Employee Communication & Intranet
HumHub
EU-Made Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by HumHub GmbH & Co. KG · www.humhub.com
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
HumHub at a glance
- Vendor
- HumHub GmbH & Co. KG
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan
- Not stated on the vendor’s pages as of 1 Nov 2026
- Panel verdict
- The AI panel rates HumHub 2.5/5, the mean of 6 judges. HumHub is an open-source social intranet from HumHub GmbH & Co. how scores are made
- As of
- Vendor pages captured 29 Oct 2026 to 1 Nov 2026; evaluated by the panel 30 Oct 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
HumHub is an open-source social intranet from HumHub GmbH & Co. KG of Munich, self-hosted or vendor-hosted, and the bench scores it strongest as a knowledge and announcement platform. Content and knowledge is the top area at 6-6: versioned wikis with rollback and per-space permissions, full-text search across wiki, posts, files and comments, and collaborative editing via OnlyOffice and Collabora. Engagement and feedback is the weakest at 4-4 — likes, comments and polls are documented, with no public information on surveys with anonymity rules, recognition or per-group measurement. Sovereignty runs 6-7 on a German legal entity, optional SaaS hosting on EU servers under ISO 27001 and an on-premise option, though we found no public information on the hosting infrastructure or the product's push-delivery chain. Reach and targeting splits 4-6: the higher scores credit documented announcements with read confirmation and mobile push; the lower scores weigh the absence of any documented login for staff without a company email address. Integration and administration holds at 5 with SAML SSO, Advanced LDAP, a RESTful API and more than 80 marketplace modules.
Speaks for it
- Versioned, searchable knowledge base with per-space permissions and OnlyOffice or Collabora editing, where content and knowledge scored 6-6.
- Open-source software from Germany, self-hostable with full data sovereignty or with optional SaaS hosting on EU servers under ISO 27001 — sovereignty scored 6-7.
- Network-wide announcements with read confirmation and read rates, delivered by push notification to the iOS and Android apps and in the browser.
- Extensible platform with more than 80 marketplace modules, SAML single sign-on, Advanced LDAP and a RESTful API — integration and administration at 5-5.
- Professional Edition publicly priced at approximately €2.37 per user per month for up to 100 user accounts, monthly cancelable, with a free trial and no credit card.
Held against it
- Engagement and feedback scored 4-4: likes, comments, shares, messages and polls are documented, with no public information on surveys with stated anonymity rules, recognition or engagement reported per group.
- Reach and targeting spans 4-6, and the captured pages give no public information on login without a company email address, shared devices, urgent alerts or scheduled posts.
- Works council and privacy sits at 4-5, with no public information on a works-agreement template, on what an employer can see on employees' private phones, or on whether a manager can see individual read confirmations.
- We found no public information on the hosting infrastructure or on providers in the product's own delivery chain such as push notifications; the listed subprocessors (easybill in Kaarst, Germany; Stripe and Google in the USA) serve the vendor's website billing and advertising.
- We found no public information on Microsoft 365, Teams or SharePoint integration, SCIM or HR-system provisioning, webhooks, or an audit log.
Best for
- You want an open-source intranet from a German vendor that you can run on-premise on your own servers, or use with optional SaaS hosting on EU servers certified to ISO 27001.
- You need a versioned, searchable internal knowledge base with per-space permissions for confidential pages and multilingual content in EN, DE and FR.
- You communicate chiefly through network-wide announcements with read confirmation and read rates, reaching staff on the iOS and Android apps or in the browser.
Avoid if
- Many of your staff lack a company email address or company device — reach and targeting scores as low as 4 rest on the absence of any documented login for them.
- Your works council needs a works-agreement template or clarity on whether a manager can see individual read confirmations before signing under section 87 BetrVG — works council and privacy scored 4-5 with these questions open.
- Your IT stack is Microsoft-centric and depends on automated provisioning — the documented integration surface is SAML SSO, Advanced LDAP, a RESTful API and the OnlyOffice and Collabora connectors.
- You are buying primarily for engagement measurement or structured onboarding journeys — engagement and feedback scored 4-4, and onboarding appears as a use-case label with handbooks rather than a timed journey.
