# Docmost — Knowledge Base & Wiki

Docmost by Docmost, Inc. holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-11-01. Provenance: Rest of world; sovereignty: 1 of 6 dimensions proven.

- Vendor: Docmost, Inc. (https://docmost.com)
- Category: [Knowledge Base & Wiki](https://whats-best.ai/software/knowledge-base.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/knowledge-base/docmost
- Alternatives: https://whats-best.ai/software/knowledge-base/docmost/alternatives ([markdown](https://whats-best.ai/software/knowledge-base/docmost/alternatives.md))
- Data as of: 2026-11-06 · evaluated 2026-11-01 · oldest source captured 2026-11-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Docmost, Inc.
- Headquarters: Incorporated in United States [S8]
- Data hosting: Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan: Yes, per the vendor’s own page [S2]

## The panel's verdict

Docmost is an open-source collaborative wiki, self-hosted or as a cloud service, with a Business tier published at $6 /seat/mo (annually) and a 10-seat minimum, and an Enterprise tier at custom pricing. The bench scored it strongest on access control and portability and hosting: SSO over SAML 2.0, OIDC and LDAP with named providers, SCIM provisioning, MFA and page-level permissions on one side; an AGPL 3.0 core that installs with Docker, runs air-gapped with no external dependencies, and documented import and export on the other. It is weakest on publishing and integrations, where we found no public information on a branded help center, custom-domain publishing, webhooks or Slack and Teams integration. Knowledge governance spans 4-6, with read confirmation listed as coming soon and no public information on review reminders, named page owners or stale-content analytics. The genuine split is sovereignty: the judges weighed the same facts — a Delaware vendor, United States hosting by default, OpenAI for AI inference, no third-party certification claimed — and disagreed over how far the self-hosted, air-gapped edition offsets the American cloud chain.

**Speaks for it:**
- Access control scored 7 to 8, with SSO over SAML 2.0, OIDC and LDAP against named providers, SCIM provisioning, MFA and page- and space-level permissions
- Portability and hosting scored 7 to 8, with import from Confluence, Notion, Markdown, HTML, PDF and DOCX, export to Markdown and HTML, and a documented air-gapped self-hosted edition under AGPL 3.0
- Authoring and search scored 6 to 7, covering a real-time collaborative editor, diagrams in Draw.io, Excalidraw and Mermaid, and full-text search inside PDF and DOCX attachments
- Business pricing is public at $6 /seat/mo (annually) with a 10-seat minimum and a detailed inclusions list, and a Community install is free
- Contract and exit mechanics are published: 30-day invoice terms, a 45-day refund window on the initial invoice, and content deleted from active systems within 30 days and backups within 60 of cancellation

**Held against it:**
- Publishing and integrations scored 4 to 5: knowledge reaches outsiders by public link and API, with no public information on a help center, custom-domain publishing, webhooks or Slack and Teams integration
- Knowledge governance spans 4 to 6, with read confirmation listed as coming soon and no public information on review reminders, named page owners, stale-content or failed-search analytics, or duplicate detection
- Sovereignty split 5 to 8: cloud hosting and processing are in the United States by default under Delaware law, OpenAI, LLC in the US provides AI inference, no third-party certification is claimed, and we found no public information on training with customer content
- Enterprise — where audit logs, SCIM, SIEM and page verification sit — is custom pricing, and we found no public information on reader or guest seats or storage limits
- We found no public information on whether search and AI answers honour page permissions

**Best for:**
- You need a self-hosted, air-gapped wiki on your own servers, with local file storage by default and local LLMs via Ollama or vLLM — portability and hosting scored 7 to 8
- Your team authenticates through Microsoft Entra ID, Okta or OneLogin and needs SSO, SCIM provisioning and page-level permissions — access control scored 7 to 8
- You are moving off Confluence or Notion and want documented import plus export to Markdown and HTML on exit
- You run internal documentation with diagrams, Markdown shortcuts and AI answers grounded in your own pages

