# Hygraph — Content Marketing

Hygraph by Hygraph GmbH holds a panel rating of 2/5 from 6 AI judges (category median 2.5/5), as of 2026-10-15. Provenance: EU-Made; sovereignty: not determined.

- Vendor: Hygraph GmbH (https://hygraph.com)
- Category: [Content Marketing](https://whats-best.ai/software/content-marketing.md)
- Provenance (editorial classification): EU-Made
- Canonical page: https://whats-best.ai/software/content-marketing/hygraph
- Alternatives: https://whats-best.ai/software/content-marketing/hygraph/alternatives ([markdown](https://whats-best.ai/software/content-marketing/hygraph/alternatives.md))
- Data as of: 2026-10-20 · evaluated 2026-10-15 · oldest source captured 2026-10-13

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Hygraph GmbH
- Headquarters: Not stated on the vendor’s pages as of 13 Oct 2026
- Data hosting: Not stated on the vendor’s pages as of 13 Oct 2026
- Free plan: Yes, per the vendor’s own page [S5]

## The panel's verdict

Hygraph is a GraphQL-native headless CMS from Hygraph GmbH of Berlin. Distribution and integrations draws the strongest scores, 6-7: webhooks are documented with HMAC-SHA256 signatures, a stated retry policy and logs, rate limits of 5, 25 and up to 500 uncached requests per second are published per plan, and a marketplace names connectors across commerce, assets, hosting, PIM and localization. Content model and reuse scores 4-7, with a genuine split: scores cluster at 6-7 on the schema editor, reference fields and five named translation connectors, while the Skeptic's 4 turns on portability — no documented export of content, model and locales. Weakest are editorial planning at 1-2 (content stages and comment assignment; no public information on calendars, briefs or workload views), AI and content rights at 1-3 (no public information on model, provider, prompt processing or training use), sovereignty at 0-3 (a Berlin contracting entity on the imprint; residency, ownership and subprocessor exposure recorded as unknown), and pricing transparency at 1-4 (concrete limits but no price figures, so an annual cost is not computable from the captured pages).

**Speaks for it:**
- Webhooks documented end to end — HMAC-SHA256 signatures, a stated retry policy of 4 retries on top of the initial request, logs, pause and resume.
- Rate limits of 5, 25 and up to 500 uncached requests per second published per plan, alongside API token, webhook and content-stage limits.
- Schema editor with models, fields, components and enumerations, reference fields linking entries, and localized fields carried in webhook payloads.
- Marketplace names connectors across commerce, digital assets, hosting, localization and product information, including Lokalise, Crowdin, DeepL, EasyTranslate and Smartling.
- AI Assist shows every suggestion in a review panel before anything is written, and token usage is visible on the Billing page.

**Held against it:**
- Planning on the captured pages stops at content stages and comment assignment; we found no public information on a calendar, briefs, campaigns or workload views.
- We found no public information on version history with restore, mandatory reviewers, guest or freelancer access, or an audit log of who published what.
- We found no public information on which AI model or provider processes prompts, where that processing happens, or whether customer content trains the models.
- Sovereignty attributes for data residency, ownership and subprocessor exposure are recorded as unknown, not confirmed on the vendor's own pages as captured.
- No price figures on the captured pricing pages, and no public information on seat costs, locale or record limits or overage rates, so an annual cost is not computable.

**Best for:**
- You build composable sites and apps and need a GraphQL-native delivery API with signed, retrying, logged webhooks.
- You run multilingual content and want named translation connectors working alongside localized fields in webhook payloads.
- You plan editorial work in external tools and need structured, reusable content models with reference fields between entries.

**Avoid if:**
- You need an editorial calendar, briefs, due dates and campaign grouping inside the CMS itself.
- Your procurement requires confirmed data residency, a published subprocessor list and a data processing agreement before signature.
- You must know which AI model processes your content, where, and whether it trains on it before switching AI features on.
- You need to compute an annual budget from publicly published prices before committing.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price.

| Criterion | The Head of Content | The SME Marketer | The Localisation Lead | The Web Engineer | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Planning, editorial calendar & briefs | 1/5 | 0.5/5 | 1/5 | 1/5 | 1/5 | 0.5/5 |
| Creation, review & approval | 1.5/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Structured content, localisation & export | 3/5 | 3/5 | 3.5/5 | 3/5 | 3/5 | 2/5 |
| Publishing, distribution & integrations | 3/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 |
| AI assistance & content rights | 1/5 | 0.5/5 | 1.5/5 | 1.5/5 | 1/5 | 1/5 |
| European sovereignty | 1.5/5 | 1/5 | 1/5 | 1.5/5 | 0.5/5 | 0/5 |
| Pricing transparency | 1.5/5 | 1/5 | 1/5 | 2/5 | 2/5 | 0.5/5 |
| **Weighted verdict** | **1.5/5** | **1.5/5** | **2.5/5** | **2.5/5** | **1.5/5** | **1.5/5** |