The scores
| Criterion | Panel median |
|---|---|
| Reach & targeted announcements | 3 of 5 |
| Pages, documents & knowledge | 3 of 5 |
| Engagement, surveys & onboarding | 2 of 5 |
| Works council, private phones & privacy by design | 2 of 5 |
| Integration, identity & administration | 2.5 of 5 |
| European sovereignty | 3 of 5 |
Reach & targeted announcements
Show reasoningHide reasoning
How this is scored
How a message reaches every employee: a news feed and announcements on phone, browser and shared devices, targeting by site, department, role and language, access for staff without a company email address (invite codes, phone number, personnel number, QR codes, kiosk or shared devices), push notifications, mandatory reading with read confirmation, urgent alerts, scheduled posts, and reach analytics per message and audience.
0 — Not a communication tool; the company cannot publish news or announcements to employees in the product.
3 — A news feed or announcement channel for employees with company accounts; targeting, access without a company email address and reach figures are basic or not described.
5 — News and announcements targeted by group, site or role, delivered to a mobile app with push notifications and to the browser, employees without a company email address able to log in, and views or reach shown per post.
8 — Targeting by site, department, role and language from HR data, login documented for staff without email or company devices (personnel number, SMS code, shared devices), mandatory reading with read confirmation and reminders, urgent alerts that override quiet settings, scheduled and multi-channel posts (app, email, intranet, screens), and reach analytics per audience.
10 — Reach that can be proved: delivery and reading tracked per channel against the whole workforce, offline access and low-bandwidth delivery documented, crisis messages with acknowledgement and escalation, aggregated reports exportable, and the reach analytics described with the data they use.
The Internal Communications Lead
Network-wide announcements with a requested read confirmation and read rates, a mobile app with push notifications and browser access, quiet hours, and spaces standing in for teams, departments and sites are all documented — that handles the CEO letter and the safety notice properly. What the pages leave open is the frontline problem: I found no public information on logging in without a company email address or company device, and none on urgent alerts, scheduled posts or reach figures per audience. 1 2 9
The Frontline Operations Lead
Spaces for teams, departments and locations let me split announcements by depot, the mobile app delivers them with push notifications, and network-wide announcements carry read confirmation with read rates shown. What holds it down for me is that I found no public information on how a picker without a company email logs in — no invite codes, phone-number or personnel-number login — and urgent alerts that override quiet settings and scheduled posts are also not described. 1 2 9
The Microsoft 365 Administrator
Network-wide announcements can require a read confirmation and show read rates, delivered through push notifications on iOS and Android and in the browser, with spaces per team, department or location and a multilingual network in EN, DE and FR. That is a genuine announcement channel, but we found no public information on login for staff without a company email address, targeting driven by HR data, or urgent alerts and scheduled multi-channel posts. 1 2 9
The Works Council Member
Announcements can be pinned network-wide with a read confirmation and read rates, news goes out as targeted broadcasts, and a mobile app with push notifications and a responsive browser interface are documented. We found no public information on logins for staff without a company email address, on shared devices, or on urgent and scheduled messages, and reach is shown per announcement rather than per audience. 2 9 1 4
The Data Protection Officer
Network-wide announcements can request a read confirmation and show read rates, the News module is described as targeted broadcasts, and spaces for teams, departments and locations provide the target structure; delivery runs through the iOS and Android apps with push notifications and the responsive browser interface. We found no public information on login without a company email address, urgent alerts, scheduled posts or delivery beyond app and browser. 1 2 9
The Skeptic
Network-wide announcements with read confirmation and read rates, push notifications to iOS and Android apps, and spaces per team, department and location are documented. But the pages court people who don't sit at a desk without saying how they get in — we found no public information on access without a company email address, shared or kiosk devices, urgent alerts, scheduled posts or reach analytics per audience. 1 2 4 9
Pages, documents & knowledge
Show reasoningHide reasoning
How this is scored
What employees can look up: intranet pages and a content management system, documents and policies with versions and owners, search across content and connected systems, a people directory and org chart, multilingual content with machine translation of posts and pages, content review and expiry, and access from the app as well as the browser.
0 — No pages or documents; the product carries only messages that scroll away.
3 — Files or simple pages can be shared; search, translation, a people directory and content governance are basic or not described.
5 — Pages and a document area with permissions, search across the content, a people directory, content available in the mobile app, and posts or pages translatable into several languages.