**Avoid if:**
- You need to publish knowledge to customers as a branded help center on a custom domain — the captured pages document public link sharing, and publishing and integrations scored 4 to 5
- Your quality system depends on review reminders, named page owners and stale-content analytics — knowledge governance scored 4 to 6 and read confirmation is listed as coming soon
- You require a certified cloud service — the data processing agreement states technical and organisational measures but no third-party certifications — and you do not plan to self-host
- You must compute the full annual cost from public pages — Enterprise, which holds SCIM, audit logs, SIEM and page verification, is custom pricing

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Operations Lead | The IT Administrator | The Support Knowledge Manager | The Engineering Lead | The Quality Manager | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Editor, structure & search | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 | 3/5 | 3/5 |
| Verification, ownership & freshness | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 2/5 |
| Permissions, SSO & administration | 3.5/5 | 3.5/5 | 3.5/5 | 4/5 | 3.5/5 | 3.5/5 |
| Help-center publishing & integrations | 2/5 | 2/5 | 2.5/5 | 2/5 | 2.5/5 | 2.5/5 |
| Import, export & self-hosting | 3.5/5 | 3.5/5 | 4/5 | 4/5 | 3.5/5 | 3.5/5 |
| European sovereignty | 2.5/5 | 3.5/5 | 3.5/5 | 4/5 | 3/5 | 3/5 |
| Pricing transparency | 3/5 | 2.5/5 | 3/5 | 3/5 | 2.5/5 | 3/5 |
| **Weighted verdict** | **3/5** | **3/5** | **3/5** | **3.5/5** | **3/5** | **3/5** |

### The judges

- **The Operations Lead** (v1.0): Head of operations at a 180-person machine builder in Baden-Württemberg, where onboarding, travel rules and the service hotline's answers live in a shared drive, three OneNote books and two colleagues' heads. Wants one place the whole company actually uses: an editor office staff manage without training, a search that finds the answer rather than the file, pages that name who keeps them current, and a price that does not double when the workshop gets read access.
- **The IT Administrator** (v1.0): Runs IT for a public utility with 900 staff whose Confluence Server held twelve years of pages until Atlassian ended its support. Was offered the cloud, read the subprocessor list and went looking instead. Needs a migration that keeps page trees, permissions and attachments, single sign-on against Entra ID with groups synced, an audit log the auditor accepts, and an edition they can run in the utility's own data centre if the works council or the regulator asks.
- **The Support Knowledge Manager** (v1.0): Owns the knowledge base of a Dutch SaaS company with customers in six languages and a support team of twenty-five. Writes once for agents and customers, publishes the public part as a help center on the company's own domain, and watches which searches find nothing. Wants review dates that nag the right expert, translations kept in step with the source, a widget inside the product, and articles that show up in the help desk next to the ticket.
- **The Engineering Lead** (v1.0): Leads a forty-person engineering team at a Berlin fintech that writes runbooks, architecture decisions and on-call guides. Writes in Markdown, links pages to Jira tickets and Slack threads, and has moved the team's docs twice. Wants fast search, code blocks and diagrams that render, an API and webhooks to generate pages from the pipeline, AI answers that cite their pages, and a full export the next tool can read.
- **The Quality Manager** (v1.0): Quality manager at a medical device supplier certified to ISO 9001 and ISO 13485, where every work instruction must be approved, versioned and read by the people it applies to. Today that means Word files, a sign-off sheet and an audit every spring. Wants approval workflows with named reviewers, read confirmations, review dates that expire pages, an audit trail they can export for the certifier, and permissions that keep drafts out of sight.
- **The Skeptic** (v1.0): Has migrated a wiki whose "export" turned out to be one PDF per page, watched a self-hosted edition announced as retired with two years' notice, and read "your data is never used for training" above a subprocessor list naming two AI providers. Asks what a full export contains, which model reads the pages and where, whether readers are billed like editors — and what leaving would cost.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: 1 of 6 dimensions proven.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Incorporated in US | 0/2 | [S8] |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Access controls: yes · yes · yes [S8]
- Breach notification hours: 72 [S8]
- CCPA service provider: service provider · yes [S8]
- Customer responsibility: yes [S9]
- Data deletion: yes · yes [S8]
- DPA exists: DPA is incorporated automatically upon acceptance of Subscription Agreement · yes [S8]
- Dpia assistance: yes [S8]
- Encryption in transit: TLS 1.2 or higher · yes [S8]
- GDPR rights: yes [S6]
- GDPR scc: GDPR · yes [S9]
- Laws covered: GDPR/EEA · CCPA/CPRA · UK GDPR · Swiss FADP [S8]
- MFA: yes [S1]
- No certifications claimed: page states TOMs but no third-party certifications · no [S8]
- No sensitive data: no [S8]
- Privacy policy reference: personal data processed per Docmost Privacy Policy [S7]
- Regulatory targets: ITAR · FedRAMP · GDPR [S1]
- Right request SLA: yes · one month [S6]
- Sccs: yes · yes · yes [S8]
- Security posture: commercially acceptable means · no [S6]
- Subprocessor change notice days: email dpo@docmost.com · 30 [S8]

