Knowledge Base & Wiki
Docmost
Rest of world Report an errorPanel rating · 6 judges · How to read the stars
Category median
Sovereignty: 1 of 6 dimensions proven
0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Docmost, Inc. · docmost.com
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Docmost at a glance
- Vendor
- Docmost, Inc.
- Headquarters
- Incorporated in United States source, captured 1 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan
- Yes, per the vendor’s own page source, captured 1 Nov 2026
- Panel verdict
- The AI panel rates Docmost 3/5, the mean of 6 judges. Docmost is an open-source collaborative wiki, self-hosted or as a cloud service, with a Business tier published at $6 /seat/mo (annually) and a 10-seat minimum, and an Enterprise tier at custom pricing. how scores are made
- As of
- Vendor pages captured 1 Nov 2026; evaluated by the panel 1 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Docmost is an open-source collaborative wiki, self-hosted or as a cloud service, with a Business tier published at $6 /seat/mo (annually) and a 10-seat minimum, and an Enterprise tier at custom pricing. The bench scored it strongest on access control and portability and hosting: SSO over SAML 2.0, OIDC and LDAP with named providers, SCIM provisioning, MFA and page-level permissions on one side; an AGPL 3.0 core that installs with Docker, runs air-gapped with no external dependencies, and documented import and export on the other. It is weakest on publishing and integrations, where we found no public information on a branded help center, custom-domain publishing, webhooks or Slack and Teams integration. Knowledge governance spans 4-6, with read confirmation listed as coming soon and no public information on review reminders, named page owners or stale-content analytics. The genuine split is sovereignty: the judges weighed the same facts — a Delaware vendor, United States hosting by default, OpenAI for AI inference, no third-party certification claimed — and disagreed over how far the self-hosted, air-gapped edition offsets the American cloud chain.
Speaks for it
- Access control scored 7 to 8, with SSO over SAML 2.0, OIDC and LDAP against named providers, SCIM provisioning, MFA and page- and space-level permissions
- Portability and hosting scored 7 to 8, with import from Confluence, Notion, Markdown, HTML, PDF and DOCX, export to Markdown and HTML, and a documented air-gapped self-hosted edition under AGPL 3.0
- Authoring and search scored 6 to 7, covering a real-time collaborative editor, diagrams in Draw.io, Excalidraw and Mermaid, and full-text search inside PDF and DOCX attachments
- Business pricing is public at $6 /seat/mo (annually) with a 10-seat minimum and a detailed inclusions list, and a Community install is free
- Contract and exit mechanics are published: 30-day invoice terms, a 45-day refund window on the initial invoice, and content deleted from active systems within 30 days and backups within 60 of cancellation
Held against it
- Publishing and integrations scored 4 to 5: knowledge reaches outsiders by public link and API, with no public information on a help center, custom-domain publishing, webhooks or Slack and Teams integration
- Knowledge governance spans 4 to 6, with read confirmation listed as coming soon and no public information on review reminders, named page owners, stale-content or failed-search analytics, or duplicate detection
- Sovereignty split 5 to 8: cloud hosting and processing are in the United States by default under Delaware law, OpenAI, LLC in the US provides AI inference, no third-party certification is claimed, and we found no public information on training with customer content
- Enterprise — where audit logs, SCIM, SIEM and page verification sit — is custom pricing, and we found no public information on reader or guest seats or storage limits
- We found no public information on whether search and AI answers honour page permissions
Best for
- You need a self-hosted, air-gapped wiki on your own servers, with local file storage by default and local LLMs via Ollama or vLLM — portability and hosting scored 7 to 8
- Your team authenticates through Microsoft Entra ID, Okta or OneLogin and needs SSO, SCIM provisioning and page-level permissions — access control scored 7 to 8
- You are moving off Confluence or Notion and want documented import plus export to Markdown and HTML on exit
- You run internal documentation with diagrams, Markdown shortcuts and AI answers grounded in your own pages
Avoid if
- You need to publish knowledge to customers as a branded help center on a custom domain — the captured pages document public link sharing, and publishing and integrations scored 4 to 5
- Your quality system depends on review reminders, named page owners and stale-content analytics — knowledge governance scored 4 to 6 and read confirmation is listed as coming soon
- You require a certified cloud service — the data processing agreement states technical and organisational measures but no third-party certifications — and you do not plan to self-host
- You must compute the full annual cost from public pages — Enterprise, which holds SCIM, audit logs, SIEM and page verification, is custom pricing
The scores
| Criterion | Panel median |
|---|---|
| Editor, structure & search | 3.5 of 5 |
| Verification, ownership & freshness | 3 of 5 |
| Permissions, SSO & administration | 3.5 of 5 |
| Help-center publishing & integrations | 2.5 of 5 |
| Import, export & self-hosting | 3.5 of 5 |
| European sovereignty | 3.5 of 5 |
| Pricing transparency | 3 of 5 |
Verification, ownership & freshness
Show reasoningHide reasoning
How this is scored
Whether the content stays true: page owners or experts named per page, verification with a review date and a reminder when it lapses, approval or publishing workflows with drafts and reviewers, read confirmations for mandatory pages, analytics on views, searches without a result and stale pages, duplicate detection, archiving rules, and an audit trail of who changed and approved what.