8 — A content management system with templates, page ownership, review dates and versioning, search across connected systems (SharePoint, Google Drive or similar), automatic translation of posts, pages and comments into named languages, an org chart from HR data, and pages readable offline.
10 — Knowledge that stays current: content lifecycle and expiry enforced, search and AI answers that cite their sources and respect permissions, analytics on what is searched and not found, accessibility of the content stated against WCAG, and a full export of pages and documents.
The Internal Communications Lead
Versioned wiki pages with rollback and version comparison, per-space permissions that stop confidential pages leaking, custom pages, files, and a full-text search indexing wiki, posts, files and comments are documented, plus real-time document editing through Collabora or OnlyOffice and a translation manager running one network in EN, DE and FR. I found no public information on a people directory or org chart, review dates and content expiry, or pages readable offline. 1 2 3 10
The Frontline Operations Lead
Versioned wiki pages with rollback and per-space permissions, custom pages for handbooks, an advanced search indexing wiki, posts, files and comments in one list, and a Translation Manager running the same network in EN/DE/FR and more give me a real place for policies and onboarding documentation. It stays mid-level because a people directory or org chart from HR data, review dates and expiry, and offline reading of pages are not described. 1 2 3 10
The Microsoft 365 Administrator
Versioned wiki pages with rollback and comparison, per-space permissions, custom pages, files, and full-text search across wiki, posts, files and comments form a real knowledge base, with document editing via Collabora Online and OnlyOffice. We found no public information on search across SharePoint or Google Drive, an org chart from HR data, automatic translation of posts and pages, content review dates, or offline pages. 1 3 10
The Works Council Member
Wiki pages are versioned with rollback and change tracking, each space has its own wiki whose permissions follow the space, and full-text search covers wiki pages, posts, files and comments, with content also available in the mobile app. We found no public information on an org chart from HR data, automatic translation of posts and comments, offline pages, or search reaching into connected systems. 3 10 1 9
The Data Protection Officer
Wiki pages are versioned with change tracking, rollback and version comparison, each space has its own wiki whose permissions follow the space, and full-text search indexes wiki pages, posts, files and comments; a Translation Manager supports EN/DE/FR content and OnlyOffice and Collabora enable collaborative editing. We found no public information on a people directory or org chart, automatic machine translation of posts, offline pages, or content review dates and page ownership. 1 2 3 10
The Skeptic
Versioned wiki pages with rollback and per-space permissions, full-text search across wiki, posts, files and comments, collaborative Office editing via OnlyOffice and Collabora, and a translation manager for EN/DE/FR networks are all documented. Beyond that, we found no public information on a people directory or org chart, search into SharePoint or Google Drive, review dates and content expiry, or pages readable offline. 1 3 10
Engagement, surveys & onboarding
Show reasoningHide reasoning
How this is scored
How the workforce answers back and gets started: comments, reactions and moderation, employee surveys and pulse checks with anonymity rules, recognition, user-generated posts and communities, onboarding journeys for new starters including those without a desk, event and campaign pages, and the measures the vendor offers to report engagement.
0 — One-way only; employees cannot react, comment or answer in the product.
3 — Likes and comments on posts; surveys, moderation and onboarding are basic or not described.
5 — Comments and reactions with moderation, surveys or polls sent to targeted groups with results shown, employee posts or communities, and an onboarding area or journey for new employees.
8 — Pulse and engagement surveys with a stated anonymity threshold, automated onboarding journeys timed from the start date and reaching new starters before their first shift, recognition, communities with moderation rules, and engagement reported per group without exposing individuals.
10 — Listening that leads to action: survey results tied to follow-up tasks and published back to the workforce, anonymity and minimum group sizes documented, onboarding journeys measured by completion, and engagement data exportable for analysis.
