whats-best.ai
Search Sign in

IT Service Management

iTop

EU-Made Report an error

Panel rating · 6 judges · How to read the stars

Category median

Sovereignty: not determined

0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.

by Combodo SAS · combodo.com

Report an error on this page Is this your product? →

Link to this page

iTop: AI-assisted analysis on whats-best.ai iTop: AI-assisted analysis on whats-best.ai (dark)

Add ?theme=dark to the image address for dark backgrounds. The badge shows the category and the month of the latest evaluation, and EU-Made where that is the product’s provenance. It never shows a score.

iTop at a glance

Vendor
Combodo SAS
Headquarters
Not stated on the vendor’s pages as of 1 Nov 2026
Data hosting
Default not stated; pages mention France source, captured 1 Nov 2026
Free plan
Yes, per the vendor’s own page source, captured 1 Nov 2026
Panel verdict
The AI panel rates iTop 3/5, the mean of 6 judges. iTop is an open-source IT service management and CMDB platform from Combodo SAS in Échirolles, France, offered as SaaS or on-premise. how scores are made
As of
Vendor pages captured 1 Nov 2026; evaluated by the panel 2 Nov 2026. all sources

iTop alternatives, European ones first →

Read this page as one judge. Each weighs the same scores by what they care about.

The Municipal IT Lead

Weighted verdict

Runs IT for a district administration with 900 staff, schools included, on servers in the municipal data centre. Follows BSI IT-Grundschutz and buys through public tenders, and the data protection officer will not sign off staff and device data on a US cloud. Wants an on-premise or open-source edition that is documented and maintained, a portal for teachers and clerks, assets linked to tickets, and a contract and price list the procurement office can put into a tender.

Same scores as the panel view — this lens weights them the way this judge cares.

Scored by The Municipal IT Lead

Panel median The Municipal IT Lead This judge’s scores over the panel median. Each label opens its reasoning below.
Scores per criterion, in stars out of 5
Criterion Panel median The Municipal IT Lead
Service desk, incidents & requests 3 of 5 3 of 5
Change, problem & release management 3.5 of 5 3.5 of 5
Assets, CMDB & discovery 3 of 5 3 of 5
Self-service portal & service catalog 2 of 5 2.5 of 5
Deployment, integrations & multi-client operation 3 of 5 3 of 5
European sovereignty 3.5 of 5 3.5 of 5
Pricing transparency 1.5 of 5 1.5 of 5

Service desk, incidents & requests

How this is scored

How tickets come in and get resolved: intake by email, portal, chat, phone and Microsoft Teams or Slack, incidents and service requests told apart, categories, priorities and an impact-urgency matrix, assignment rules and queues, SLAs with escalation and business hours, major incidents, templates and canned responses, a knowledge base for agents, automations and workflows, time tracking on tickets, and reports and dashboards on volume, resolution time and SLA compliance.

0 — Not a ticketing or service desk product; requests cannot be recorded and worked in it.

3 — Tickets from email and a web form with status, priority and assignment; SLAs, automation and reporting are basic or not described.

5 — Multi-channel intake (email, portal, chat or Teams), incidents and service requests told apart, assignment rules and queues, SLAs with escalation and business hours, an agent knowledge base, rule-based automations, and standard reports on volume, resolution time and SLA compliance.

8 — A visual workflow builder for any ticket type, major incident handling with communication to affected users, SLAs per service, customer and contract, skills- or load-based routing, time tracking on tickets, AI suggestions or classification with what they do stated, custom dashboards and scheduled reports, and a mobile app for agents.

10 — A service desk an organisation of thousands runs on: every workflow, form and SLA configurable without code and versioned, omnichannel intake with one history per requester, AI features documented with their data use and limits, operational level agreements and underpinning contracts tracked, and every report reproducible from an exportable ticket history.

Report an error

The Municipal IT Lead

Requests come in through mail-to-ticket and a user portal, incidents and requests are managed as separate processes, and SLA monitoring with escalation, availability windows and holiday calendars, automated ticket assignment and dispatch, predefined replies and exportable reports on ticket volume, SLA compliance and average resolution time are all documented. That covers the working core for a 900-staff district, though we found no public information on time tracking per ticket, major-incident handling or a mobile app for agents. 2 8 13

Report an error

Change, problem & release management

How this is scored

The ITIL processes behind the ticket: problem records linked to incidents with root cause and known errors, change requests with standard, normal and emergency types, risk and impact assessment, approvals and a change advisory board, a change calendar with blackout periods, release and deployment records, links between changes, problems, incidents and configuration items, process certifications (PinkVERIFY, PeopleCert/AXELOS) named with their scope, and audit trails that a regulated buyer can show an auditor.