0 — No way to see who owns a page or when it was last checked beyond the edit date.
3 — Page history and last-edited dates; owners, verification, approvals and content analytics are basic or not described.
5 — An owner or verifier per page, a review interval with reminders, a draft and publish step, page view statistics, and archived pages kept out of search.
8 — Approval workflows with several reviewers, read confirmations for mandatory pages, analytics on failed searches and stale content, duplicate or outdated content flagged automatically, and an exportable audit trail of changes and approvals.
10 — Governance that a regulated organisation runs on: controlled documents with versioned approvals that meet a named standard (ISO 9001, GxP), expiry and review enforced per space, knowledge gaps reported from searches and AI questions, and every published statement traceable to an approved version.
The Operations Lead
Verification is real: pages can carry requested reviews, tracked approvals and a verified mark, with the homepage tying this to ISO 9001, ISO 27001 and SOC 2 standards, and Enterprise adds audit logs, SIEM and the verification workflow, with read confirmation marked as coming soon. We found no public information on review intervals with reminders, a draft-and-publish step, analytics on failed searches or stale and duplicate content, or a named owner per page. 1 2 3
The IT Administrator
Page verification is documented with review requests, approval tracking and pages marked as verified, and the vendor ties it to meeting ISO 9001, ISO 27001 and SOC 2; version history and audit logs appear on the pricing and enterprise pages. Read confirmation is listed as coming soon, and we found no public information on review reminders, analytics on stale content or failed searches, or duplicate detection. 1 2 3
The Support Knowledge Manager
Page verification with review requests, tracked approvals and verified marks is documented and tied by the vendor to ISO 9001, ISO 27001 and SOC 2, alongside version history and audit logs; read confirmation is still listed as coming soon. We found no public information on review-date reminders, stale-page or failed-search analytics, or duplicate detection, so the review-date-that-nags-the-expert workflow I run on is only partly evidenced. 1 2 3
The Engineering Lead
Page verification with review requests, tracked approvals and pages marked verified — with an explicit claim this supports ISO 9001, ISO 27001 and SOC 2 — fits our runbook review cycle, and version history with restore plus enterprise audit logs feeding SIEM are listed. Read confirmation is only marked as coming soon, and we found no public information on review intervals with reminders, named page owners, or analytics on failed searches and stale content. 1 2 3
The Quality Manager
Page verification and an approval workflow are documented — request reviews, track approvals, mark pages verified — with ISO 9001 named as a target standard, page history with restore, and audit logs plus SIEM in the Enterprise edition; read confirmation is listed as coming soon. We found no public information on review intervals with reminders, named page owners, stale-content or failed-search analytics, or duplicate detection. 1 2 3
The Skeptic
Verification workflows where you request reviews, track approvals and mark pages verified are documented, alongside version history and Enterprise audit logs and SIEM. Read confirmation is listed as coming soon, and we found no public information on named per-page owners, review intervals with reminders, or analytics on views, failed searches and stale content — so the workflows exist but the freshness machinery around them is undocumented. 1 2 3
Permissions, SSO & administration
Show reasoningHide reasoning
How this is scored
Who may see and edit what, and how the administrator keeps control: roles and permissions per space and per page, restricted or private pages, guest and external access, groups synced from Azure AD/Entra ID, Google Workspace or LDAP, single sign-on (SAML, OIDC), SCIM provisioning, two-factor authentication enforced, an audit log of access and permission changes, and admin controls over sharing and public links. Where the data is hosted and certifications are scored under sovereignty.