The Internal Communications Lead
Likes, comments, shares, direct messages and a polls module are documented, with a moderator role in the permission system, and people and onboarding is named as a use case with onboarding handbooks as documents. Beyond that the evidence runs thin: I found no public information on surveys with anonymity rules, recognition, moderated communities, or onboarding journeys measured by completion. 1 2 10
The Frontline Operations Lead
Likes, comments, shares, direct messages and a polls module are documented, spaces work as communities with a moderator role, and onboarding appears as a named use case with handbooks rather than a journey timed to the first shift. I found no public information on surveys with anonymity rules, pulse checks, recognition, or engagement reported per group. 1 2 10
The Microsoft 365 Administrator
Likes, comments and shares with a moderator role, polls for decisions, and spaces that function as communities cover the basics of two-way communication. Onboarding appears only as a use-case heading, and we found no public information on surveys with anonymity rules, recognition, or engagement reporting per group. 1 2
The Works Council Member
Likes, comments and direct messages are core features, a polls module exists, and a moderator role sits in the permission system. Onboarding appears only as a use-case label and as handbooks kept as documents, and we found no public information on surveys with anonymity rules, recognition, or any measurement of engagement. 1 2 10
The Data Protection Officer
Likes, comments, shares and direct messages are documented, polls exist as a module and a Moderator role is part of the permission system, with people and onboarding named as a use case but not described as a journey. We found no public information on surveys with stated anonymity rules, engagement reported per group, recognition or onboarding journeys timed from the start date. 1 2
The Skeptic
Likes, comments, shares, direct and group messages, polls and a moderator role are documented, and 'people and onboarding' appears as a use-case headline. We found no public information on what an onboarding journey actually contains, on surveys with stated anonymity rules, recognition, or engagement reported per group. 1 2
Works council, private phones & privacy by design
Show reasoningHide reasoning
How this is scored
Whether the product can be rolled out under German co-determination and data protection: guidance or a template for a works agreement (Betriebsvereinbarung, § 87 BetrVG), no individual performance or behaviour monitoring by default, read and usage analytics aggregated or configurable, use on private phones without a company device (BYOD) with work and private data separated, quiet hours and availability settings, voluntary use without an employee email address, data minimisation and deletion, and accessibility.
0 — Built to monitor the behaviour or performance of individual employees, with that monitoring sold as a feature.
3 — A general GDPR statement; works council, use on private phones, analytics on individuals and quiet hours are basic or not described.
5 — Use on private phones described with what the employer can and cannot see, analytics shown in aggregate, notification or quiet-hour settings, and works councils or employee representatives named as a topic with information offered.
8 — A works-agreement template or checklist published, individual tracking off by default or switchable per tenant, read confirmations limited to messages that require them, quiet hours enforced, a login without a private email or phone number, data minimisation and deletion periods stated, and accessibility to WCAG or BITV stated.
10 — Co-determination built into the product: every analytics view and its granularity documented for the works council, configuration logged, employee-facing privacy notices in the app, minimum group sizes for every report, and published references of works-council-approved rollouts.
The Internal Communications Lead
GDPR conformity, quiet hours with per-space muting, per-user notification channels, read confirmations asked for per announcement rather than blanket tracking, and the option to run the open-source platform on our own servers answer much of a works council's concern before it is raised. I found no public information on a works-agreement template, on what an employer can and cannot see on a private phone, or on accessibility conformance. 2 5 8 11
The Frontline Operations Lead
Quiet hours and per-space muting are user-configurable, the product is described as GDPR-conform with optional EU hosting under ISO 27001, and the on-premise option with full data sovereignty is a strong card in any works-council conversation. What I could not find: works-agreement templates or works-council guidance, a description of what the employer can and cannot see on private phones, or accessibility statements. 1 2 5 6 8
The Microsoft 365 Administrator
The privacy policy names the Bavarian supervisory authority, states no automated decision-making or profiling, and describes self-hosted analytics in Germany with IP anonymisation, cookie consent and six-month deletion; quiet hours and per-space muting are documented, and read confirmations are requested per announcement rather than blanket. We found no public information on a works-agreement template, what an employer can see on private phones, or how the product's usage analytics are aggregated. 2 5 8 11
The Works Council Member
Quiet hours, per-space muting and user-chosen notification channels are documented, the platform can be self-hosted with full data sovereignty, and a data processing agreement with GDPR conformity is stated. For our works agreement under section 87 BetrVG the decisive questions stay open: we found no public information on whether a manager can see which individual person confirmed reading an announcement, on separation of work and private data on employees' own phones, or on any works-council guidance or template. 2 5 8 1
The Data Protection Officer
Quiet hours, per-space muting and per-user notification channels are described, the privacy policy states that no automated decision-making or profiling is used, and the on-premise option leaves full data sovereignty with the employer. We found no public information on a works-agreement template, whether read analytics are aggregated or configurable, use on private phones with work and private data separated, or accessibility to WCAG or BITV. 1 2 5 8
The Skeptic
Quiet hours, per-space muting and per-user notification channels are described, and the privacy policy states retention periods, self-hosted Matomo in Germany with anonymized IPs, and no automated decision-making or profiling. But that policy governs the vendor's website; we found no public information on works councils or a works-agreement template, on what an employer can see about employees in a customer network, or on separating work and private data on personal phones. 1 2 8 11
Integration, identity & administration
Show reasoningHide reasoning
How this is scored
How the product fits the company's systems and is run: Microsoft 365, SharePoint, Teams and Google Workspace integration, user provisioning from the HR system or directory (Entra ID, SAP SuccessFactors, Personio, Workday), single sign-on and SCIM, roles and admin rights by site or department, an API and webhooks, integrations with shift planning and payroll for frontline links, white-label apps, and an export of content and users when leaving.
