Knowledge Base & Wiki

BookStack

UK / wider Europe Report an error

Panel rating · 6 judges · How to read the stars

Category median

Sovereignty: not determined

0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.

by HTTP Functions Ltd · www.bookstackapp.com

An AI-assisted analysis of public evidence — not a hands-on test.

Every score, rationale and verdict on this page is AI-generated. Every claim cites the source it was read from. Nothing here is a human star review — and no score can be bought. How scores are made →

Method and versions

The Operations Lead v1.0 · The IT Administrator v1.0 · The Support Knowledge Manager v1.0 · The Engineering Lead v1.0 · The Quality Manager v1.0 · The Skeptic v1.0 · rubric v1 · evaluated 1 Nov 2026

Report an error on this page Is this your product? →

Link to this page

HTML

<a href="https://whats-best.ai/software/knowledge-base/bookstack"><img src="https://whats-best.ai/badge/knowledge-base/bookstack.svg" alt="BookStack: AI-assisted analysis on whats-best.ai" height="66"></a>

Markdown

[![BookStack: AI-assisted analysis on whats-best.ai](https://whats-best.ai/badge/knowledge-base/bookstack.svg)](https://whats-best.ai/software/knowledge-base/bookstack)

Add ?theme=dark to the image address for dark backgrounds. The badge shows the category and the month of the latest evaluation, and EU-Made where that is the product’s provenance. It never shows a score.

BookStack at a glance

Vendor: HTTP Functions Ltd
Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026
Data hosting: Not stated on the vendor’s pages as of 1 Nov 2026
Free plan: Yes, per the vendor’s own page source, captured 1 Nov 2026
Panel verdict: The AI panel rates BookStack 3/5, the mean of 6 judges. BookStack is free, MIT-licensed documentation software that is self-hosted only, with no per-user pricing; the support plans of HTTP Functions Ltd of Hampshire, UK, at £450 /year and £4,500 /year with VAT stated as not included, are the only priced items. how scores are made
As of: Vendor pages captured 1 Nov 2026; evaluated by the panel 1 Nov 2026. all sources

BookStack alternatives, European ones first →

Read this page as one judge. Each weighs the same scores by what they care about.

The Engineering Lead

Weighted verdict

Leads a forty-person engineering team at a Berlin fintech that writes runbooks, architecture decisions and on-call guides. Writes in Markdown, links pages to Jira tickets and Slack threads, and has moved the team's docs twice. Wants fast search, code blocks and diagrams that render, an API and webhooks to generate pages from the pipeline, AI answers that cite their pages, and a full export the next tool can read.

Same scores as the panel view — this lens weights them the way this judge cares.

Scored by The Engineering Lead

Panel median The Engineering Lead This judge’s scores over the panel median. Each label opens its reasoning below.

Scores per criterion, in stars out of 5
Criterion	Panel median	The Engineering Lead
Editor, structure & search	3 of 5	3 of 5
Verification, ownership & freshness	1.5 of 5	1.5 of 5
Permissions, SSO & administration	3.5 of 5	3.5 of 5
Help-center publishing & integrations	2 of 5	2.5 of 5
Import, export & self-hosting	4 of 5	4 of 5
European sovereignty	4 of 5	4 of 5
Pricing transparency	4.5 of 5	4.5 of 5

Editor, structure & search

How this is scored

How knowledge is written, organised and found again: the editor (rich text, Markdown, tables, embeds, diagrams, code blocks), templates, spaces or collections and a page tree, linking and backlinks, real-time co-editing, comments and mentions, page history with restore, full-text search across pages and attachments with filters, search inside the chat tool, and AI answers that cite the pages they draw on.

0 — Not a wiki or knowledge base; pages cannot be written, organised or searched with it.

3 — Pages with a rich-text editor in folders or a tree and a basic search; templates, history, co-editing and attachment search are basic or not described.

5 — A rich editor with tables, embeds and code blocks, templates, spaces or collections with a page tree, real-time co-editing with comments and mentions, page history with restore, and full-text search with filters.

8 — Search across attachments and connected tools, backlinks and a link graph or related pages, diagrams and Markdown both supported, AI answers that cite their source pages, search from Slack or Teams, and a template library with variables or page properties.

