Knowledge Base & Wiki
XWiki
EU-Made Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by XWiki SAS · xwiki.com
Compare with BlueSpice → Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
XWiki at a glance
- Vendor
- XWiki SAS
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan
- Not stated on the vendor’s pages as of 1 Nov 2026
- Starting price
- “Starting at €3.63/user/month” (vendor’s words) source, captured 1 Nov 2026
- Panel verdict
- The AI panel rates XWiki 3/5, the mean of 6 judges. XWiki is XWiki SAS's open-source wiki, offered as cloud or self-hosted. how scores are made
- As of
- Vendor pages captured 1 Nov 2026; evaluated by the panel 1 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
XWiki is XWiki SAS's open-source wiki, offered as cloud or self-hosted. Access control and pricing transparency hold a flat 7; portability and hosting and sovereignty cluster at 7-8; authoring and search sits at 6-7; publishing and integrations at 5-6; knowledge governance at 3-4 — the clear weak point. It is strongest on getting content in and out: a Confluence Migration Toolkit documented to move data, page history, users, permissions and attachments, export to PDF, ODT, RTF, XML and HTML, and a self-hosted edition with the same feature set as the cloud. Pricing runs from Starter €773 / year for 25 users to Enterprise €33,990 / year for 500 users. The flagged splits flag none and no criterion spans more than a point, though the captured pages give different figures for the starting per-user price — €3.63/user/month on the migration page against €2.58/user/month on the pricing page. Sovereignty rests on OVHcloud hosting in France with subprocessors OVH and Scaleway, both in France with no third-country transfer; we found no public information on a data processing agreement, an AI model provider, or a no-training statement.
Speaks for it
- Access control holds a flat 7 — permissions by wiki, space, page and group with view, edit, delete and administer rights, SSO from the Business plan, SCIM at Enterprise and IP allowlisting from Business
- Pricing transparency holds a flat 7 — four tiers carry exact euro figures plus a feature matrix showing where SSO, SCIM, IP allowlisting, custom domain and the AI integration sit
- Portability and hosting scores 7-8 — the Confluence Migration Toolkit moves data, page history, users, permissions, attachments and metadata, and a self-hosted edition is stated to match the cloud's feature set
- Sovereignty scores 7-8 — cloud instances run in France on OVHcloud and the subprocessor list names OVH and Scaleway, both in France with no third-country transfer
- Authoring and search scores 6-7 — real-time WYSIWYG editing with Markdown and slash commands, unlimited version history, and Solr search across documents, attachments and objects with filters and tags
Held against it
- Knowledge governance scores 3-4, the lowest band — we found no public information on page owners, review dates with reminders, approval workflows or an exportable audit trail
- Publishing and integrations scores 5-6 — we found no public information on help-center SEO controls, webhooks, Slack or Teams connectors, ticket deflection or an in-product widget
- The captured pages give different figures for the starting per-user price — €3.63/user/month on the migration page against €2.58/user/month on the pricing page
- We found no public information on a published data processing agreement, an AI model provider in the subprocessor chain, or a statement that customer content is not used for training
- We found no public information on reader or guest seats, VAT treatment or individual Pro App prices, and the free trial and the free download both require contact and project details
Best for
- You are migrating from Confluence — the toolkit moves data, page history, users, permissions and attachments and is included for free on Business and Enterprise plans
- You need the wiki on your own servers or hosted in France — a self-hosted edition with the same published feature set as the cloud, or cloud instances on OVHcloud in France
- You need fine-grained access control with enterprise sign-in — rights at wiki, space, page and group level, SSO from the Business plan and SCIM at Enterprise
- You want the price list before talking to sales — four tiers with exact euro figures and a feature-by-plan matrix are published
Avoid if
- You need named page owners, review reminders and approval workflows — knowledge governance scores 3-4 and we found no public information on this machinery
- Your help center depends on SEO controls, ticket deflection or an in-product widget — publishing and integrations scores 5-6
- You must budget an exact annual cost for a headcount between 25 and 500 users without asking the vendor — those are the published reference points
- You are buying for grounded AI answers — the AI integration is listed as a Beta on the Enterprise plan, and we found no public information on answers citing their source pages
The scores
| Criterion | Panel median |
|---|---|
| Editor, structure & search | 3 of 5 |
| Verification, ownership & freshness | 2 of 5 |
| Permissions, SSO & administration | 3.5 of 5 |
| Help-center publishing & integrations | 3 of 5 |
| Import, export & self-hosting | 4 of 5 |
| European sovereignty | 4 of 5 |
| Pricing transparency | 3.5 of 5 |
Verification, ownership & freshness
Show reasoningHide reasoning
How this is scored
Whether the content stays true: page owners or experts named per page, verification with a review date and a reminder when it lapses, approval or publishing workflows with drafts and reviewers, read confirmations for mandatory pages, analytics on views, searches without a result and stale pages, duplicate detection, archiving rules, and an audit trail of who changed and approved what.