0 — Stand-alone with manual user lists and no integration of any kind.
3 — Users imported from a file and a few links to other tools; single sign-on, provisioning and an API are basic or not described.
5 — Single sign-on with named identity providers, users provisioned from a directory or HR system, Microsoft 365 or Google Workspace integration, several named integrations, and a documented API.
8 — Automated provisioning by SCIM or HR connector including staff without email, delegated administration by site or department, integration in Microsoft Teams and SharePoint, connectors for named HR, shift and payroll systems, webhooks, a white-label app option, and an audit log.
10 — Runs as part of the company's systems: a public developer platform with versioned API and SDKs, every integration documented, a status page and stated SLA, and a full export of content, users and analytics that a successor system can import.
The Internal Communications Lead
A SAML single sign-on module, an advanced LDAP module for directory users and groups, a RESTful API, document integrations with Collabora and OnlyOffice, and administrator, moderator, editor and read-only roles are documented, extendable through more than eighty marketplace modules. I found no public information on Microsoft 365, Teams or SharePoint integration, SCIM provisioning, connectors for named HR or shift systems, or an audit log. 1 7
The Frontline Operations Lead
SAML single sign-on, advanced LDAP with group functions, a RESTful API and named integrations like Collabora Online and OnlyOffice, plus roles from administrator to read-only, cover the directory and office pieces. Provisioning from an HR system for staff without email, SCIM, Microsoft Teams or SharePoint embedding, webhooks and white-label apps are not described on the captured pages. 1 5
The Microsoft 365 Administrator
A RESTful API, SAML single sign-on and advanced LDAP in the Professional Edition, over 80 marketplace modules, and a role system from administrator to read-only give me something to work with. We found no public information on SCIM, HR-system connectors such as SuccessFactors or Personio, provisioning of staff without email, integration inside Teams or with SharePoint, webhooks, an audit log, or an export of content when a contract ends — though on-premise self-hosting would keep the data on our own servers. 1 5 6 7
The Works Council Member
SAML single sign-on and an advanced LDAP connection are described, a RESTful API is documented, OnlyOffice and Collabora are named integrations, and roles run from administrator down to read-only access. We found no public information on automated provisioning from HR systems or via SCIM, on Microsoft Teams or SharePoint connectors, or on an audit log. 1 6 7
The Data Protection Officer
SAML single sign-on, an advanced LDAP module, a RESTful API and a role system with Administrator, Moderator, Editor and read access are documented, alongside more than 80 optional marketplace modules and the OnlyOffice and Collabora connectors. We found no public information on provisioning from HR systems or via SCIM, Microsoft 365, Teams, SharePoint or Google Workspace integration, delegated administration by site, webhooks, a white-label app or an audit log. 1 5
The Skeptic
A RESTful API, Advanced LDAP, a SAML single-sign-on module, a four-role permission system and an on-premise deployment are documented. We found no public information on SCIM or HR-system provisioning, Microsoft 365, Teams or SharePoint connectors, webhooks, an audit log, or export on leaving beyond hosting the software yourself. 1 5 6
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where employee profiles, messages, files and usage data are hosted, and who the subprocessors are (hosting, push notifications, email and SMS delivery, video, translation, AI models, analytics, support). Independently sourced by the sovereignty pipeline; an employee app holds data on the whole workforce, often on private phones, so the whole chain counts, not only the database.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (push delivery, translation, AI, email, analytics, support) run through non-EU providers without a stated safeguard.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, or self-hosting on the customer's own servers, data export and deletion documented, and certifications published with their scope rather than implied.