0 — Everyone in a workspace sees and edits everything; no permissions of any kind.
3 — Admins, members and guests, or private and shared pages; per-space or per-page rights, SSO and an audit log are basic or not described.
5 — Permissions per space and per page, guest access with limits, single sign-on through Google or Microsoft, two-factor authentication, groups, and admin control over public sharing.
8 — SAML or OIDC single sign-on with any identity provider, SCIM provisioning or LDAP and directory group sync, enforced 2FA, an audit log of views, edits and permission changes, IP or domain restrictions, and permissions honoured by search and AI answers.
10 — Access control an enterprise auditor accepts as documented: granular roles with inheritance explained, just-in-time and external access with expiry, every access and permission change logged and exportable to a SIEM, and the permission model published with its limits.
The Operations Lead
The permission story is strong: spaces with their own permissions, granular view and edit rights on individual pages, role-based groups, MFA, and single sign-on through SAML 2.0, OIDC or LDAP against Entra ID, Okta or OneLogin, plus SCIM provisioning of users and groups and audit logs with SIEM in Enterprise. Guest and external access, enforced two-factor for everyone, IP or domain restrictions, and whether search and the AI answers honour page permissions are things we found no public information on. 1 2 3 8
The IT Administrator
This is close to what I need against Entra ID: single sign-on over SAML 2.0, OIDC and LDAP with Microsoft Entra ID named among the providers, SCIM provisioning that automates users and groups, MFA via TOTP, page-level and space-level permissions with group-based RBAC, and audit logs plus SIEM in the Enterprise tier, with the data processing agreement committing to maintain access logs. We found no public information on enforced two-factor policy for all users, IP or domain restrictions, or whether search and AI answers honour page permissions. 1 2 3 8
The Support Knowledge Manager
Spaces and page-level granular permissions, RBAC with groups, SSO over SAML 2.0, OIDC and LDAP with named identity providers, SCIM provisioning, MFA via TOTP, audit logs with a SIEM mention, and controlled public page sharing are all documented. We found no public information on enforced tenant-wide two-factor, IP or domain restrictions, or whether search and AI answers honour the permission model. 1 2 3 8
The Engineering Lead
SAML 2.0, OIDC and LDAP with named identity providers (Entra ID, Okta, OneLogin), SCIM provisioning, TOTP multi-factor, groups with granular view, edit and admin rights at both space and page level, plus audit logs with SIEM output — that is a set I could take to our security team, and the data processing agreement confirms access logs and multi-factor for administrative access. We found no public information on IP or domain restrictions, guest access terms, or whether search and AI answers honour page permissions. 1 2 3 8
The Quality Manager
Page-level granular permissions, groups with view, edit and admin rights, SSO via SAML 2.0 and OIDC with Microsoft Entra ID, Okta and OneLogin, LDAP, MFA via TOTP, SCIM provisioning, and audit logs with SIEM are documented, and the data processing agreement commits to MFA for administrative access and access logs. We found no public information on IP or domain restrictions, guest access limits, or permissions being honoured by search and AI answers. 1 2 3 8
The Skeptic
SAML 2.0, OIDC and LDAP single sign-on with named providers (Entra ID, Okta, OneLogin), SCIM with group provisioning, page-level granular permissions, MFA via TOTP, and Enterprise audit logs and SIEM give an administrator a lot to work with. We found no public information on enforced two-factor across the workspace, guest access, IP or domain restrictions, or whether search and AI answers honour page permissions — that last one is exactly where wikias leak. 2 3 8
Help-center publishing & integrations
Show reasoningHide reasoning
How this is scored
How knowledge reaches people outside the editor: public or password-protected sites and help centers with a custom domain, branding and SEO controls, an in-app widget or contextual help, ticket deflection in a help desk, multilingual publishing, integrations with Slack, Microsoft Teams, Jira, Google Drive, help desks and CRMs, a browser extension, a documented REST or GraphQL API, webhooks, and an MCP server or connector for AI assistants.
0 — Content cannot be shared beyond the editor and nothing connects to it.
3 — Sharing a page by public link and a few integrations such as Slack; a branded help center, an API and webhooks are basic or not described.
5 — A published site or help center with custom domain and branding, integrations with Slack or Teams and Google Drive or Microsoft 365, a documented API, and embeds of common tools.