**Data**
- Access until period end: yes [S7]
- Deletion timeline: 60 · 30 [S7]
- Export recommendation: yes [S7]
- Retention policy: as long as required by purpose, longer for legal obligation or consent [S6]
- System logs: system logs · IP address [S6]

**Hosting**
- Regions: or as otherwise agreed in an Order Form; EU processing available via sub-processors · United States [S8]
- Self hosted: yes · yes [S3]

**Integrations**
- API: yes [S1]
- API auth: bearer · API key via Authorization: Bearer header [S5]
- API available: yes [S5]
- API client libraries: Shell · Ruby · Node.js · PHP · Python [S5]
- API collab websocket: yes [S5]
- API enterprise gating: 403 · yes [S5]
- API methods: POST · {data, success, status} [S5]
- API pagination: cursor · 100 · 1 · 20 [S5]
- API scalar docs: Scalar [S5]
- API self hosted: collaborative wiki software · yes [S5]
- API version: v1.1.0 [S5]
- Embed tools: Figma · Airtable · Google Drive · Mermaid · Draw.io · Excalidraw · Google Sheets · Miro · Loom · Typeform [S1]
- List: GitHub · GitLab · Jira · Azure Devops · Linear · Figma [S3]
- Multi year license key: yes [S9]
- Openapi spec: OpenAPI 3.1.0 · yes [S5]

**Legal**
- Audit cost shifting: 5 [S9]
- Audit rights: 30 · yes [S9]
- Contracting entity: Docmost, Inc [S9]
- Customer content ownership: yes [S9]
- Data processing location: no [S6]
- Entity: Docmost, Inc. [S7]
- Entity: Docmost, Inc. · 251 Little Falls Dr, Wilmington, DE 19808, USA · dpo@docmost.com [S8]
- Force majeure: 30 [S7]
- Governing law: Delaware, U.S.A. [S7]
- Governing law: State of Delaware, U.S.A. [S9]
- Indemnification cap: fees paid in preceding 12 months [S7]
- Ip indemnity: yes [S9]
- Jurisdiction: New Castle County, Delaware, U.S.A. [S9]
- Last updated: 2025-03-08 [S6]
- License: Business or Enterprise license · AGPL 3.0 [S3]
- Owner: Docmost, Inc. · hello@docmost.com [S6]
- Policy changes consent: yes [S6]
- Terms update date: 2026-03-23 [S7]
- Warranty disclaimer: yes [S9]