0 — No way to see who owns a page or when it was last checked beyond the edit date.
3 — Page history and last-edited dates; owners, verification, approvals and content analytics are basic or not described.
5 — An owner or verifier per page, a review interval with reminders, a draft and publish step, page view statistics, and archived pages kept out of search.
8 — Approval workflows with several reviewers, read confirmations for mandatory pages, analytics on failed searches and stale content, duplicate or outdated content flagged automatically, and an exportable audit trail of changes and approvals.
10 — Governance that a regulated organisation runs on: controlled documents with versioned approvals that meet a named standard (ISO 9001, GxP), expiry and review enforced per space, knowledge gaps reported from searches and AI questions, and every published statement traceable to an approved version.
The Operations Lead
What the pages show is unlimited version history, an out-of-the-box activity dashboard, and an Analytics application described as revealing usage patterns and keeping knowledge relevant. I found no public information on a named owner or verifier per page, review dates with reminders, a draft-and-publish step, or read confirmations for mandatory pages — and pages that name who keeps them current is exactly what our onboarding and travel rules need. A Change Request extension is listed as supported at the Enterprise tier, but the captured pages do not describe what it does. 2 6
The IT Administrator
Unlimited version history is documented, a Pro Analytics Application is offered to keep knowledge relevant, and the Enterprise plan names Change Request among its supported extensions. We found no public information on per-page owners, review dates with reminders, read confirmations for mandatory pages, or an exportable audit trail of who changed and approved what — and that audit trail is exactly what our auditor asks for, so this stays low. 2 6
The Support Knowledge Manager
What is documented is unlimited version history, an out-of-the-box activity dashboard, and an Analytics Application (Pro) framed around usage patterns and keeping knowledge relevant. I found no public information on page owners, review dates with reminders, draft-and-approve workflows, read confirmations, failed-search analytics, duplicate detection or an audit trail of approvals — the exact freshness machinery I need for twenty-five agents writing in six languages — so this stays at the history-and-dates level. 2 6
The Engineering Lead
There is unlimited version history, an out-of-the-box activity dashboard, a Pro analytics application for usage patterns, and a Change Request extension named in the Enterprise supported-extensions list. Beyond that we found no public information on per-page owners, verification with review dates and reminders, approval workflows or read confirmations for mandatory pages — which is what a fintech on-call runbook process would need before I trust it. 2 6
The Quality Manager
For my ISO 13485 world this is the weak spot: unlimited version history, an out-of-the-box activity dashboard and a Pro analytics application for usage patterns are described, and an extension named Change Request is listed as supported on the Enterprise plan, but we found no public information on named page owners or verifiers, review dates with reminders, approval workflows with named reviewers, read confirmations for mandatory pages, duplicate or stale-content detection, or an exportable audit trail of changes and approvals. 2 6
The Skeptic
Unlimited version history, an out-of-the-box activity dashboard and a Pro analytics application for usage patterns and content relevance are described. I found no public information on page owners, verification with review dates and reminders, or a draft-and-approve publishing step; "Change Request" appears solely as the name of an extension supported at the Enterprise level, with no description of what it does. 2 6
Permissions, SSO & administration
Show reasoningHide reasoning
How this is scored
Who may see and edit what, and how the administrator keeps control: roles and permissions per space and per page, restricted or private pages, guest and external access, groups synced from Azure AD/Entra ID, Google Workspace or LDAP, single sign-on (SAML, OIDC), SCIM provisioning, two-factor authentication enforced, an audit log of access and permission changes, and admin controls over sharing and public links. Where the data is hosted and certifications are scored under sovereignty.
0 — Everyone in a workspace sees and edits everything; no permissions of any kind.
3 — Admins, members and guests, or private and shared pages; per-space or per-page rights, SSO and an audit log are basic or not described.
5 — Permissions per space and per page, guest access with limits, single sign-on through Google or Microsoft, two-factor authentication, groups, and admin control over public sharing.