0 — No change or problem management of any kind; only tickets.

3 — A change or problem ticket type with a status and an approval step; change types, risk, calendar and links to incidents are basic or not described.

5 — Problem records linked to incidents with root cause and known errors, change requests with standard, normal and emergency types, multi-step approvals, a change calendar, changes linked to incidents and configuration items, and an audit trail of who approved what.

8 — Risk and impact assessment that reads affected services from the CMDB, a CAB workflow with agenda and decisions recorded, blackout periods and collision detection on the change calendar, release management with deployment tasks, change templates for standard changes, and an ITIL process certification named with the processes it covers.

10 — Change and problem management a regulated organisation can be audited on: every process configurable and versioned, change success and failure rates reported, a full trail from incident through problem and change to release exportable, the mapping to ISO/IEC 20000, ITIL 4 or DORA requirements documented, and certifications published with their scope and date.

Report an error

The Municipal IT Lead

Change management is documented in ITIL terms with normal, routine and emergency types, a change calendar, CAB approval via a kanban board, and impact analysis that reads the CMDB to foresee effects on infrastructure, customer services and contracts; changes appear on the incident screen for the last 72 hours and as a tab on the configuration item, and problems are fully documented with problem counts per equipment in the automated reports. We found no public information on blackout periods or calendar collision detection, and the claim of ITIL-certified processes is made without naming the processes covered. 9 2 8 1

Report an error

Assets, CMDB & discovery

How this is scored

What the product knows about the things tickets are about: an asset inventory of hardware, software and licences, a CMDB with configuration item types, attributes and relationships, a service map or dependency view, agent-based or agentless discovery, imports and synchronisation from Active Directory, Entra ID, Intune, SCCM, JAMF or a discovery tool, software licence compliance, contracts, warranties and the asset life cycle, and assets linked to users, tickets and changes.

0 — No asset or configuration data at all; tickets cannot be linked to devices or services.

3 — A list of assets with basic fields that can be linked to a ticket; relationships, discovery and licences are basic or not described.

5 — An asset inventory of hardware and software, a CMDB with configurable CI types and relationships, network discovery or an inventory agent, an import or sync from Active Directory or Entra ID, contracts and warranties per asset, and assets linked to users, tickets and changes.

8 — A visual service and dependency map used for impact analysis, discovery documented for named platforms (Windows, macOS, Linux, network devices, cloud accounts), connectors to named sources (Intune, SCCM, JAMF, VMware, AWS, Azure), software licence compliance and metering, the full asset life cycle from purchase to disposal, and data quality rules for the CMDB.

10 — A CMDB an organisation can trust for audits and outages: a documented data model with reconciliation of several sources, CI history and change tracking, service models from business service to infrastructure, licence optimisation for named vendors, and every CI and relationship exportable and reachable by API.

Report an error

The Municipal IT Lead

The CMDB is the centre of the product: a customizable data model, licence and warranty management, audit and integrity checks, a data synchronisation engine with collectors, automated creation of server components, and new support for containers, data flows and hardware and operating-system end-of-life, with configuration items linked to tickets and changes through impact analysis. We found no public information on discovery or connectors for named platforms such as Intune, SCCM or JAMF, or on a visual service map, so it stands above the middle but well short of the top band. 2 8 11 9

Report an error

Self-service portal & service catalog

How this is scored

What employees or clients see: a self-service portal with the service catalog, request forms with fields and approvals per service, ticket status and history for the requester, a searchable knowledge base for end users, announcements and outage notices, a virtual agent or chatbot, password reset or other automated fulfilment, branding and languages, single sign-on for the portal, access from Teams or a mobile app, and satisfaction surveys.

0 — No portal or end-user access of any kind; requests can only be emailed or phoned in.

3 — A web portal where users open tickets and see their status; a catalog, knowledge base and approvals are basic or not described.

