Skip to content
Independently verified · Quarterly re-audit
EU VETTED

HumHub

VERIFIED
Docs & wikis · Germany
Founded 2015 · humhub.com ↗

Munich-based AGPLv3 open-source enterprise social network + intranet (HumHub GmbH & Co. KG, 2015), 4,500+ organisations, self-hostable on EU infra.

Why this score?

HumHub GmbH & Co. KG (Munich, Germany; spun off as an independent company in early 2015 from the Munich-based web agency zeros+ones) is an AGPLv3 open-source enterprise social network and intranet platform with optional commercial licence, 4,500+ organisations on the platform across 30+ languages, both Community (free open source) and Professional (commercial) editions, and an 80+ module marketplace. Used by corporations, municipalities, charities, foundations, clubs, political parties, schools, and universities — strong cross-sector EU adoption pattern. Self-host on EU infrastructure yields effective 5/5 / none CLOUD Act posture; GmbH & Co. KG ownership, German engineering, no PE / VC / parent on record — full 5/5.

SCORE
5.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
JUMP TO
OVERVIEW

About HumHub

HumHub is a Munich-headquartered German open-source enterprise social-network and intranet platform operated by **HumHub GmbH & Co. KG** and originally spun off from the Munich web agency **zeros+ones** in early 2015 as an independent company. The codebase is built on the Yii PHP framework and licensed under **GNU Affero General Public License v3** with an optional commercial licence for buyers who need exemption from the AGPL copyleft. The product reports **4,500+ organisations** on the platform across 30+ UI languages — a customer base that spans corporations and SMEs, cities and municipalities, social and charitable institutions, foundations and clubs, political parties, and educational institutions (schools, universities). Two product editions ship: **Community Edition** is fully open-source, free to self-host on any infrastructure (Hetzner, OVHcloud, Scaleway, IONOS, STACKIT, on-bare-metal); **Professional Edition** is commercially licensed with enterprise features, formal support, and managed SaaS hosting. The **80+ optional modules** are distributed via the HumHub marketplace and cover use-cases like LDAP / SAML SSO, calendar, tasks, polls, custom pages, Mattermost-style chat, file storage, and dozens of integrations. The combination of a permissive baseline + paid-tier monetisation gives HumHub structural sustainability without requiring VC dilution — the company is HumHub GmbH & Co. KG with no PE / VC / parent on record. For procurement-grade EU buyers HumHub sits at the top of the docs / wikis / knowledge category by ownership architecture: German GmbH & Co. KG legal structure, AGPLv3 source-availability, self-host as the recommended default for sovereignty, "Open Source Software made in Germany" branded positioning, and a cross-sector public-sector + non-profit customer base that signals procurement-friendliness. Pricing for the Professional Edition is enterprise / sales-engaged; specific EUR tier figures were not captured at audit. Best fit: German and EU corporates building internal intranets and social networks, EU public-sector and educational buyers needing AGPLv3 source-availability for forking flexibility, non-profits and clubs that benefit from the free Community Edition, and any procurement-grade buyer who wants a structurally clean German open-source vendor.
SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-18).
FEATURES

Capability matrix

INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option Yes
PRICING

Pricing & tiers

FREEMIUM
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

DPA accessibility is not scored for this listing. Self-hosted or local software, vendors that are not data processors, and products carrying a SecNumCloud, EUCS or BSI C5 certification are not assessed on DPA accessibility — see How we score.
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — not assessed
    n/a
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    www.humhub.com/en…
    Open ↗
ALTERNATIVES

Alternatives in this category