8 — SAML or OIDC single sign-on with any identity provider, SCIM provisioning or LDAP and directory group sync, enforced 2FA, an audit log of views, edits and permission changes, IP or domain restrictions, and permissions honoured by search and AI answers.
10 — Access control an enterprise auditor accepts as documented: granular roles with inheritance explained, just-in-time and external access with expiry, every access and permission change logged and exportable to a SIEM, and the permission model published with its limits.
The Operations Lead
Permissions go down to wiki, space, page and group with view, edit, delete and administer rights — finer than most — and SSO via SAML, OIDC, CAS or Entra ID plus LDAP and Active Directory are published, though several of these appear only from the Business tier upward. SCIM is listed for the Enterprise tier and IP allowlisting from Business. We found no public information on guest access with limits, an audit log of views and permission changes, or whether search and AI answers respect page rights. 2 6 7
The IT Administrator
Fine-grained rights by wiki, space, page and group, LDAP through Active Directory and Microsoft Entra ID, SSO via OIDC, SAML or CAS from the Business plan, SCIM provisioning at Enterprise, IP allowlisting, and MFA with periodic access reviews on the security page — that is the Entra ID story I need. We found no public information on directory group sync as such, guest or external access limits, or an audit log of access and permission changes, which caps it below the enterprise level. 2 6 7
The Support Knowledge Manager
Permissions are documented at wiki, space, page and group level with view, edit, delete and administer rights, alongside users and groups management, LDAP, Active Directory and Entra ID, SSO through SAML, OIDC and CAS from the Business plan, SCIM at Enterprise, and IP allowlisting from Business up. We found no public information on an audit log of views, edits and permission changes, on guest and external access rules, or on permissions being honoured by search and AI answers, which holds it below the top band. 2 6
The Engineering Lead
Permissions are granular at wiki, space, page and group level, SSO covers SAML, OIDC, CAS and Entra ID from the Business plan, LDAP and Active Directory arrive a tier lower, SCIM is Enterprise, and IP allowlisting from Business. We found no public information on an audit log of views and permission changes or enforced two-factor authentication for workspace users, which keeps it short of what an enterprise auditor would accept. 2 6
The Quality Manager
Permissions by wiki, space, page and group with view, edit, delete and administer rights, LDAP and Active Directory, single sign-on through SAML, OIDC, CAS and Entra ID from the Business plan, SCIM on Enterprise and IP allowlisting on Business and Enterprise would let me keep drafts out of sight before sign-off. We found no public information on guest or external access limits, an audit log of views and permission changes, or two-factor authentication enforced for the wiki's own users; the security page describes multi-factor authentication for XWiki's sensitive access rather than as a product feature I could configure. 2 6 7
The Skeptic
Permissions at wiki, space, page and group level with view, edit, delete and administer rights, single sign-on via OIDC, SAML, CAS or Entra ID, LDAP/Active Directory, SCIM and IP allowlisting are each real and priced to a tier. The pricing matrix shows single sign-on absent from Starter and Basic and SCIM from everything below Enterprise, and I found no public information on an audit log of views and permission changes, guest access, admin-enforced two-factor authentication as a product feature, or permissions being honoured by search and AI answers. 2 6
Help-center publishing & integrations
Show reasoningHide reasoning
How this is scored
How knowledge reaches people outside the editor: public or password-protected sites and help centers with a custom domain, branding and SEO controls, an in-app widget or contextual help, ticket deflection in a help desk, multilingual publishing, integrations with Slack, Microsoft Teams, Jira, Google Drive, help desks and CRMs, a browser extension, a documented REST or GraphQL API, webhooks, and an MCP server or connector for AI assistants.
0 — Content cannot be shared beyond the editor and nothing connects to it.
3 — Sharing a page by public link and a few integrations such as Slack; a branded help center, an API and webhooks are basic or not described.
5 — A published site or help center with custom domain and branding, integrations with Slack or Teams and Google Drive or Microsoft 365, a documented API, and embeds of common tools.
8 — A help center with SEO controls, multilingual publishing, access for logged-in customers and analytics, a widget or contextual help inside the customer's product, help desk integration with ticket deflection, webhooks, and a connector or MCP server for AI assistants.
10 — Knowledge delivered wherever it is needed from one source: internal and public audiences served from the same pages with per-audience rules, a complete API with SDKs and rate limits stated, a marketplace of integrations, and every channel measured in one report.