5 — A branded portal with a service catalog, request forms with approval steps, an end-user knowledge base with search, ticket status and history, announcements, single sign-on, several languages, and satisfaction surveys after resolution.

8 — A service catalog with conditional forms, costs and delivery times per item, automated fulfilment for named requests (password reset, software install, onboarding), a virtual agent in the portal and in Teams or Slack, deflection measured, portals per client or department, and accessibility (WCAG) stated.

10 — A portal that runs as the front door of the organisation: catalog, forms and fulfilment built without code and reused across IT, HR and facilities, the virtual agent documented with its sources and data use, deflection and satisfaction reported per service, and accessibility conformance published with its level.

Report an error

The Municipal IT Lead

A native user portal, directly integrated into the product, carries a service catalogue with a dedicated dashboard, configurable forms and building blocks, approval automation on tickets, knowledge base integration, single sign-on, and automated handling of simple requests including password loss. We found no public information on announcements and outage notices, satisfaction surveys, portal languages or accessibility, so for our teachers and clerks this reaches the middle level rather than higher. 2 11 12 8

Report an error

Deployment, integrations & multi-client operation

How this is scored

How the product is run and connected: a cloud edition and an on-premise or open-source edition with feature parity stated, system requirements and update cadence, a documented REST API and webhooks, integrations with Microsoft 365, Teams, Entra ID, Slack, monitoring tools, RMM and remote support tools, single sign-on (SAML, OIDC) and SCIM, roles and permissions, multi-client or multi-tenant operation with separated data for MSPs, time and contract billing for MSPs, a migration path from other tools, and a public status page.

0 — No documented way to run, connect or administer the product.

3 — Runs as one edition with user roles and an email connection; the API, integrations and other editions are basic or not described.

5 — A documented REST API, integrations with Microsoft 365, Teams and Entra ID or Active Directory, single sign-on, role-based permissions, at least one monitoring or remote support integration, and either an on-premise edition or a stated hosting model with uptime terms.

8 — Cloud and on-premise or open-source editions with feature parity stated, webhooks and an integration marketplace, SCIM provisioning, multi-tenant operation with separated client data for MSPs, time and contract billing, named RMM and monitoring connectors, a documented migration from named tools, and a public status page with uptime history.

10 — Operation at scale and on the customer's terms: open-source code under a named licence or a self-hosted edition with full parity, configuration as code or a staging-to-production transport documented, an API covering every object, high availability and disaster recovery documented, and SLA and support terms published.

Report an error

The Municipal IT Lead

Both a SaaS edition — hosted in France, with a dedicated virtual machine and instance per customer, a 99.3 percent availability commitment, and a disaster recovery plan — and an on-premise option are documented, alongside a downloadable open-source Community edition and a public code repository; a REST API, webhooks including an OAuth webhook, compatibility with Teams, Slack and Power Automate, SSO, MFA and role-based permissions are listed. We found no public information on SCIM provisioning, a public status page, a documented migration from named tools, or stated feature parity between the editions. 3 2 4 13 14 15

Report an error

European sovereignty

How this is scored

Who the contracting entity and the parent company are, where tickets, attachments, user directories and CMDB data are stored and processed, and who the subprocessors are (hosting, email delivery, AI features, support and payment tools). Independently sourced by the sovereignty pipeline; a service desk holds personal data about every employee and often credentials and network details, so the whole chain counts, not only the database. An on-premise or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.

0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.

3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.

5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (email delivery, AI features, support access, payment) run through non-EU providers without a stated safeguard, or the vendor is non-EU with an EU data centre option.

8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, BSI C5, SOC 2) stated — or an on-premise edition documented that keeps every record on the customer's own servers.

10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.

Report an error

The Municipal IT Lead

Combodo is a French SAS in Échirolles with a registered SIRET and an appointed Data Protection Officer, the SaaS runs on OVH in a European datacenter carrying ISO 27001 and HDS, backups are encrypted in a second European datacenter, the privacy policy states that no data is transferred outside the European Union, and an on-premise open-source edition exists that we could run on our own servers. We found no public information on a published data processing agreement or a full list of subprocessors with their locations, which is exactly what our data protection officer would demand before sign-off. 4 6 7 13 3

Report an error

Pricing transparency

How this is scored

Whether a buyer can compute the real annual cost from public pages alone: price per agent, technician or analyst and tier, whether requesters and portal users are free, what counts as an asset or node and how it is priced, which modules (CMDB, change, asset discovery, AI, ESM) cost extra, the on-premise licence or subscription and its maintenance, the free or open-source edition and paid support, minimum term, onboarding and setup.

