open-source Jira / Linear / Clickup alternative: Scrum sprints, Kanban boards, issue tracking, customisable dashboards, video-call integrations, and a wiki module, all under the Mozilla Public License 2.0 with the full server-side code on GitHub. Taiga is widely used in EU public administrations, universities, and open-source-friendly engineering teams.
Two deployment paths are offered. Self-hosted on the customer's own infrastructure (Hetzner / OVHcloud / Scaleway / private DC) makes the customer the sole data controller and operator, with no CLOUD Act exposure. The managed cloud at tree.taiga.io is the alternative for teams who prefer not to run the stack themselves; the managed tier runs from the Interxion MAD3 datacentre in Madrid, where Digital Realty/Interxion is only the physical colocation landlord with no logical access to customer data and no US-owned hyperscaler sits in the customer-data path, so under a customer-data-at-rest definition its CLOUD Act exposure is none. The combination of MPL-2.0 licensing and a Spanish-owned operating cooperative makes Taiga the strongest agile / Scrum entry on this directory.
Pricing for the managed cloud is charged per account with unlimited users rather than per seat: Free covers one public and one private project with 10 MB; Enthusiast €5/month or €50/year covers five public and five private projects with 100 MB; Basic is €20/month or €200/year and Premium €60/month or €600/year, both with unlimited projects; Private Cloud and On-Premise are by quote. Best fit: EU public-sector procurement, universities, open-source-aligned engineering teams, and any organisation that wants a Jira replacement under EU jurisdiction and AGPL-style open governance.
Sub-processor map · 2
-
Interxion MAD3 (Digital Realty) USSpain
Physical datacenter operations and facilities (Madrid); ancillary (physical-only colocation landlord, no data access)
-
AITIRE CLOUD EUSpain
Infrastructure as a Service (IaaS) hosting and management
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| Interxion MAD3 (Digital Realty) | Spain | Physical datacenter operations and facilities (Madrid); ancillary (physical-only colocation landlord, no data access) | US |
| AITIRE CLOUD | Spain | Infrastructure as a Service (IaaS) hosting and management | EU |
Source: the vendor’s published sub-processor list, read 26 Aug 2026.
Frameworks & certifications · none listed
Capability matrix
Table 2Capabilities of Taiga
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
Netherlands · $10/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: No Open source: Yes -
-
Germany · €19.99/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Not assessed Sub-processors: No Open source: No -
-
Germany · €99/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: No Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Baserow
Netherlands
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: No
Open source: Yes
|
$10/mo |
factro
Germany
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Not assessed
Sub-processors: No
Open source: No
|
€19.99/mo |
HansaChat
Germany
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: No
Sub-processors: Yes
Open source: No
|
€99/mo |