The Operations Lead
A custom domain is included from the Basic cloud tier, the look and feel is brandable, and the platform is positioned for public websites and external knowledge bases. RESTful APIs, more than nine hundred extensions, an open-source MCP server for AI assistants and a bidirectional OpenProject integration are published. We found no public information on named Slack, Teams, Google Drive or Microsoft 365 connectors, help-center SEO controls, an in-app widget, or ticket deflection in a help desk. 1 2 5 6
The IT Administrator
Public website, CMS and external knowledge-base use cases with custom domain support from the Business plan, RESTful APIs, a bidirectional OpenProject integration and an open-source MCP server for AI assistants give us a real publishing and integration story. We found no public information on Slack or Teams integrations, webhooks, SEO controls or a help-desk ticket-deflection link, so I cannot place it higher. 1 2 5 6
The Support Knowledge Manager
External knowledge base, public website and CMS are named use cases, custom domain support is included from the Basic plan up, themes and navigation are customisable, RESTful APIs are documented, and there is a bidirectional OpenProject integration plus an open-source MCP server for AI assistants. We found no public information on SEO controls, multilingual publishing, an in-product widget or contextual help, help-desk integration with ticket deflection, or webhooks — the exact channels my help center would live in — so it reads as a published-site-and-API story rather than a full help-center delivery stack. 1 2 5 6
The Engineering Lead
A documented RESTful API and an open-source MCP server mean my pipeline can write pages and AI assistants can read them, and the platform is positioned for public websites and external knowledge bases with custom domain support and branding via themes. But the captured pages show OpenProject as the flagship bidirectional integration; we found no public information on Slack or Teams, Jira, webhooks, help-center SEO controls or an in-app widget. 1 2 5 6
The Quality Manager
Custom-domain publishing on XWiki Cloud with public website, CMS and external knowledge base use cases, a documented RESTful API, an open-source MCP server for AI assistants, a bidirectional OpenProject integration and an ecosystem of 900+ extensions give me real routes out of the editor. We found no public information on help-center analytics, ticket deflection in a help desk, webhooks, or Slack and Teams connectors on the captured pages, which keeps this off the top band. 1 2 5 6
The Skeptic
An open-source MCP server for AI assistants, RESTful APIs, a bidirectional OpenProject integration, custom-domain support on the cloud tiers, and external knowledge base, public website and CMS among the stated use cases take this beyond basics. I found no public information on a help center with SEO controls and analytics, an in-product widget, help-desk ticket deflection, or webhooks; Slack, Teams, Google Drive and Microsoft 365 appear only behind general "hundreds of extensions and APIs" language. 1 2 5 6
Import, export & self-hosting
Show reasoningHide reasoning
How this is scored
What arriving and leaving would cost: import from Confluence, Notion, Google Docs, Word and Markdown with structure, attachments and links kept, a full export of every space in an open format (Markdown, HTML, XML, PDF) with attachments and history, an API that reaches all content, a stated migration path from Confluence Server or Data Center, open-source code under a named licence, and a self-hosted or on-premise edition with its own documentation.
0 — Content cannot be imported or exported; it can only be read in the vendor's interface.
3 — Single pages export to PDF or Word and some files can be imported; a full export, a Confluence import and self-hosting are basic or not described.
5 — Import from Confluence or Notion and from Word or Markdown, a full workspace export to Markdown or HTML with attachments, a documented API covering pages, and a stated retention of data after cancellation.
8 — A Confluence migration tool or service that keeps hierarchy, permissions and attachments, a full export with history in an open format, a self-hosted or on-premise edition with installation and update documentation, and data returned or deleted on termination under stated terms.
10 — The customer owns the content end to end: open-source code under a named licence that runs fully self-hosted with feature parity stated, a complete export another tool can import without loss, and the deletion of every copy on termination documented.
