European Alternatives to GitHub
GitHub is the dominant code hosting platform, owned by Microsoft since 2018. Your source code, issues, and development history are stored on US servers and used to train GitHub Copilot AI models.
Why Switch from GitHub?
- ⚠Microsoft (US) owns and controls your intellectual property platform
- ⚠Public repositories used to train Copilot AI without explicit consent
- ⚠Subject to US CLOUD Act — Microsoft can be compelled to share your code
- ⚠Centralised control: account bans can happen without warning
Is GitHub GDPR Compliant?
Is GitHub GDPR compliant? GitHub, Inc. was acquired by Microsoft in 2018 for $7.5 billion. As a wholly-owned subsidiary of Microsoft Corporation, GitHub is subject to the US CLOUD Act. US authorities can compel Microsoft to produce your source code, commit history, issue discussions, and private repository data without notifying repository owners. This applies even when GitHub servers are located in the EU.
GitHub Copilot and intellectual property: in 2021, GitHub Copilot launched having been trained on billions of lines of public repository code — without explicit consent from code authors. While GitHub has since introduced consent mechanisms for future training, this incident illustrates the risk of storing intellectual property on a US platform with opaque AI policies. Microsoft's terms allow broad use of data to improve Microsoft products including Azure AI services.
GitHub GDPR data processing: GitHub provides a DPA and uses SCCs for EU-US transfers. However, FISA Section 702 allows US intelligence agencies to compel Microsoft to produce data on non-US persons regardless of server location. No DPA or SCC can override this. For companies whose source code represents their core IP — fintech algorithms, medical software, security tools — this creates genuine risk.
GitHub GDPR Germany: the German Sovereign Tech Fund, funded by the German Federal Ministry for Economic Affairs, explicitly supports European open-source code hosting infrastructure including Forgejo and Codeberg as GDPR-compliant alternatives. Several German federal and state government agencies host sensitive code on self-managed Forgejo instances rather than GitHub. The Bundeswehr and German intelligence services do not use GitHub for classified code.
European code hosting alternatives provide genuine sovereignty. Codeberg (Germany) is a non-profit, community-run platform in Berlin — free, open-source, and with all infrastructure operated under German law. Forgejo is the fully open-source, self-hostable Git platform — ideal for enterprises needing complete control. Both support Git workflows, CI/CD via Woodpecker CI, and issue tracking with zero US jurisdiction exposure.
2 European Alternatives
Sorted by privacy score
Codeberg
Non-profit code hosting based in Berlin. Community-owned, powered by Forgejo.
| Tool | Score | Privacy | Pricing | OSS | EU Data | Country | |
|---|---|---|---|---|---|---|---|
#1Codeberg Non-profit code hosting based in Berlin. Community-owned, powered by Forgejo. High Trust | 84 | 94 | Free | ✓ | ✓ | 🇩🇪 | |
Self-hosted software forge. Git repos, CI/CD, issues — community-governed. High Trust | 82 | 96 | Free | ✓ | ✓ | 🇪🇺 |
Non-profit code hosting based in Berlin. Community-owned, powered by Forgejo.
Self-hosted software forge. Git repos, CI/CD, issues — community-governed.
GitHub vs. European Alternatives — Feature Comparison
| Feature | GitHub | Codeberg | Forgejo | GitLab |
|---|---|---|---|---|
| EU Servers | ✗ | ✓ | (Self-host) | Optional |
| Open Source | ✗ | ✓ | ✓ | ✓ |
| Non-Profit | ✗ | ✓ | ✗ | ✗ |
| Self-Hosting | ✗ | ✗ | ✓ | ✓ |
| GDPR Compliant | ⚠ | ✓ | ✓ | ✓ |
| Free Tier | ✓ | ✓ | ✓ | ✓ |
✓ = available · ✗ = not available · ⚠ = limited / US data transfer risk
Frequently Asked Questions
What are the best European alternatives to GitHub?
Codeberg (Germany) is a community-run non-profit Git hosting service based in Berlin — free, open-source, and privacy-first. Forgejo is a self-hostable Git platform (fork of Gitea). Both support all standard Git workflows, CI/CD, and issue tracking.
Is Codeberg feature-comparable to GitHub?
Codeberg supports repositories, issues, pull requests, wikis, releases, and has growing CI/CD support via Woodpecker CI integration. It lacks some enterprise features but is excellent for open-source and private projects.
Can I migrate my GitHub repositories to Codeberg?
Yes — Codeberg has a built-in migration tool that imports repositories, issues, pull requests, and labels directly from GitHub. The migration preserves your development history.
Is Codeberg free?
Yes — Codeberg is entirely free for individuals and organisations. It's run as a non-profit German association funded by donations, with no advertising or data monetisation.
Is GitHub GDPR compliant?
With caveats. GitHub is owned by Microsoft (US), subject to the CLOUD Act. Microsoft can be compelled to produce your source code without notifying you. GitHub Copilot was controversially trained on public repositories. For sovereign code hosting, Codeberg (Germany non-profit) and self-hosted Forgejo provide GDPR compliance with no US jurisdiction exposure.
Is it safe to host private code on GitHub?
GitHub encrypts data in transit and at rest, but Microsoft holds the keys and US authorities can demand access under the CLOUD Act. For sensitive business code, proprietary algorithms, or government projects, self-hosted Forgejo or Codeberg provide better data sovereignty. Multiple EU governments, including Germany, host sensitive code on Forgejo rather than GitHub.