8 — A help center with SEO controls, multilingual publishing, access for logged-in customers and analytics, a widget or contextual help inside the customer's product, help desk integration with ticket deflection, webhooks, and a connector or MCP server for AI assistants.
10 — Knowledge delivered wherever it is needed from one source: internal and public audiences served from the same pages with per-audience rules, a complete API with SDKs and rate limits stated, a marketplace of integrations, and every channel measured in one report.
The Operations Lead
External reach is limited to public links that let anyone view a page; we found no public information on a branded help center, custom domain for published sites, an in-app widget, help desk integration or webhooks. The documented REST API with an OpenAPI 3.1.0 specification, client examples, cursor pagination and bearer keys, together with GitHub, GitLab, Jira, Azure DevOps and Linear integrations, embeds of Miro, Loom and Google Drive, and MCP support for AI assistants lifts it above the basics. 1 2 3 5
The IT Administrator
Pages can be shared publicly by link, integrations are listed for GitHub, GitLab, Jira, Azure DevOps, Linear and Figma with a wide set of embeds, MCP support is listed, and there is a documented REST API with an OpenAPI 3.1.0 specification, client examples in Shell, Ruby, Node.js, PHP and Python, cursor pagination and enterprise-gated endpoints. We found no public information on a help center or published site with a custom domain, Slack or Teams integration, or webhooks. 1 2 3 5
The Support Knowledge Manager
Public page sharing by link, a self-hosted instance on our own domain through a reverse-proxy guide, a documented REST API with an OpenAPI 3.1.0 spec and client libraries, embeds of common tools, integrations with GitHub, GitLab, Jira and Azure DevOps, and MCP support for AI assistants are evidenced. We found no public information on a branded help center with SEO controls, multilingual publishing, an in-product widget, help-desk ticket deflection, webhooks, or any Slack or Teams integration — for my help-center use case this is the weakest area. 1 2 3 4 5
The Engineering Lead
Public link sharing, integrations with GitHub, GitLab, Jira, Azure DevOps and Linear, embeds for Figma, Miro and Google Drive, MCP support for AI assistants, and a documented REST API with a downloadable OpenAPI 3.1.0 spec and client libraries in five languages cover my pipeline-to-pages needs. We found no public information on a branded help center, custom-domain publishing, webhooks, an in-app widget, ticket deflection or multilingual publishing, which is the core of this criterion. 1 2 3 5
The Quality Manager
Public link sharing, integrations with GitHub, GitLab, Jira, Azure DevOps, Linear and Figma, embeds of common tools, MCP support, and a documented REST API with an OpenAPI 3.1.0 specification, interactive documentation and client libraries are published. We found no public information on a branded help center or published site with a custom domain, webhooks, or Slack and Teams integrations. 1 2 3 5
The Skeptic
Public link sharing, a documented REST API with a downloadable OpenAPI 3.1.0 spec, client libraries and cursor pagination, embeds of ten tools, integrations with GitHub, Jira and friends, and MCP support for AI assistants. We found no public information on a branded help center with custom domain, webhooks, or a widget inside the customer's product, so knowledge reaches outsiders mainly by link and by API. 1 2 3 5
Import, export & self-hosting
Show reasoningHide reasoning
How this is scored
What arriving and leaving would cost: import from Confluence, Notion, Google Docs, Word and Markdown with structure, attachments and links kept, a full export of every space in an open format (Markdown, HTML, XML, PDF) with attachments and history, an API that reaches all content, a stated migration path from Confluence Server or Data Center, open-source code under a named licence, and a self-hosted or on-premise edition with its own documentation.
0 — Content cannot be imported or exported; it can only be read in the vendor's interface.
3 — Single pages export to PDF or Word and some files can be imported; a full export, a Confluence import and self-hosting are basic or not described.
5 — Import from Confluence or Notion and from Word or Markdown, a full workspace export to Markdown or HTML with attachments, a documented API covering pages, and a stated retention of data after cancellation.
8 — A Confluence migration tool or service that keeps hierarchy, permissions and attachments, a full export with history in an open format, a self-hosted or on-premise edition with installation and update documentation, and data returned or deleted on termination under stated terms.
10 — The customer owns the content end to end: open-source code under a named licence that runs fully self-hosted with feature parity stated, a complete export another tool can import without loss, and the deletion of every copy on termination documented.