The Operations Lead
The Confluence Migration Toolkit is described as moving data, page history, users, permissions, attachments and metadata, with batch migration, terabyte-scale imports, a post-migration report and preserved structure — the strongest leaving-and-arriving story I have scored. Export runs to PDF, ODT, RTF, XML and HTML, there are RESTful APIs, and the self-hosted download is stated to offer the same feature set as the cloud, deployable on Linux, Docker or Kubernetes. Everything published here says a move out would be on our terms. 2 3 4 5
The IT Administrator
The Confluence Migration Toolkit is documented to move data, page history, users, permissions, attachments and metadata, with batch and incremental migration, Confluence macro bridge equivalents, a post-migration report and terabyte-scale precedent — precisely our twelve-year page tree. A self-hosted edition on Linux, Tomcat, Jetty, Docker or Debian, with Kubernetes, Windows and clusters at Enterprise, offers the same feature set as the cloud at the same pricing, which satisfies the works-council scenario. We found no public information on export that includes history in an open format, on data return at termination, or on the open-source licence by name, so it stops short of the top. 2 3 4 5 6
The Support Knowledge Manager
Arriving is the strongest story: a Confluence Migration Toolkit moving data, page history, users, permissions, attachments and metadata, with batch and incremental migration, exports without stopping Confluence, pre-migration validation, a post-migration report, bridge macros for 150+ Confluence macros, terabyte-scale experience, and SharePoint and MediaWiki paths at Enterprise. Self-hosting is a first-class route with the same feature set as the cloud and installations across Linux, Tomcat, Docker, Debian and Kubernetes, and export covers PDF, ODT, RTF, XML and HTML. We found no public information on export that includes page history, the open-source licence by name, or data return and deletion terms on termination. 2 3 4 5 6
The Engineering Lead
The Confluence Migration Toolkit moves data, page history, users, permissions, attachments and metadata with batch and incremental modes and a post-migration report, backed by published figures of 230+ migrations and terabyte-scale imports; export covers PDF, ODT, RTF, XML and HTML. Self-hosting is a first-class path — stated same feature set and same pricing as cloud, on Linux, Docker or Kubernetes — with open-source code, though we found no public information on the licence name or the terms for returning data on termination. 2 3 4 5
The Quality Manager
The Confluence migration story is the strongest I have reviewed: a toolkit that migrates data, page history, users, permissions, attachments and metadata, batch and incremental migrations, a post-migration report of issues, terabyte-scale imports, and a track record of 230+ migrations and SharePoint and MediaWiki paths on Enterprise. A self-hosted edition documented with the same feature set as the cloud, the same pricing on premises, and export to PDF, ODT, RTF, XML and HTML; we found no public information on the open-source licence by its name or on the deletion of every content copy at termination. 2 3 4 5 6
The Skeptic
Arriving is documented better than most: a Confluence Migration Toolkit moving pages, history, users, permissions, attachments and metadata, batch and incremental migrations, programmatic import via REST API, a post-migration report and terabyte-scale migrations without stopping Confluence. Leaving is addressed through export to PDF, ODT, RTF, XML or HTML, a downloadable self-hosted edition stated to offer the same feature set as the cloud, and Pro & Support at the same price on-premises or in the cloud — but I still want in writing whether a full export carries history and attachments in a format another tool imports, the name of the open-source licence, and contract-end data terms beyond personal-data deletion on request. 2 3 4 5 6 9
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where pages, attachments and search indexes are stored and processed, and who the subprocessors are (hosting, CDN, search, email, support, payment, and the AI model provider that reads pages for answers and summaries, with whether content is used for training). Independently sourced by the sovereignty pipeline; a wiki holds internal processes, customer data and trade secrets, so the whole chain counts, not only the database. A self-hosted or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU data residency available and an EU contracting entity or EU representative, but parts of the chain (CDN, search, email, support, AI model) run through non-EU providers without a stated safeguard, or EU residency is limited to the higher tiers.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations including the AI model provider, no training on customer content stated, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated — or a self-hosted edition documented that keeps every page on the customer's own servers.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor including AI, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.
