whats-best.ai
Search Sign in

Employee Communication & Intranet

HumHub

EU-Made Report an error

Panel rating · 6 judges · How to read the stars

Category median

Sovereignty: not determined

0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.

by HumHub GmbH & Co. KG · www.humhub.com

Report an error on this page Is this your product? →

Link to this page

HumHub: AI-assisted analysis on whats-best.ai HumHub: AI-assisted analysis on whats-best.ai (dark)

Add ?theme=dark to the image address for dark backgrounds. The badge shows the category and the month of the latest evaluation, and EU-Made where that is the product’s provenance. It never shows a score.

HumHub at a glance

Vendor
HumHub GmbH & Co. KG
Headquarters
Not stated on the vendor’s pages as of 1 Nov 2026
Data hosting
Not stated on the vendor’s pages as of 1 Nov 2026
Free plan
Not stated on the vendor’s pages as of 1 Nov 2026
Panel verdict
The AI panel rates HumHub 2.5/5, the mean of 6 judges. HumHub is an open-source social intranet from HumHub GmbH & Co. how scores are made
As of
Vendor pages captured 29 Oct 2026 to 1 Nov 2026; evaluated by the panel 30 Oct 2026. all sources

HumHub alternatives, European ones first →

Read this page as one judge. Each weighs the same scores by what they care about.

The Data Protection Officer

Weighted verdict

External data protection officer for several mid-sized employers. Reads the DPA and the subprocessor list before the feature pages: where push notifications, translation and the AI assistant send employee data, how long messages and read receipts are kept, how voluntary use on a private phone stays voluntary, and whether the parent company sits under a non-EU law that reaches the whole workforce's data.

Same scores as the panel view — this lens weights them the way this judge cares.

Scored by The Data Protection Officer

Panel median The Data Protection Officer This judge’s scores over the panel median. Each label opens its reasoning below.
Scores per criterion, in stars out of 5
Criterion Panel median The Data Protection Officer
Reach & targeted announcements 3 of 5 3 of 5
Pages, documents & knowledge 3 of 5 3 of 5
Engagement, surveys & onboarding 2 of 5 2 of 5
Works council, private phones & privacy by design 2 of 5 2 of 5
Integration, identity & administration 2.5 of 5 2.5 of 5
European sovereignty 3 of 5 3 of 5

Reach & targeted announcements

How this is scored

How a message reaches every employee: a news feed and announcements on phone, browser and shared devices, targeting by site, department, role and language, access for staff without a company email address (invite codes, phone number, personnel number, QR codes, kiosk or shared devices), push notifications, mandatory reading with read confirmation, urgent alerts, scheduled posts, and reach analytics per message and audience.

0 — Not a communication tool; the company cannot publish news or announcements to employees in the product.

3 — A news feed or announcement channel for employees with company accounts; targeting, access without a company email address and reach figures are basic or not described.

5 — News and announcements targeted by group, site or role, delivered to a mobile app with push notifications and to the browser, employees without a company email address able to log in, and views or reach shown per post.

8 — Targeting by site, department, role and language from HR data, login documented for staff without email or company devices (personnel number, SMS code, shared devices), mandatory reading with read confirmation and reminders, urgent alerts that override quiet settings, scheduled and multi-channel posts (app, email, intranet, screens), and reach analytics per audience.

10 — Reach that can be proved: delivery and reading tracked per channel against the whole workforce, offline access and low-bandwidth delivery documented, crisis messages with acknowledgement and escalation, aggregated reports exportable, and the reach analytics described with the data they use.

Report an error

The Data Protection Officer

Network-wide announcements can request a read confirmation and show read rates, the News module is described as targeted broadcasts, and spaces for teams, departments and locations provide the target structure; delivery runs through the iOS and Android apps with push notifications and the responsive browser interface. We found no public information on login without a company email address, urgent alerts, scheduled posts or delivery beyond app and browser. 1 2 9

Report an error

Pages, documents & knowledge

How this is scored

What employees can look up: intranet pages and a content management system, documents and policies with versions and owners, search across content and connected systems, a people directory and org chart, multilingual content with machine translation of posts and pages, content review and expiry, and access from the app as well as the browser.

0 — No pages or documents; the product carries only messages that scroll away.

3 — Files or simple pages can be shared; search, translation, a people directory and content governance are basic or not described.

5 — Pages and a document area with permissions, search across the content, a people directory, content available in the mobile app, and posts or pages translatable into several languages.

8 — A content management system with templates, page ownership, review dates and versioning, search across connected systems (SharePoint, Google Drive or similar), automatic translation of posts, pages and comments into named languages, an org chart from HR data, and pages readable offline.

10 — Knowledge that stays current: content lifecycle and expiry enforced, search and AI answers that cite their sources and respect permissions, analytics on what is searched and not found, accessibility of the content stated against WCAG, and a full export of pages and documents.