### The judges

- **The Head of Content** (v1.0): Runs an editorial team of six plus freelancers and answers for what goes live. Wants briefs that carry the goal to the writer, a calendar that shows what is late, and an approval trail that says which version legal released — not a status anyone can flip to "approved".
- **The SME Marketer** (v1.0): Is the marketing department of a 120-person Mittelstand company and writes half the content with an AI assistant. Wants to know who owns what the model wrote, whether her drafts train it, and what the plan costs once she adds a second language and the agency as guests.
- **The Localisation Lead** (v1.0): Ships every piece in German, English and French for the DACH region and beyond. Wants locales on the field, not copies of the entry, translation status per language, and a documented export of content, model and locales — because a repository that cannot leave is a hostage, not an asset.
- **The Web Engineer** (v1.0): Builds the website and the integrations the content flows through. Wants a versioned API with published rate limits, webhooks on publish, preview environments, and a migration CLI that works in both directions — and reads "headless" as a promise about the API, not a logo.
- **The Data Protection Officer** (v1.0): Signs off every tool that stores the company's drafts, author profiles and campaign data. Wants the contracting entity and hosting region named, the subprocessor list with the AI providers on it, prompt retention in days, and training on customer content excluded in the terms rather than in a blog post.
- **The Skeptic** (v1.0): Has read "AI-powered content at scale", "one source of truth for every channel" and "no lock-in, it's headless" on every page in this category. Reads instead for the export that includes locales and history, the clause on training with customer content, and what the invoice does when the third locale and the API overage arrive.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Ownership | Not determined | — | — |
| Data residency | Not determined | — | — |
| Subprocessors | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Applicable laws: GDPR, BDSG, TMG [S3]
- Audit log retention: 90 [S2]
- Data center regions: 3 shared (EU, US, APAC) · 3 shared (EU, US, APAC) · 9 shared regions, 34 on dedicated cluster [S2]
- Data processing agreements: yes [S3]
- Penetration testing: add-on [S2]
- Rights: information, correction or deletion, restrict processing, object, data transferability [S3]

**Data**
- Retention: blocked or deleted when storage purpose ends or legal retention period expires [S3]
- Server logs: IP address, date/time, time zone, requested page, HTTP status, data volume, referrer, browser, OS, language/version [S3]

**Integrations**
- Commerce apps: BigCommerce · commercetools · Shopify · Headless commerce & ecommerce [S11]
- Composable: Composable integrations with commerce, CRM, and product platforms [S1]
- Dam apps: Aprimo · AWS S3 · Bynder · Cloudinary · Imgix · Mux · Scaleflex Filerobot · Digital assets management [S11]
- Extensions: Extensions and API Status offered [S1]
- Hosting apps: Netlify · Vercel · Hosting & deployment [S11]
- Localization apps: Lokalise · Crowdin · DeepL · EasyTranslate · Smartling · Localization [S11]
- Mcp guideline return by task: legal · glossary · audience · brand · legal · audience · brand · legal · glossary · audience · brand [S13]
- Mcp read guidelines: get_ai_guidelines · yes [S13]
- Miscellaneous apps: Adminix · Plasmic · Miscellaneous [S11]
- Pim apps: Akeneo · Product information management [S11]
- Webhook asset status values: ASSET_CREATE_PENDING · ASSET_UPLOAD_COMPLETE · ASSET_UPDATE_PENDING · ASSET_ERROR_UPLOAD [S10]
- Webhook configuration options: name · description · include payload toggle · URL · content models · content stage · action · additional headers [S10]
- Webhook environment scoped: yes [S10]
- Webhook localizations included: yes [S10]
- Webhook logs: yes [S10]
- Webhook logs body truncation: 500 · 200 [S10]
- Webhook logs retention: 7 [S10]
- Webhook methods: POST · DELETE · PUT · GET [S10]
- Webhook pause resume: yes [S10]
- Webhook retry policy: 4 · 5 [S10]
- Webhook signature header: gcms-signature [S10]
- Webhook signature validation: HMAC-SHA256 [S10]
- Webhook timeout: 3000 [S10]
- Webhook triggers: Draft · Published · custom content stages · Create · Update · Delete · Publish · Unpublish · Transition Step · Permanent Auth Token · Project Member · Public API · yes [S10]
- Webhook utils package: @hygraph/utils · webhook signature verification [S10]

**Legal**
- Address: Berlin · Dircksenstraße 47 · Germany · 10178 [S4]
- Controller: Dircksenstraße 47, 10178 Berlin, Germany · Hygraph GmbH [S3]
- Entity: Hygraph GmbH [S5]
- Entity name: Hygraph GmbH [S4]
- General managers: Will Robinson [S4]
- Governing law: Federal Republic of Germany [S5]
- Jurisdiction: courts of Hygraph's registered office (merchants) [S5]
- Last updated: 2025-03-19 [S3]
- Registration court: Amtsgericht Berlin Charlottenburg · HRB 250696 B [S4]
- VAT id: DE 815708184 [S4]