10 — Finding knowledge as a solved problem: search quality and how AI answers are grounded explained in published documentation, answers limited to what the reader may see, multilingual content with linked translations, and every page reachable within a stated structure from one place.

Report an error

The Engineering Lead

The WYSIWYG and Markdown editors, built-in diagrams.net drawing, the books/chapters/pages structure with page revisions, and search filters deep enough for tags, dates, content type and per-viewer history would cover most of our runbook and architecture-decision needs. We found no public information on real-time co-editing, attachment search, backlinks or AI answers that cite their source pages. 1 3 12 13

Report an error

Verification, ownership & freshness

How this is scored

Whether the content stays true: page owners or experts named per page, verification with a review date and a reminder when it lapses, approval or publishing workflows with drafts and reviewers, read confirmations for mandatory pages, analytics on views, searches without a result and stale pages, duplicate detection, archiving rules, and an audit trail of who changed and approved what.

0 — No way to see who owns a page or when it was last checked beyond the edit date.

3 — Page history and last-edited dates; owners, verification, approvals and content analytics are basic or not described.

5 — An owner or verifier per page, a review interval with reminders, a draft and publish step, page view statistics, and archived pages kept out of search.

8 — Approval workflows with several reviewers, read confirmations for mandatory pages, analytics on failed searches and stale content, duplicate or outdated content flagged automatically, and an exportable audit trail of changes and approvals.

10 — Governance that a regulated organisation runs on: controlled documents with versioned approvals that meet a named standard (ISO 9001, GxP), expiry and review enforced per space, knowledge gaps reported from searches and AI questions, and every published statement traceable to an approved version.

Report an error

The Engineering Lead

Page revisions are described and search can filter by who created, updated or owns a page, so change history and authorship are trackable. We found no public information on review dates with reminders, approval workflows, read confirmations or content analytics, which is the freshness loop a regulated fintech runbook needs. 1 13 14

Report an error

Permissions, SSO & administration

How this is scored

Who may see and edit what, and how the administrator keeps control: roles and permissions per space and per page, restricted or private pages, guest and external access, groups synced from Azure AD/Entra ID, Google Workspace or LDAP, single sign-on (SAML, OIDC), SCIM provisioning, two-factor authentication enforced, an audit log of access and permission changes, and admin controls over sharing and public links. Where the data is hosted and certifications are scored under sovereignty.

0 — Everyone in a workspace sees and edits everything; no permissions of any kind.

3 — Admins, members and guests, or private and shared pages; per-space or per-page rights, SSO and an audit log are basic or not described.

5 — Permissions per space and per page, guest access with limits, single sign-on through Google or Microsoft, two-factor authentication, groups, and admin control over public sharing.

8 — SAML or OIDC single sign-on with any identity provider, SCIM provisioning or LDAP and directory group sync, enforced 2FA, an audit log of views, edits and permission changes, IP or domain restrictions, and permissions honoured by search and AI answers.

10 — Access control an enterprise auditor accepts as documented: granular roles with inheritance explained, just-in-time and external access with expiry, every access and permission change logged and exportable to a SIEM, and the permission model published with its limits.

Report an error

The Engineering Lead

Granular role permissions with overrides at shelf, book, chapter and page level, documented cascade and specificity rules, SAML2, OIDC and LDAP with group sync, and MFA enforceable per role — all stated as built in without extra charge — is a strong model we could map our teams onto. We found no public information on SCIM provisioning, an audit log of views and permission changes, or IP restrictions. 1 7 14 15 18

Report an error

Help-center publishing & integrations

How this is scored

How knowledge reaches people outside the editor: public or password-protected sites and help centers with a custom domain, branding and SEO controls, an in-app widget or contextual help, ticket deflection in a help desk, multilingual publishing, integrations with Slack, Microsoft Teams, Jira, Google Drive, help desks and CRMs, a browser extension, a documented REST or GraphQL API, webhooks, and an MCP server or connector for AI assistants.

0 — Content cannot be shared beyond the editor and nothing connects to it.

3 — Sharing a page by public link and a few integrations such as Slack; a branded help center, an API and webhooks are basic or not described.

5 — A published site or help center with custom domain and branding, integrations with Slack or Teams and Google Drive or Microsoft 365, a documented API, and embeds of common tools.