Report an error

The Data Protection Officer

Wiki pages are versioned with change tracking, rollback and version comparison, each space has its own wiki whose permissions follow the space, and full-text search indexes wiki pages, posts, files and comments; a Translation Manager supports EN/DE/FR content and OnlyOffice and Collabora enable collaborative editing. We found no public information on a people directory or org chart, automatic machine translation of posts, offline pages, or content review dates and page ownership. 1 2 3 10

Report an error

Engagement, surveys & onboarding

How this is scored

How the workforce answers back and gets started: comments, reactions and moderation, employee surveys and pulse checks with anonymity rules, recognition, user-generated posts and communities, onboarding journeys for new starters including those without a desk, event and campaign pages, and the measures the vendor offers to report engagement.

0 — One-way only; employees cannot react, comment or answer in the product.

3 — Likes and comments on posts; surveys, moderation and onboarding are basic or not described.

5 — Comments and reactions with moderation, surveys or polls sent to targeted groups with results shown, employee posts or communities, and an onboarding area or journey for new employees.

8 — Pulse and engagement surveys with a stated anonymity threshold, automated onboarding journeys timed from the start date and reaching new starters before their first shift, recognition, communities with moderation rules, and engagement reported per group without exposing individuals.

10 — Listening that leads to action: survey results tied to follow-up tasks and published back to the workforce, anonymity and minimum group sizes documented, onboarding journeys measured by completion, and engagement data exportable for analysis.

Report an error

The Data Protection Officer

Likes, comments, shares and direct messages are documented, polls exist as a module and a Moderator role is part of the permission system, with people and onboarding named as a use case but not described as a journey. We found no public information on surveys with stated anonymity rules, engagement reported per group, recognition or onboarding journeys timed from the start date. 1 2

Report an error

Works council, private phones & privacy by design

How this is scored

Whether the product can be rolled out under German co-determination and data protection: guidance or a template for a works agreement (Betriebsvereinbarung, § 87 BetrVG), no individual performance or behaviour monitoring by default, read and usage analytics aggregated or configurable, use on private phones without a company device (BYOD) with work and private data separated, quiet hours and availability settings, voluntary use without an employee email address, data minimisation and deletion, and accessibility.

0 — Built to monitor the behaviour or performance of individual employees, with that monitoring sold as a feature.

3 — A general GDPR statement; works council, use on private phones, analytics on individuals and quiet hours are basic or not described.

5 — Use on private phones described with what the employer can and cannot see, analytics shown in aggregate, notification or quiet-hour settings, and works councils or employee representatives named as a topic with information offered.

8 — A works-agreement template or checklist published, individual tracking off by default or switchable per tenant, read confirmations limited to messages that require them, quiet hours enforced, a login without a private email or phone number, data minimisation and deletion periods stated, and accessibility to WCAG or BITV stated.

10 — Co-determination built into the product: every analytics view and its granularity documented for the works council, configuration logged, employee-facing privacy notices in the app, minimum group sizes for every report, and published references of works-council-approved rollouts.

Report an error

The Data Protection Officer

Quiet hours, per-space muting and per-user notification channels are described, the privacy policy states that no automated decision-making or profiling is used, and the on-premise option leaves full data sovereignty with the employer. We found no public information on a works-agreement template, whether read analytics are aggregated or configurable, use on private phones with work and private data separated, or accessibility to WCAG or BITV. 1 2 5 8

Report an error

Integration, identity & administration

How this is scored

How the product fits the company's systems and is run: Microsoft 365, SharePoint, Teams and Google Workspace integration, user provisioning from the HR system or directory (Entra ID, SAP SuccessFactors, Personio, Workday), single sign-on and SCIM, roles and admin rights by site or department, an API and webhooks, integrations with shift planning and payroll for frontline links, white-label apps, and an export of content and users when leaving.

0 — Stand-alone with manual user lists and no integration of any kind.

3 — Users imported from a file and a few links to other tools; single sign-on, provisioning and an API are basic or not described.

5 — Single sign-on with named identity providers, users provisioned from a directory or HR system, Microsoft 365 or Google Workspace integration, several named integrations, and a documented API.

8 — Automated provisioning by SCIM or HR connector including staff without email, delegated administration by site or department, integration in Microsoft Teams and SharePoint, connectors for named HR, shift and payroll systems, webhooks, a white-label app option, and an audit log.

10 — Runs as part of the company's systems: a public developer platform with versioned API and SDKs, every integration documented, a status page and stated SLA, and a full export of content, users and analytics that a successor system can import.

Report an error

The Data Protection Officer

SAML single sign-on, an advanced LDAP module, a RESTful API and a role system with Administrator, Moderator, Editor and read access are documented, alongside more than 80 optional marketplace modules and the OnlyOffice and Collabora connectors. We found no public information on provisioning from HR systems or via SCIM, Microsoft 365, Teams, SharePoint or Google Workspace integration, delegated administration by site, webhooks, a white-label app or an audit log. 1 5

Report an error

European sovereignty

How this is scored

Who the contracting entity and the parent company are, where employee profiles, messages, files and usage data are hosted, and who the subprocessors are (hosting, push notifications, email and SMS delivery, video, translation, AI models, analytics, support). Independently sourced by the sovereignty pipeline; an employee app holds data on the whole workforce, often on private phones, so the whole chain counts, not only the database.