The Internal Communications Lead
The contracting entity is a German company registered at the Munich court, the software is open source from Germany, and the optional SaaS runs on EU servers under ISO 27001 — or entirely on our own servers on-premise with the customer keeping full data sovereignty. The chain around the product stays dark: the privacy pages name the vendors behind their own invoicing and marketing, but I found no public information on the providers in the delivery chain of a hosted employee network, such as push, email or translation, or on ownership beyond the company itself. 5 6 7 11
The Frontline Operations Lead
The contracting entity is HumHub GmbH & Co. KG in Munich with a German commercial register entry, the optional SaaS hosting runs on EU servers certified ISO 27001, and an on-premise option hands us the data entirely. The hosting infrastructure itself is not named and the product's own chain — push delivery above all — has no documented subprocessors; the captured privacy policy lists Stripe and Google in the USA for the vendor's website billing and advertising. 5 6 7 11
The Microsoft 365 Administrator
The contracting entity is HumHub GmbH & Co. KG in Munich, registered at Amtsgericht München, the software is open source from Germany, optional SaaS hosting runs on EU servers certified to ISO 27001, and the privacy policy lists subprocessors with locations, including easybill in Kaarst, Germany, and Stripe in San Francisco. The hosting infrastructure is not named, ownership is not stated, and we found no public information on the product's own delivery chain such as push notifications, so I cannot call it sovereign end to end. 1 6 7 8 11
The Works Council Member
The contracting entity is HumHub GmbH & Co. KG in Munich with a German commercial register entry, SaaS hosting runs on EU servers certified to ISO 27001, the software is open source and can run entirely on our own servers, and the privacy policy names subprocessors with locations, including Stripe and Google in the USA under the EU-US Data Privacy Framework. For a hosted rollout we found no public information on the hosting infrastructure by name or on the delivery chain of the product itself, such as push and email providers. 7 6 5 8 11
The Data Protection Officer
The contracting entity is HumHub GmbH & Co. KG in Munich, registered at Amtsgericht München under HRA 103451; optional SaaS hosting runs on EU servers under ISO 27001 with daily, weekly and monthly backups, and the Professional Edition also runs on-premise on the customer's own servers with full data sovereignty. The subprocessors named with locations — self-hosted Matomo in Germany, easybill in Kaarst, Stripe in San Francisco and Google in the USA under the EU-US Data Privacy Framework — concern the vendor's website and billing rather than the employee platform; we found no public information on the hosting infrastructure, push-notification delivery or support processors for the platform itself, nor on a parent company. 1 5 6 7 8 11
The Skeptic
A German limited partnership in Munich with a commercial-register number, optional SaaS hosting on EU servers under ISO 27001, and an on-premise option with full data control are all documented. The chain behind the employee app is not: the hosting infrastructure is unnamed, we found no public information on who delivers push notifications for the mobile app, and the named subprocessors (easybill in Germany, Stripe and Google in the USA) serve the vendor's website billing and advertising rather than the product's data processing. 5 6 7 8 11
Pricing transparency
not rated — the vendor publishes no price
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per user or per employee, whether frontline and desk staff are priced differently, platform or base fee, which modules (intranet, employee email, surveys, translation, AI, a white-label app) cost extra, minimum seats and term, and setup and onboarding fees.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with users, modules or a branded app is unclear.
5 — Tiers are public with their per-user or base price and main inclusions, but at least one commonly needed piece (frontline users, translation, a branded app, extra modules) is unpriced or "on request".
8 — Every tier priced publicly with its scaling rule (per user, per frontline user, per active user), add-ons and a branded app priced, minimum seats and term, setup fees and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given headcount and module set, with every add-on, setup, support and branded-app fee and the cancellation and data-return terms published.