**Pricing**
- Auto renewal: yes · 30 [S9]
- Business price: USD · 10 · annual · 6 [S2]
- Cancellation self serve: dashboard billing section · support team · yes [S7]
- Community free: 0 [S2]
- Enterprise custom: custom_pricing · yes [S2]
- Fee increase renewal: 30 [S9]
- Invoice terms: 30 [S9]
- Late fees: 1 [S9]
- Non refundable: yes [S9]
- Refund initial window: 45 [S9]
- Refund timing: 14 [S7]
- Taxes exclusive: yes · yes [S7]
- Taxes exclusive: US taxes based on Docmost's net income excluded · no [S9]
- Termination refund pro rata: yes [S9]
- Trial: https://customers.docmost.com · yes [S3]
- True up annual: True-Up on each anniversary of Effective Date for additional users [S9]

**Product**
- Access features: spaces & permissions, page-level granular permissions, SSO (SAML 2.0/OIDC/LDAP), MFA, SCIM provisioning [S2]
- Affiliate use allowed: yes · yes · yes [S9]
- Aggregate usage reporting: yes · yes [S9]
- AI chat document answers: PDF · DOCX · yes [S1]
- AI features: AI Search (AI Answers), AI Assistant (translate, edit, generate), MCP support [S2]
- AI llm providers: Ollama · vLLM · OpenAI · Gemini · Azure OpenAI · any OpenAI-compatible provider [S1]
- App secret min length: 32 [S4]
- Auth basic: Email and password · LDAP · SSO via SAML / OIDC · MFA via TOTP [S3]
- Bases: table · kanban [S3]
- Business inclusions: Kanban & Bases, SSO (SAML 2.0/OIDC/LDAP), page-level granular permissions, AI & MCP, Confluence importer, attachments search, MFA, API keys, diagrams, version history, air-gapped ready, email support [S2]
- Cloud version: https://app.docmost.com · yes [S3]
- Core features: Pages/editor/rich blocks, Bases databases, Kanban, realtime collaboration; unlimited spaces on all plans [S2]
- Dark mode: yes [S3]
- Default file storage local: local · S3 · Azure Blob Storage [S4]
- Dependencies postgres redis: yes · yes [S4]
- Deployment options: self-hosted/on-premises, air-gapped deployment, audit logs, SIEM, security controls (partial), retention controls [S2]
- Description: Open-source collaborative wiki and documentation software with real-time collaboration [S3]
- Diagramming tools: Draw.io · Excalidraw · Mermaid [S1]
- Diagrams: Draw.io · Excalidraw · Mermaid [S3]
- Downloads: 5M+ downloads [S1]
- Editor: Collaborative real-time editor [S3]
- Enterprise inclusions: SCIM, audit logs, SIEM, security control, page verification/review workflow, read confirmation (coming soon), priority support [S2]
- Enterprise trial features: customers.docmost.com · Bases · SSO · AI · Audit logs · SCIM provisioning [S4]
- First user workspace owner: workspace owner [S4]
- Health endpoint: /api/health [S4]
- Import export: Markdown · HTML · Markdown · HTML · ZIP archive · Notion · Confluence · PDF · DOCX [S3]
- Import formats: import Markdown, HTML, Notion, Confluence, DOCX, PDF; export Markdown, HTML [S2]
- Installation docker recommended: yes [S4]
- License modification rights: Customer may use, reproduce, modify, prepare derivative works based upon, and display Docmost Enterprise Edition code [S9]
- Markdown shortcuts: yes [S3]
- Math: KaTeX math equations [S3]
- Migration sources: Confluence · Notion · HTML · Markdown [S1]
- Modification scope: Customer may modify the Software and publish patches, limited by paid internal users [S9]
- On premises deployment: air-gapped networks · isolated environments · private data centers [S1]
- On premises wiki: On-premises wiki for enterprise teams [S1]
- Page history: yes [S3]
- Page verification: yes · ISO 9001 · ISO 27001 · SOC 2 [S1]
- Paid AI: yes · AI Chat · Ask AI · AI Answers · MCP [S3]
- Paid API: REST API with personal API keys and admin key management [S3]
- Paid approval workflow: yes [S3]
- Paid attachment search: yes [S3]
- Paid page permissions: yes [S3]
- Paid SCIM: yes [S3]
- Paid SSO: SAML 2.0 · OIDC · Microsoft Entra ID · Okta · OneLogin [S3]
- Postgres image: postgres:18 [S4]
- Print pdf: yes [S3]
- Public sharing: yes [S1]
- Public sharing: yes [S3]
- Rbac permissions: yes [S1]
- Real time collaboration: yes [S1]
- Redis image: redis:8 [S4]
- Search: Full-text search with space and type filters [S3]
- Search features: full-text search, Typesense driver, attachments full-text search (PDF, DOCX) [S2]
- Self hosted AI: search · chat · assistants · MCP · yes [S1]
- Spaces: Spaces for teams, projects, or departments with their own permissions [S3]
- Ssl via reverse proxy: reverse-proxy guide [S4]
- SSO protocols: SAML 2.0 · OpenId Connect · LDAP [S1]
- Synced blocks: yes [S3]
- Team spaces: yes [S1]
- Translations: 12 [S3]
- Websocket required for editor: yes [S4]