8 — A help center with SEO controls, multilingual publishing, access for logged-in customers and analytics, a widget or contextual help inside the customer's product, help desk integration with ticket deflection, webhooks, and a connector or MCP server for AI assistants.

10 — Knowledge delivered wherever it is needed from one source: internal and public audiences served from the same pages with per-audience rules, a complete API with SDKs and rate limits stated, a marketplace of integrations, and every channel measured in one report.

Report an error

The Engineering Lead

The REST API is documented inside the instance and covers both import and export, and outgoing webhooks come with Slack-compatible payloads, an example format and an optional background queue — enough to generate pages from our pipeline. We found no public information on help-center publishing with custom domains, Jira, Google Drive or help-desk integrations, or a connector for AI assistants. 4 10 16 17

Report an error

Import, export & self-hosting

How this is scored

What arriving and leaving would cost: import from Confluence, Notion, Google Docs, Word and Markdown with structure, attachments and links kept, a full export of every space in an open format (Markdown, HTML, XML, PDF) with attachments and history, an API that reaches all content, a stated migration path from Confluence Server or Data Center, open-source code under a named licence, and a self-hosted or on-premise edition with its own documentation.

0 — Content cannot be imported or exported; it can only be read in the vendor's interface.

3 — Single pages export to PDF or Word and some files can be imported; a full export, a Confluence import and self-hosting are basic or not described.

5 — Import from Confluence or Notion and from Word or Markdown, a full workspace export to Markdown or HTML with attachments, a documented API covering pages, and a stated retention of data after cancellation.

8 — A Confluence migration tool or service that keeps hierarchy, permissions and attachments, a full export with history in an open format, a self-hosted or on-premise edition with installation and update documentation, and data returned or deleted on termination under stated terms.

10 — The customer owns the content end to end: open-source code under a named licence that runs fully self-hosted with feature parity stated, a complete export another tool can import without loss, and the deletion of every copy on termination documented.

Report an error

The Engineering Lead

MIT-licensed and self-hosted only, with Ubuntu installation scripts, requirements and an update channel documented, exports to HTML, Markdown, PDF, plain text and a portable ZIP that re-imports into another instance, plus backup and restore instructions. The captured pages state there is no automated Confluence migration (REST API assisted only), and export including page history is not described. 3 6 9 17 18

Report an error

European sovereignty

How this is scored

Who the contracting entity and the parent company are, where pages, attachments and search indexes are stored and processed, and who the subprocessors are (hosting, CDN, search, email, support, payment, and the AI model provider that reads pages for answers and summaries, with whether content is used for training). Independently sourced by the sovereignty pipeline; a wiki holds internal processes, customer data and trade secrets, so the whole chain counts, not only the database. A self-hosted or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.

0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.

3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.

5 — EU data residency available and an EU contracting entity or EU representative, but parts of the chain (CDN, search, email, support, AI model) run through non-EU providers without a stated safeguard, or EU residency is limited to the higher tiers.

8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations including the AI model provider, no training on customer content stated, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated — or a self-hosted edition documented that keeps every page on the customer's own servers.

10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor including AI, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.

Report an error

The Engineering Lead

Exclusively self-hosted MIT-licensed software means our pages, attachments and MySQL database stay on infrastructure we choose behind our own firewall, and the project states the software ships without usage-tracking or marketing-tracking systems — the whole chain is ours. The support vendor is HTTP Functions Ltd of Hampshire, UK; we found no public information on security certifications or a data processing agreement for the support relationship. 3 6 11 18

Report an error

Pricing transparency

How this is scored

Whether a buyer can compute the real annual cost from public pages alone: price per user and tier, readers or guests free or charged, minimum seats, which features (SSO, SCIM, audit log, verification, help-center publishing, custom domain, AI answers, EU data residency) cost extra, the free tier and its limits, storage limits, the self-hosted edition's licence and support price, minimum term and setup or migration fees.

0 — No public prices at all; every customer is a sales call.

3 — A starting price or a free tier exists, but how cost scales with users, readers or features is unclear.

5 — Tiers are public with their price per user and main inclusions, but at least one commonly needed piece (SSO, AI, readers or guests, EU residency, the self-hosted edition) is unpriced or "on request".