**Pricing**
- Addons available: yes [S2]
- AI assist availability: yes · yes [S12]
- AI token allowances: baseline allowance · AI tokens per project per billing period · highest allocations · expanded limits · per billing period [S12]
- API calls: 500000 · 1000000 · 50,000,000+ [S2]
- Asset upload size: 50 MB · 200 MB · up to 5TB [S2]
- Billing cycle: monthly [S5]
- Enterprise price: custom [S2]
- Enterprise trial: yes · 30 · Enterprise [S1]
- Free AI assist only: AI Assist tasks only [S13]
- Free tier: free up to certain limits; overage requires purchase · yes [S5]
- Growth price: 199 [S2]
- Hobby entries: 1000 · 10000 · 1,000,000+ [S2]
- Hobby price: 0 · always free [S2]
- Late interest: 9% above base interest rate [S5]
- Price change notice: 15 [S5]
- Seats: 3 · 10 · 200 [S2]
- Uptime SLA: 99.95 [S2]
- VAT treatment: no [S5]

**Product**
- Admin role permissions: Access to all functionality in Hygraph [S7]
- Age restriction: 18 [S5]
- Agentic cms: yes [S1]
- AI assist availability: AI Assist and Commenting and Assignment appear as rows in the publishing workflows section of the compare table [S2]
- AI assist changes editable: yes [S12]
- AI assist create content: create content · yes [S12]
- AI assist description: in-editor content assistant for generating, improving, and translating content [S12]
- AI assist improve content: improve existing content · yes [S12]
- AI assist permissions: editor access · no [S12]
- AI assist review before apply: yes [S12]
- AI assist supported field types: single line text · multi line text · Markdown · rich text [S12]
- AI assist translate content: translate content · yes [S12]
- AI guidelines: reflect brand vocabulary, audience expectations, compliance constraints · admins · AI Hub > Configurations > Guidelines [S12]
- AI guidelines purpose: AI Guidelines give AI Agents, AI Assist, and MCP-connected assistants project-specific context [S13]
- AI integration: MCP integration with Claude workflows [S1]
- AI token usage viewable: Billing page · yes [S12]
- AI tokens: 100000 · 300000 · 2,000,000+ [S2]
- API first delivery: yes [S1]
- API tokens: 3 · 5 · up to 30 [S2]
- Apps cloned environments: yes · yes [S11]
- Apps edit config: yes [S11]
- Apps extensibility: Apps extend Hygraph project capabilities via integrations [S11]
- Apps install flow: select project and environment · authorize permissions · configure app [S11]
- Apps marketplace: Marketplace · yes · by category [S11]
- Apps uninstall confirm: yes · yes [S11]
- Business customers only: yes [S5]
- Commenting assignment: yes [S6]
- Commenting availability: content entries · yes [S6]
- Commenting context actions: Edit · Resolve / Re-open · Un-assign · Copy link · Delete [S6]
- Commenting mentions: yes · yes [S6]
- Commenting notification channel: in-app notifications · email · yes [S6]
- Commenting replies: yes [S6]
- Commenting status filter: All · Assigned · Open · Resolved [S6]
- Compare plans available: yes [S2]
- Content federation: yes [S1]
- Content governance: Central governance with distributed publishing [S1]
- Content model location: Content model lives in the schema editor; each model represents a content type with fields [S9]
- Content stages: 2 · 2 · up to 5 [S2]
- Contributor role permissions: Can create and update content [S7]
- Cookies: transient · persistent [S3]
- Custom roles: Custom roles can be created to match company functionality and app access [S7]
- Custom roles creators: Owners · Project administrators [S7]
- Customer ip ownership: yes [S5]
- Description: GraphQL-native, API-first headless CMS for enterprise teams [S1]
- Dmca policy: yes [S5]
- Editor role permissions: Can create, update, and delete content [S7]
- Editor role view permissions: Default Editor role allows viewing permissions but not editing them [S7]
- Environments: Multiple environments with content migration supported [S1]
- Environments: 1 · 2 · up to 10 [S2]
- Environments: Environments allow testing structural schema changes without touching production data [S9]
- Glossary import CSV: Definition · Term Group · Locale · Term · yes · yes [S13]
- Glossary term groups: term groups, one term per locale [S13]
- Graphql playground: yes [S1]
- Guideline categories: 4 · Audience & Context · Brand Voice & Tone · Legal & Compliance · Glossary [S13]
- Guideline markdown categories: Audience & Context · Brand Voice & Tone · Legal & Compliance [S13]
- Guideline permissions: All roles · Admin · Admin · Admin [S13]
- Guideline reusable: yes [S13]
- Guideline version history: split view · line by line · yes [S13]
- Guidelines vs custom instructions: Project-level · yes · Per task · no [S13]
- License terms: revocable, personal, worldwide, royalty-free, non-assignable, non-exclusive [S5]
- Live preview availability: Live Preview is a listed capability row in the compare table; Hobby also lists it [S2]
- Newsletter: yes · yes [S3]
- Prohibited content: third-party rights infringement · excessive profanity · hate/violent content · racial/ethnic intolerance · hacking · illegal activity · drug paraphernalia · phishing · malicious content [S5]
- Prohibited spam: yes [S5]
- Rate limits: 5 · 25 · up to 500 [S2]
- Read replica: yes [S2]
- Reference fields: Relationships between models defined via reference fields [S9]
- Relational content models: yes [S1]
- Roles navigation location: Project settings > Access > Roles & Permissions [S7]
- Roles overview: Roles have specific permissions determining what users can do and see in the app [S7]
- Schema editor testing: Queries can be tested against schema in real time in the schema editor [S9]
- Schema primitives: Schema primitives: models, fields, components, enumerations [S9]
- Signup: email · password · name · yes [S3]
- Structured content: Structured content: data organized into discrete, well-defined, independently retrievable fields [S9]
- System roles count: Four standard system roles; default roles cannot be edited or deleted [S7]
- System roles system roles: no [S7]
- Takedown obligations: yes [S5]
- Terms change notice: 7 [S5]
- Third party tools no extra fee: third-party vendors bill separately · 0 [S2]
- Webhooks: 5 · 10 · up to 100 [S2]