0 — No public prices at all; every customer is a sales call.

3 — A starting price or a free edition exists, but how cost scales with agents, assets or modules is unclear.

5 — Tiers are public with their price per agent and main inclusions, but at least one commonly needed piece (asset packs, CMDB or discovery, AI features, on-premise licence, onboarding) is unpriced or "on request".

8 — Every tier priced publicly with its scaling rule (agents, assets, clients), add-ons and asset packs priced, the on-premise licence and maintenance or the open-source support plans priced, minimum term and VAT treatment stated.

10 — Complete price computability: annual cost derivable for a given number of agents, assets and modules, cloud or on premise, with every add-on, setup, training, support and overage fee and the cancellation and data-return terms published.

Report an error

The Municipal IT Lead

The Community edition is public at no cost for up to 10 agents, the SaaS free version is described as fully complete with support included in the price, and training formats are published — but the captured subscription page presents the Atelier and Forge tiers, service levels Bronze, Silver and Gold, without any prices. For a public tender I need a price list the procurement office can annex, and no annual cost is computable from the public pages alone. 1 3 13

Report an error

European sovereignty — proven facts

0 of 6 dimensions proven

Built only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.

Hosting location Not determined ⚠ unverified — uncited Report an error
Hosting options Not determined ⚠ unverified — uncited Report an error
Open source Not determined ⚠ unverified — uncited Report an error
Data processing agreement Not determined — uncited Report an error
Transfer impact assessment Not determined ⚠ unverified — uncited Report an error

Questions about iTop

Is iTop European?

Yes. whats-best.ai classifies iTop as EU-Made.

Where does iTop store data?

The default storage location for customer data is not stated on the vendor’s pages as of 1 Nov 2026. The vendor’s pages mention France as hosting location, per the vendor’s page captured 1 Nov 2026.

Does iTop have a free plan?

Yes. iTop has a free plan, per the vendor’s page captured 1 Nov 2026.

What are the best alternatives to iTop?

As of 2 Nov 2026, the panel rates ManageEngine ServiceDesk Plus (3.5/5), Xurrent ITSM (3/5) and GLPI (3/5) highest among the other 14 IT Service Management products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is GLPI (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: iTop alternatives.

Where this could be wrong

What we left out

A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.

Do you know more about iTop? Tell us Report an error on this page

Sources (15)

The pages every claim on this page was read from — each one checked, dated, and kept verifiable.

  1. 1 Vendor homepage combodo.com Checked 1 Nov 2026 Details →
  2. 2 Features page combodo.com Checked 1 Nov 2026 Details →
  3. 3 Subscription levels page (no prices) combodo.com Checked 1 Nov 2026 Details →
  4. 4 Security / trust page combodo.com Checked 1 Nov 2026 Details →
  5. 5 Company page combodo.com Checked 1 Nov 2026 Details →
  6. 6 Legal notice combodo.com Checked 1 Nov 2026 Details →
  7. 7 Privacy policy combodo.com Checked 1 Nov 2026 Details →
  8. 8 Service desk, incidents & requests — found from sitemap combodo.com Checked 1 Nov 2026 Details →
  9. 9 Change, problem & release management — found from sitemap combodo.com Checked 1 Nov 2026 Details →
  10. 10 Assets, CMDB & discovery — found from sitemap combodo.com Checked 1 Nov 2026 Details →
  11. 11 Assets, CMDB & discovery — found from sitemap combodo.com Checked 1 Nov 2026 Details →
  12. 12 Self-service portal & service catalog — found from sitemap combodo.com Checked 1 Nov 2026 Details →
  13. 13 Deployment, integrations & multi-client operation — found from sitemap combodo.com Checked 1 Nov 2026 Details →
  14. 14 Deployment, integrations & multi-client operation — found from sitemap combodo.com Checked 1 Nov 2026 Details →
  15. 15 Code repository (open-source licence) — found from the homepage github.com Checked 1 Nov 2026 Details →