8 — Every tier priced publicly with its scaling rule (editors, readers, guests, storage), add-ons priced, the self-hosted edition's licence and support cost stated, minimum seats, term and VAT treatment stated.

10 — Complete price computability: annual cost derivable for a given number of editors and readers and a feature set, with every add-on, AI credit, setup, migration and support fee and the cancellation and data-return terms published.

Report an error

The Engineering Lead

The software is free with no per-user pricing, and features like SAML2, LDAP and multi-factor authentication are stated as included at no charge, so the licence cost for any team size is zero. Support is publicly priced at '£450 /year' Professional and '£4,500 /year' Enterprise, with the captured pages stating 'VAT is not included in current pricing although may be chargeable in the future'; only the full support terms sit behind a link. 4 5 18

Report an error

European sovereignty — proven facts

0 of 6 dimensions proven

Built only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.

Legal entity	Not determined ⚠ unverified	—	uncited Report an error
Hosting location	Not determined	—	uncited Report an error
Hosting options	Not determined ⚠ unverified	—	uncited Report an error
Open source	Not determined ⚠ unverified	—	uncited Report an error
Data processing agreement	Not determined	—	uncited Report an error
Transfer impact assessment	Not determined	—	uncited Report an error

Questions about BookStack

Is BookStack European?

Yes, though not from the EU. whats-best.ai classifies BookStack as UK / wider Europe.

Where does BookStack store data?

Not stated on the vendor’s pages as of 1 Nov 2026.

Does BookStack have a free plan?

Yes. BookStack has a free plan, per the vendor’s page captured 1 Nov 2026.

What are the best alternatives to BookStack?

As of 1 Nov 2026, the panel rates Document360 (3.5/5), XWiki (3/5) and Docmost (3/5) highest among the other 13 Knowledge Base & Wiki products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Document360 (UK / wider Europe). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: BookStack alternatives.

Where this could be wrong

Evidence ages. The oldest capture behind this page is from 1 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
Weak sourcing — Legal entity, Hosting options, Open source. Not confirmed on the vendor’s own pages as captured.
AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.

What we left out

A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.

4 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
1 integrations fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
1 legal fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us

Do you know more about BookStack? Tell us Report an error on this page

Sources (19)

The pages every claim on this page was read from — each one checked, dated, and kept verifiable.

1 Vendor homepage www.bookstackapp.com Checked 1 Nov 2026 Details →
2 Features page www.bookstackapp.com Checked 1 Nov 2026 Details →
3 Features page (Confluence alternative) www.bookstackapp.com Checked 1 Nov 2026 Details →
4 Project FAQ (funding, services, editions) www.bookstackapp.com Checked 1 Nov 2026 Details →
5 Pricing page (support plans) www.bookstackapp.com Checked 1 Nov 2026 Details →
6 Documentation (installation) www.bookstackapp.com Checked 1 Nov 2026 Details →
7 Security page www.bookstackapp.com Checked 1 Nov 2026 Details →
8 Documentation (single sign-on) www.bookstackapp.com Checked 1 Nov 2026 Details →
9 Documentation (backup and export) www.bookstackapp.com Checked 1 Nov 2026 Details →
10 Documentation (API and customisation) www.bookstackapp.com Checked 1 Nov 2026 Details →
11 Support vendor homepage www.httpfunctions.com Checked 1 Nov 2026 Details →
12 Editor, structure & search — found from sitemap www.bookstackapp.com Checked 1 Nov 2026 Details →
13 Editor, structure & search — found from sitemap www.bookstackapp.com Checked 1 Nov 2026 Details →
14 Permissions, SSO & administration — found from sitemap www.bookstackapp.com Checked 1 Nov 2026 Details →
15 Permissions, SSO & administration — found from sitemap www.bookstackapp.com Checked 1 Nov 2026 Details →
16 Help-center publishing & integrations — found from sitemap www.bookstackapp.com Checked 1 Nov 2026 Details →
17 Import, export & self-hosting — found from sitemap www.bookstackapp.com Checked 1 Nov 2026 Details →
18 Import, export & self-hosting — found from sitemap www.bookstackapp.com Checked 1 Nov 2026 Details →
19 Code repository (open-source licence) — found from the homepage codeberg.org Checked 1 Nov 2026 Details →