Zum Inhalt springen
Unabhängig verifiziert · Quartalsweises Re-Audit
EU VETTED

Outline

VERIFIZIERT
Docs & Wikis · United States
Founded 2016 · getoutline.com ↗

US-incorporated open-source-style wiki (Outline, NYC) under BSL licence; self-hostable for EU sovereignty, but hosted cloud is US.

Warum diese Bewertung?

Outline is US-incorporated as General Outline, Inc. (New York City) — founder Tom Moor — despite the open-source-style positioning. Source code is published under the Business Source License (BSL) which permits self-hosting but explicitly forbids competing hosted services; older versions (v0.62.0 and earlier) revert to Apache 2.0 four years after publication (March 2026 onwards). Hosted cloud is US-region; the company itself is us_owned with direct CLOUD Act exposure under our strict-ownership stance. Score 3/5 reflects the strong self-host pathway on EU infrastructure (effective 5/5 / none for that path); the hosted cloud should not be procurement-grade listed for EU buyers — procurement-grade alternatives in this category include HumHub (DE, AGPLv3), Nuclino (DE), Cryptpad (FR), OnlyOffice (LV), or BookStack (UK MIT).

SCORE
3.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
JUMP TO
OVERVIEW

About Outline

Outline is a US-incorporated open-source-style knowledge-base and wiki product, operated by **General Outline, Inc.** in **New York City** and originally founded by **Tom Moor**. The product positions itself as a fast, beautiful, real-time-collaborative knowledge base for teams — feature-comparable to Notion and Confluence but with a leaner UX and an open-source codebase on GitHub (outline/outline). The product targets fast-growing software teams, has built a strong following in the developer-tools community, and supports 20+ languages with RTL support, dark mode, Slack and Figma integrations. For an EU-sovereignty audit Outline is the canonical "open-source license ≠ EU-controlled" case alongside Cal.com. The licence is the **Business Source License (BSL)** — open-source in spirit but with a competitor-hosting prohibition that excludes Outline from the OSI-approved open-source definition. The BSL contract specifies that the codebase reverts to **Apache 2.0** four years after publication date, so v0.62.0 (and earlier) became Apache 2.0 in March 2026. This means **buyers can fully self-host the licence-converted Apache 2.0 versions on EU infrastructure** (Hetzner, OVHcloud, Scaleway, IONOS, STACKIT) with no licence-restriction concerns and achieve effective 5/5 / none CLOUD Act posture for that path. The **hosted Outline cloud, by contrast, is operated from the US by General Outline, Inc., which is `us_owned` and subject to US extraterritorial law by default — `direct` CLOUD Act exposure**. Score 3/5 in this directory reflects exactly that split: the self-host path on EU infrastructure is procurement-grade-friendly, but the managed cloud should not be the first choice for EU buyers when category alternatives like **HumHub (DE, AGPLv3, German GmbH)**, **Nuclino (DE)**, **Cryptpad (FR, E2E-encrypted)**, **OnlyOffice (LV)**, **BookStack (UK, MIT-licensed self-host)**, or **Wiki.js (open source self-host)** offer structurally cleaner EU-controlled ownership. Best fit: EU developer teams who specifically want Outline's UX and are willing to self-host on EU infrastructure under the converted Apache 2.0 versions.
SUB-PROCESSORS

Unterauftragsverarbeiter-Karte · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Rahmenwerke & Zertifizierungen · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-11).
FEATURES

Funktionsmatrix

INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option Yes
PRICING

Preise & Tarife

KOSTENPFLICHTIG
Individuelle Preise

Kontaktieren Sie den Anbieter für Staffel- oder Mengenpreise.

Preisseite ansehen ↗
PUBLIC DOCUMENTS

Öffentliche Dokumente

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement — this caps the compliance score (see How we score).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    www.getoutline.com/terms…
    Open ↗
ALTERNATIVES

Alternativen in dieser Kategorie