**Subprocessors**
- Disclosure: yes [S6]
- List: Amazon Web Services, Inc. · Hosting & infrastructure provider · Hetzner Online GmbH · Hosting provider · PostHog, Inc. · Product analytics and monitoring · Backblaze, Inc. · Object storage and backups · Cloudflare, Inc. · CDN, DNS, and sec… [S8]

**Support**
- Compliance termination: 15 [S9]
- Paid priority: Priority support via direct email [S3]
- Refund email: help@docmost.com [S7]
- Sales contact: sales@docmost.com [S3]
- Unlimited questions: yes [S9]

## Questions

### Is Docmost European?

No. whats-best.ai classifies Docmost as Rest of world. Its vendor, Docmost, Inc., is incorporated in United States, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/13408).

### Where does Docmost store data?

Not stated on the vendor’s pages as of 1 Nov 2026.

### Does Docmost have a free plan?

Yes. Docmost has a free plan, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/13399).

### What are the best alternatives to Docmost?

As of 1 Nov 2026, the panel rates [Document360 (3.5/5)](https://whats-best.ai/software/knowledge-base/document360), [BookStack (3/5)](https://whats-best.ai/software/knowledge-base/bookstack) and [XWiki (3/5)](https://whats-best.ai/software/knowledge-base/xwiki) highest among the other 13 Knowledge Base & Wiki products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Document360](https://whats-best.ai/software/knowledge-base/document360) (UK / wider Europe). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Docmost alternatives](https://whats-best.ai/software/knowledge-base/docmost/alternatives).

## What this page leaves out

- 6 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 5 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 5 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 5 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://docmost.com/ (checked 2026-11-01)
- [S2] Pricing page: https://docmost.com/pricing (checked 2026-11-01)
- [S3] Documentation: https://docmost.com/docs/ (checked 2026-11-01)
- [S4] Documentation (self-hosting): https://docmost.com/docs/installation (checked 2026-11-01)
- [S5] API documentation: https://docmost.com/api-docs (checked 2026-11-01)
- [S6] Privacy policy: https://docmost.com/privacy (checked 2026-11-01)
- [S7] Terms of service: https://docmost.com/terms (checked 2026-11-01)
- [S8] Data processing agreement (dpa): https://docmost.com/dpa (checked 2026-11-01)
- [S9] Terms (Enterprise edition): https://docmost.com/enterprise-edition-terms (checked 2026-11-01)
- [S10] Code repository (open-source licence) — found from the homepage: https://github.com/docmost/docmost (checked 2026-11-01)

---

Cite as: whats-best.ai, "Docmost — Knowledge Base & Wiki", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/knowledge-base/docmost

Corrections: https://whats-best.ai/correct/1236?target=page