The Operations Lead
Moving in and out both look workable: import from Confluence, Notion, Markdown, HTML, PDF and DOCX with a Confluence importer named in the Business plan, export to Markdown and HTML, a documented API, and an open-source AGPL 3.0 core that installs with Docker, runs air-gapped with no external dependencies, defaults to local file storage and can use self-hosted language models; the terms state content is deleted from active systems within 30 days and backups within 60 after cancellation. We found no public information on export including attachments and version history, or on the Confluence import preserving hierarchy and permissions. 1 3 4 7 9
The IT Administrator
A Confluence importer and migration is an included Business feature, imports run from Confluence, Notion, HTML, Markdown, PDF and DOCX, export runs to Markdown and HTML, and the software is open source under AGPL 3.0 and documented as fully self-hosted, runnable air-gapped with no external dependencies, with Docker installation documentation and local default file storage. We found no public information on whether the Confluence migration carries hierarchy, permissions and attachments, and no public information on an export that includes page history. 1 2 3 4
The Support Knowledge Manager
Arriving and leaving both look manageable: imports from Confluence, Notion, Markdown, HTML, DOCX and PDF, export to Markdown and HTML, an open-source AGPL 3.0 edition that self-hosts fully — air-gapped with no external dependencies — with Docker installation documentation, and content deleted from active systems and backups within stated timelines on termination. We found no public information on whether export includes page history, or whether the Confluence migration keeps hierarchy, permissions and attachments. 1 3 4 7 8
The Engineering Lead
Import from Confluence, Notion, Markdown, HTML, DOCX and PDF, export to Markdown and HTML, an API covering pages, and content deleted from active systems within 30 days and backups within 60 days of cancellation make arriving and leaving documented rather than a fight. Self-hosting is first-class — AGPL 3.0 code, a Docker installation guide, air-gapped deployment — though we found no public information on export that includes page history or on Confluence import keeping hierarchy, permissions and attachments. 2 3 4 7
The Quality Manager
Self-hosting is documented with Docker installation guidance, PostgreSQL and Redis components, storage options and air-gapped operation with no external dependencies, AGPL 3.0 is named as the open-source licence, imports from Confluence, Notion, Markdown, HTML, PDF and DOCX and export to Markdown and HTML are described, and deletion timelines (30 days active systems, 60 days backups) with return or destruction on request are stated. We found no public information on an export that includes page history, or on whether the Confluence import preserves hierarchy, permissions and attachments. 1 3 4 7 8
The Skeptic
Import from Confluence, Notion, DOCX and Markdown; export to Markdown and HTML; AGPL 3.0 code self-hostable with Docker documentation and air-gapped deployment with no external dependencies; content deleted from active systems within 30 days and backups within 60 of cancellation, returned or destroyed on request, with the vendor telling you to export before the period ends. But the export is described at page level — we found no public information on a full-workspace export with attachments or history, or on what the Confluence migration preserves — and the Enterprise features ride a license key even when you host it yourself, with a new key issued each anniversary. 3 4 7 8 9
European sovereignty
panel opinion
panel disagrees
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where pages, attachments and search indexes are stored and processed, and who the subprocessors are (hosting, CDN, search, email, support, payment, and the AI model provider that reads pages for answers and summaries, with whether content is used for training). Independently sourced by the sovereignty pipeline; a wiki holds internal processes, customer data and trade secrets, so the whole chain counts, not only the database. A self-hosted or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU data residency available and an EU contracting entity or EU representative, but parts of the chain (CDN, search, email, support, AI model) run through non-EU providers without a stated safeguard, or EU residency is limited to the higher tiers.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations including the AI model provider, no training on customer content stated, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated — or a self-hosted edition documented that keeps every page on the customer's own servers.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor including AI, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.