0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.

3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.

5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (push delivery, translation, AI, email, analytics, support) run through non-EU providers without a stated safeguard.

8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated.

10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, or self-hosting on the customer's own servers, data export and deletion documented, and certifications published with their scope rather than implied.

Report an error

The Data Protection Officer

The contracting entity is HumHub GmbH & Co. KG in Munich, registered at Amtsgericht München under HRA 103451; optional SaaS hosting runs on EU servers under ISO 27001 with daily, weekly and monthly backups, and the Professional Edition also runs on-premise on the customer's own servers with full data sovereignty. The subprocessors named with locations — self-hosted Matomo in Germany, easybill in Kaarst, Stripe in San Francisco and Google in the USA under the EU-US Data Privacy Framework — concern the vendor's website and billing rather than the employee platform; we found no public information on the hosting infrastructure, push-notification delivery or support processors for the platform itself, nor on a parent company. 1 5 6 7 8 11

Report an error

Pricing transparency not rated — the vendor publishes no price

How this is scored

Whether a buyer can compute the real annual cost from public pages alone: price per user or per employee, whether frontline and desk staff are priced differently, platform or base fee, which modules (intranet, employee email, surveys, translation, AI, a white-label app) cost extra, minimum seats and term, and setup and onboarding fees.

0 — No public prices at all; every customer is a sales call.

3 — A starting price or a free tier exists, but how cost scales with users, modules or a branded app is unclear.

5 — Tiers are public with their per-user or base price and main inclusions, but at least one commonly needed piece (frontline users, translation, a branded app, extra modules) is unpriced or "on request".

8 — Every tier priced publicly with its scaling rule (per user, per frontline user, per active user), add-ons and a branded app priced, minimum seats and term, setup fees and VAT treatment stated.

10 — Complete price computability: annual cost derivable for a given headcount and module set, with every add-on, setup, support and branded-app fee and the cancellation and data-return terms published.

Report an error

The Data Protection Officer

The Professional Edition is publicly priced at approximately €2.37 per user per month for up to 100 user accounts, quoted as €237 per month with a 10% annual discount and monthly cancellation, and a tier ladder from 50 to 10,000+ users is visible. We found no public price for the Enterprise Edition, and the optional onboarding packages as well as larger organizations, multi-site deployments and custom development are served with tailored quotes, so the annual cost for other headcounts is not computable from the public pages. 1 5 6

Report an error

European sovereignty — proven facts

0 of 6 dimensions proven

Built only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.

Hosting location Not determined ⚠ unverified — uncited Report an error
Hosting options Not determined ⚠ unverified — uncited Report an error
Open source Not determined ⚠ unverified — uncited Report an error
Data processing agreement Not determined — uncited Report an error
Transfer impact assessment Not determined — uncited Report an error

Questions about HumHub

Is HumHub European?

Yes. whats-best.ai classifies HumHub as EU-Made.

Where does HumHub store data?

Not stated on the vendor’s pages as of 1 Nov 2026.

Does HumHub have a free plan?

Not stated on the vendor’s pages as of 1 Nov 2026.

What are the best alternatives to HumHub?

As of 3 Nov 2026, the panel rates Flip (3.5/5), Workvivo by Zoom (3/5) and Staffbase (3/5) highest among the other 17 Employee Communication & Intranet products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Flip (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: HumHub alternatives.

Where this could be wrong

What we left out

A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.

Do you know more about HumHub? Tell us Report an error on this page

Sources (13)

The pages every claim on this page was read from — each one checked, dated, and kept verifiable.

  1. 1 Vendor homepage www.humhub.com Checked 29 Oct 2026 Details →
  2. 2 Features page (communication) www.humhub.com Checked 29 Oct 2026 Details →
  3. 3 Features page (knowledge) www.humhub.com Checked 29 Oct 2026 Details →
  4. 4 Features page (mobile app) www.humhub.com Checked 29 Oct 2026 Details →
  5. 5 Features page (hosting) www.humhub.com Checked 29 Oct 2026 Details →
  6. 6 Pricing page www.humhub.com Checked 29 Oct 2026 Details →
  7. 7 Legal notice www.humhub.com Checked 29 Oct 2026 Details →
  8. 8 Privacy policy www.humhub.com Checked 29 Oct 2026 Details →
  9. 9 Reach & targeted announcements — found from sitemap www.humhub.com Checked 29 Oct 2026 Details →
  10. 10 Pages, documents & knowledge — found from sitemap www.humhub.com Checked 29 Oct 2026 Details →
  11. 11 Works council, private phones & privacy by design — found from sitemap www.humhub.com Checked 29 Oct 2026 Details →
  12. 12 Self-hosting / on-premises installation docs — found from the homepage www.humhub.com Checked 1 Nov 2026 Details →
  13. 13 Open-source licence page — found from the homepage www.humhub.com Checked 1 Nov 2026 Details →