**Support**
- AI agent: yes [S1]
- Channels: Community · Community & Email · Priority [S2]
- Rights email: support@hygraph.com [S3]
- SLA: Level 1-3+ [S2]

## Questions

### Is Hygraph European?

Yes. whats-best.ai classifies Hygraph as EU-Made.

### Where does Hygraph store data?

Not stated on the vendor’s pages as of 13 Oct 2026.

### Does Hygraph have a free plan?

Yes. Hygraph has a free plan, per [the vendor’s page captured 13 Oct 2026](https://whats-best.ai/evidence/6142).

### What are the best alternatives to Hygraph?

As of 15 Oct 2026, the panel rates [CoreMedia (3/5)](https://whats-best.ai/software/content-marketing/coremedia), [Storyblok (2.5/5)](https://whats-best.ai/software/content-marketing/storyblok) and [Contently (2.5/5)](https://whats-best.ai/software/content-marketing/contently) highest among the other 14 Content Marketing products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [CoreMedia](https://whats-best.ai/software/content-marketing/coremedia) (EU origin, foreign-owned). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Hygraph alternatives](https://whats-best.ai/software/content-marketing/hygraph/alternatives).

## What this page leaves out

- 27 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 6 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 data facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://hygraph.com/ (checked 2026-10-13)
- [S2] Pricing page: https://hygraph.com/pricing (checked 2026-10-13)
- [S3] Privacy policy: https://hygraph.com/privacy (checked 2026-10-13)
- [S4] Legal notice: https://hygraph.com/imprint (checked 2026-10-13)
- [S5] Terms of service: https://hygraph.com/terms (checked 2026-10-13)
- [S6] Creation, review & approval — found from sitemap: https://hygraph.com/docs/editor-guides/collaboration/commenting (checked 2026-10-13)
- [S7] Creation, review & approval — found from sitemap: https://hygraph.com/docs/editor-guides/basic-navigation/roles-permissions (checked 2026-10-13)
- [S8] Structured content, localisation & export — found from sitemap: https://hygraph.com/docs/core-concepts/content-modeling/plan-your-content-model (checked 2026-10-13)
- [S9] Structured content, localisation & export — found from sitemap: https://hygraph.com/docs/core-concepts/content-modeling/content-modeling-overview (checked 2026-10-13)
- [S10] Publishing, distribution & integrations — found from sitemap: https://hygraph.com/docs/api-reference/basics/webhooks (checked 2026-10-13)
- [S11] Publishing, distribution & integrations — found from sitemap: https://hygraph.com/docs/integrations (checked 2026-10-13)
- [S12] AI assistance & content rights — found from sitemap: https://hygraph.com/docs/hygraph-ai/ai-assist (checked 2026-10-13)
- [S13] AI assistance & content rights — found from sitemap: https://hygraph.com/docs/hygraph-ai/ai-guidelines (checked 2026-10-13)

---

Cite as: whats-best.ai, "Hygraph — Content Marketing", AI panel analysis, as of 2026-10-20. https://whats-best.ai/software/content-marketing/hygraph

Corrections: https://whats-best.ai/correct/583?target=page