The Internal Communications Lead
The Professional tier is public at €2.37 per user per month for up to 100 user accounts, stated as €237/ Monat with a 10% annual discount, tier steps from 50 up to 10.000+ accounts are shown, and it is monthly cancelable with a free trial and no credit card. The Enterprise edition, optional onboarding packages and larger or multi-site deployments are a custom quote, and I found no public information on setup fees or the per-user prices of the tiers above 100 accounts. 1 5 6
The Frontline Operations Lead
The Professional Edition publishes a user-tier ladder from 50 to 10.000+, with a stated €2.37 / User / Monat for up to 100 Userkonten (€237/ Monat), 10% annual discount, monthly cancellation and a free trial without credit card. For my 1,800 mostly seasonal staff the figures at the larger tiers, the Enterprise Edition and the optional workshop and onboarding packages are not priced on the captured page, which points larger organizations to a custom quote. 1 6
The Microsoft 365 Administrator
The pricing page shows the Professional Edition at roughly €2.37 per user per month for up to 100 user accounts, stated as €237 per month with a 10% annual discount, monthly cancellable, plus a free trial without a credit card. Larger organisations and multi-site deployments are quoted individually, and we found no public information on Enterprise Edition pricing, setup and onboarding package fees, or minimum seats and term, so I cannot compute the cost for our 4,000 staff from the public pages. 1 5 6
The Works Council Member
The Professional Edition is published at approximately €2.37 per user per month for up to 100 user accounts, stated as €237 per month with a 10% annual discount, with a tier ladder from 50 up to 10,000+ users and monthly cancellation. For larger organisations and multi-site deployments the vendor prepares a custom quote, the Enterprise Edition carries no public price and the optional onboarding packages are unpriced, so for a retail chain of our size the annual cost is not derivable from the public pages alone. 6 5
The Data Protection Officer
The Professional Edition is publicly priced at approximately €2.37 per user per month for up to 100 user accounts, quoted as €237 per month with a 10% annual discount and monthly cancellation, and a tier ladder from 50 to 10,000+ users is visible. We found no public price for the Enterprise Edition, and the optional onboarding packages as well as larger organizations, multi-site deployments and custom development are served with tailored quotes, so the annual cost for other headcounts is not computable from the public pages. 1 5 6
The Skeptic
The Professional Edition is public at approximately €2.37 per user per month for up to 100 user accounts — €237 per month with 10 percent annual discount — with a tier ladder up to 10,000+ users and monthly cancellation. The Enterprise Edition, setup and onboarding packages and larger deployments are on request, so a buyer cannot compute a full annual cost from the captured pages alone. 1 6
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined ⚠ unverified | — | uncited Report an error |
| Open source | Not determined ⚠ unverified | — | uncited Report an error |
| Data processing agreement | Not determined | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about HumHub
Is HumHub European?
Yes. whats-best.ai classifies HumHub as EU-Made.
Where does HumHub store data?
Not stated on the vendor’s pages as of 1 Nov 2026.
Does HumHub have a free plan?
Not stated on the vendor’s pages as of 1 Nov 2026.
What are the best alternatives to HumHub?
As of 3 Nov 2026, the panel rates Flip (3.5/5), Workvivo by Zoom (3/5) and Staffbase (3/5) highest among the other 17 Employee Communication & Intranet products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Flip (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: HumHub alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 29 Oct 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Open source, Hosting location, Legal entity, Hosting options. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 4 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (13)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage www.humhub.com Checked 29 Oct 2026 Details →
- 2 Features page (communication) www.humhub.com Checked 29 Oct 2026 Details →
- 3 Features page (knowledge) www.humhub.com Checked 29 Oct 2026 Details →
- 4 Features page (mobile app) www.humhub.com Checked 29 Oct 2026 Details →
- 5 Features page (hosting) www.humhub.com Checked 29 Oct 2026 Details →
- 6 Pricing page www.humhub.com Checked 29 Oct 2026 Details →
- 7 Legal notice www.humhub.com Checked 29 Oct 2026 Details →
- 8 Privacy policy www.humhub.com Checked 29 Oct 2026 Details →
- 9 Reach & targeted announcements — found from sitemap www.humhub.com Checked 29 Oct 2026 Details →
- 10 Pages, documents & knowledge — found from sitemap www.humhub.com Checked 29 Oct 2026 Details →
- 11 Works council, private phones & privacy by design — found from sitemap www.humhub.com Checked 29 Oct 2026 Details →
- 12 Self-hosting / on-premises installation docs — found from the homepage www.humhub.com Checked 1 Nov 2026 Details →
- 13 Open-source licence page — found from the homepage www.humhub.com Checked 1 Nov 2026 Details →