The Operations Lead
The cloud chain is American: Docmost, Inc. of Wilmington, Delaware contracts under Delaware law, services are hosted and processed in the United States by default with EU processing only as agreed in an order form, OpenAI in the US provides AI inference, the captured pages state technical and organisational measures but no third-party certification, and we found no statement on training with customer content. Subprocessors are nevertheless published with their locations, the DPA with EU, UK and Swiss transfer clauses applies automatically, and the self-hosted edition — air-gapped, local storage by default, local language models — would let us keep every page on our own servers. 1 3 8 9
The IT Administrator
The cloud chain is American: a Delaware-incorporated vendor with Delaware governing law, hosting and processing in the United States by default, a full subprocessor list with locations including OpenAI for AI inference, standard contractual clauses and a published data processing agreement, and no ISO 27001 or SOC 2 certification claimed. What matters for us is the documented self-hosted path — fully self-hosted, air-gapped, no external dependencies, with local LLMs via Ollama or vLLM keeping AI on our own servers — though the enterprise terms provide for annual licence-key renewal and aggregate usage reporting, so I would verify the call-home behaviour before an air-gapped rollout. 1 3 8 9
The Support Knowledge Manager
The cloud path is American: Docmost, Inc. of Delaware with United States hosting by default and EU processing only via subprocessors as agreed in an order form, though the full subprocessor list with locations is published — including OpenAI for AI inference — and a data processing agreement with EU, UK and Swiss transfer clauses exists. What redeems it for a Dutch company is the self-hosted path: an open-source edition that runs air-gapped with no external dependencies, local storage by default and self-hosted LLMs, keeping every page on our own European servers. We found no public information on security certifications or on a statement that customer content is not used for AI training. 1 3 4 8 9
The Engineering Lead
The cloud chain is American end to end — a Delaware contracting entity, default hosting in the United States, and subprocessors listed with locations including OpenAI LLC for AI inference — with EU processing only as otherwise agreed in an order form and standard contractual clauses as the safeguard. What earns the score is the documented self-hosted edition: Docker installation, air-gapped with no external dependencies, local file storage by default and even local LLMs via Ollama or vLLM, keeping every page on our own European servers. No third-party certifications are stated on the data processing agreement, and we found no public information on training commitments for customer content. 3 4 8
The Quality Manager
The contracting entity is Docmost, Inc. in Delaware, USA, cloud pages are stated to be hosted and processed on servers in the United States by default with EU processing available via sub-processors as agreed, sub-processors are listed with their locations including OpenAI, LLC in the United States for AI inference, and an EU, UK and Swiss standard contractual clause framework is published in the DPA. No third-party certification is claimed on the DPA, we found no public information on whether customer content trains AI models, and a fully self-hosted, air-gapped edition is documented that can keep every page on the customer's own servers. 1 3 4 8 9
The Skeptic
The cloud service is hosted and processed on servers in the United States by a Delaware corporation under Delaware law, with a published DPA, SCCs, and a subprocessor list that names OpenAI, LLC in the United States for AI inference — and we found no public information on EU residency as a product option or on training on customer content. What lifts this is the documented self-hosted, air-gapped edition under AGPL that keeps every page on the customer's own servers, with local LLMs (Ollama, vLLM) named as an alternative to cloud models; the chain is only the customer's if the customer builds it. 1 3 8 9
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per user and tier, readers or guests free or charged, minimum seats, which features (SSO, SCIM, audit log, verification, help-center publishing, custom domain, AI answers, EU data residency) cost extra, the free tier and its limits, storage limits, the self-hosted edition's licence and support price, minimum term and setup or migration fees.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with users, readers or features is unclear.
5 — Tiers are public with their price per user and main inclusions, but at least one commonly needed piece (SSO, AI, readers or guests, EU residency, the self-hosted edition) is unpriced or "on request".
8 — Every tier priced publicly with its scaling rule (editors, readers, guests, storage), add-ons priced, the self-hosted edition's licence and support cost stated, minimum seats, term and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given number of editors and readers and a feature set, with every add-on, AI credit, setup, migration and support fee and the cancellation and data-return terms published.
The Operations Lead
Business is public at "$6 /seat/mo (annually)" with a minimum of 10 seats and its inclusions listed in detail, including SSO, AI and MCP, MFA and the Confluence importer, a Community install is free, and the terms state that fees exclude taxes, renewal needs 30 days' notice, the initial invoice carries a 45-day refund window, and content is deleted from active systems within 30 days and backups within 60 of cancellation. Enterprise is custom pricing through sales, and we found no public information on reader or guest seats, storage limits, or setup and migration fees. 2 3 7 9
The IT Administrator
Business is public at $6 /seat/mo (annually) with a 10-seat minimum and a detailed inclusions list covering SSO, AI, the Confluence importer, attachments search and MFA, the Community install is free, and the commercial terms publish 30-day invoice terms, a 1.0% per month late charge, a 45-day refund window on the initial invoice, annual true-up and taxes exclusive. Enterprise is Custom pricing, and that tier is where audit logs, SCIM, SIEM, page verification and priority support sit, so the edition a regulated buyer runs is a sales conversation; we found no public information on reader or guest pricing or storage limits. 2 3 9
The Support Knowledge Manager
The Business tier is public at $6 /seat/mo (annually) with a minimum 10 seats and a listed feature set, the community self-hosted edition is free, fees are stated as exclusive of taxes, and renewal, cancellation, refund and deletion terms are published. Enterprise — the tier carrying SCIM, audit logs and page verification — is custom pricing, and we found no public information on reader or guest pricing or on the licence and support cost of a paid self-hosted deployment. 2 3 7 9
The Engineering Lead
The Business tier is public at $6 /seat/mo (annually) with a 10-seat minimum and a detailed inclusion list (SSO, AI, Confluence importer, attachment search), the Community edition is a free install, and contract terms are published — taxes exclusive, auto-renewal with 30-day notice, a 45-day refund window, annual true-up. Enterprise, which holds SCIM, audit logs and page verification, is custom pricing, and we found no public information on reader or guest pricing or storage limits, so I cannot compute a full annual cost from public pages alone. 2 7 9
The Quality Manager
The Business plan is priced at $6 /seat/mo (annually) with a minimum of 10 seats and a detailed inclusions list, a free Community self-hosted install and a free trial licence exist, and terms state that fees are exclusive of taxes, invoices are due within 30 days, renewal requires 30 days' notice, and an initial 45-day refund window applies. Enterprise is custom pricing, and we found no public information on reader or guest pricing, storage limits, or the licence and support price of the self-hosted commercial edition. 2 3 7 9
The Skeptic
Business is published at "$6 /seat/mo (annually)" with a 10-seat minimum and a detailed inclusion list, Community is a free install, Enterprise is custom pricing, and the billing mechanics are unusually public: fees exclusive of taxes, auto-renewal with 30 days' notice, an annual true-up for added users, late fees of one percent per month, and a 45-day refund window on the initial invoice. We found no public information on reader or guest seats, storage limits, AI credits, or setup and migration fees — and the Enterprise tier is a sales conversation, so a large buyer cannot compute the annual cost from public pages. 2 3 9
European sovereignty — proven facts
1 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Incorporated in US ⚠ unverified | 0/2 pts | 8 Report an error |
|---|---|---|---|
| Hosting location | Not determined | — | uncited Report an error |
| Hosting options | Not determined ⚠ unverified | — | uncited Report an error |
| Open source | Not determined ⚠ unverified | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Docmost
Is Docmost European?
No. whats-best.ai classifies Docmost as Rest of world. Its vendor, Docmost, Inc., is incorporated in United States, per the vendor’s page captured 1 Nov 2026.
Where does Docmost store data?
Not stated on the vendor’s pages as of 1 Nov 2026.
Does Docmost have a free plan?
Yes. Docmost has a free plan, per the vendor’s page captured 1 Nov 2026.
What are the best alternatives to Docmost?
As of 1 Nov 2026, the panel rates Document360 (3.5/5), BookStack (3/5) and XWiki (3/5) highest among the other 13 Knowledge Base & Wiki products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Document360 (UK / wider Europe). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Docmost alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 1 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement, Open source, Hosting options. Not confirmed on the vendor’s own pages as captured.
- Weak sourcing — Legal entity. The address appears as the DPA's SCC contact block rather than an imprint or commercial register, so incorporation is inferred from the Delaware, USA address only.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 6 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 5 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 5 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 5 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 3 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (10)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage docmost.com Checked 1 Nov 2026 Details →
- 2 Pricing page docmost.com Checked 1 Nov 2026 Details →
- 3 Documentation docmost.com Checked 1 Nov 2026 Details →
- 4 Documentation (self-hosting) docmost.com Checked 1 Nov 2026 Details →
- 5 API documentation docmost.com Checked 1 Nov 2026 Details →
- 6 Privacy policy docmost.com Checked 1 Nov 2026 Details →
- 7 Terms of service docmost.com Checked 1 Nov 2026 Details →
- 8 Data processing agreement (dpa) docmost.com Checked 1 Nov 2026 Details →
- 9 Terms (Enterprise edition) docmost.com Checked 1 Nov 2026 Details →
- 10 Code repository (open-source licence) — found from the homepage github.com Checked 1 Nov 2026 Details →