The Operations Lead
The vendor presents itself as built in Europe, cloud instances run in France on OVHcloud, and the subprocessor list names OVH in France for hosting and Scaleway in France for encrypted backups, both marked with no transfer outside the EU. ISO 27001 is stated with its scope — cloud hosting and support services by XWiki SAS — alongside SOC 1, 2 and 3, and an on-premise edition is documented that keeps every page on our own servers, which for a Baden-Württemberg machine shop settles the hosting question. We found no public information on a published data processing agreement, on an AI model provider in the chain, or on a statement that customer content is never used for training. 1 4 7 8
The IT Administrator
XWiki SAS is a French company with a French publication director and CNIL declaration, cloud instances run on OVHcloud in France, and the subprocessor list names OVH and Scaleway, both in France with no third-country transfer; ISO 27001 is stated with its scope spelled out, alongside SOC 1, 2 and 3. For the regulator, the documented self-hosted path on our own infrastructure with control over hosting, access management and data residency settles the residency question outright. We found no public information on a published data processing agreement or on any AI model provider in the chain, which keeps it one step from sovereign end to end. 4 7 8 9
The Support Knowledge Manager
The cloud runs in France on OVHcloud, the subprocessor list names OVH for hosting and Scaleway for encrypted backup redundancy, both in France with no third-country transfer, ISO 27001 is certified with a stated scope covering cloud hosting and support, SOC 1, 2 and 3 apply to the hosting infrastructure, and the legal notice and CNIL declaration sit with XWiki SAS and its French publication director. A self-hosted path that keeps hosting, access management, integrations and data residency entirely on our own servers is documented too. We found no public information on a published data processing agreement, an AI model provider in the subprocessor chain, or a statement that customer content is not used for training. 1 4 7 8
The Engineering Lead
Cloud instances run in France on OVHcloud, the subprocessor list names OVH and Scaleway both in France with no third-country transfer, and ISO 27001 is stated with its scope covering XWiki SAS hosting and support services, plus SOC 1/2/3 on the hosting infrastructure. XWiki SAS is a French company with GDPR rights and CNIL declaration published, and on-premises deployment keeps every page on our own servers; we found no public information on an AI model provider in the subprocessor chain, a no-training statement or a published data processing agreement on these pages. 4 7 8 9
The Quality Manager
XWiki Cloud runs in France on OVHcloud, with OVH and Scaleway both listed as subprocessors located in France with no third-country transfer, behind XWiki SAS with a CNIL declaration, an ISO 27001 certification whose scope is stated as cloud hosting and support services, and SOC 1, 2 and 3 for the hosting infrastructure; a documented on-premise edition additionally keeps every page on our own servers with our own data residency. We found no public information on a published data processing agreement, on the AI model provider and its location, or on a statement that customer content is not used for training. 1 4 7 8
The Skeptic
The chain that is documented is French end to end: XWiki SAS as the entity, cloud instances hosted in France on OVHcloud, subprocessors listed as OVH and Scaleway both in France with no transfers, an ISO 27001 certificate with its scope actually published plus SOC 1/2/3, and a customer can instead self-host on its own servers and keep every page in its own chain. The gaps are the ones I always ask about: the AI integration (Enterprise, Beta) and the open-source MCP server name no model and no location, and I found no public information on whether customer content is used for training, on a data processing agreement, or on CDN, email, support and payment providers beyond the two infrastructure names. 1 4 6 7 8 9
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per user and tier, readers or guests free or charged, minimum seats, which features (SSO, SCIM, audit log, verification, help-center publishing, custom domain, AI answers, EU data residency) cost extra, the free tier and its limits, storage limits, the self-hosted edition's licence and support price, minimum term and setup or migration fees.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with users, readers or features is unclear.
5 — Tiers are public with their price per user and main inclusions, but at least one commonly needed piece (SSO, AI, readers or guests, EU residency, the self-hosted edition) is unpriced or "on request".
8 — Every tier priced publicly with its scaling rule (editors, readers, guests, storage), add-ons priced, the self-hosted edition's licence and support cost stated, minimum seats, term and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given number of editors and readers and a feature set, with every add-on, AI credit, setup, migration and support fee and the cancellation and data-return terms published.
The Operations Lead
Four tiers carry exact euro figures — "Starter €773 / year for 25 users (€2.58 / user / month)" through "Enterprise €33,990 / year for 500 users (€5.67 / user / month)" — with per-tier storage ladders, sub-wiki counts, support reaction times and a feature matrix that says plainly which tier gets SSO, SCIM, IP allowlisting, custom domain or the Beta AI, and cloud and on-premise are stated to cost the same. The captured pages give different figures for the entry price: the migration page states "Starting at €3.63/user/month" while the pricing page shows "Starter €773 / year for 25 users (€2.58 / user / month)". What I cannot compute is the workshop's read-only access — we found no public information on reader or guest seats, VAT treatment, or the price of an individually purchased Pro app. 3 5 6
The IT Administrator
Four tiers are priced publicly with exact euro figures, per-user prices, user limits, storage by tier and user count, and a feature matrix showing exactly where SSO, SCIM, LDAP, IP allowlisting, custom domain and the AI integration sit; cloud and on-premise carry the same pricing and ordering online gives a 5% discount. What the pricing page does not let me do is compute the annual cost for our 900 staff between the published 25-user and 500-user figures, and we found no public information on individual Pro App prices or VAT treatment. 5 6
The Support Knowledge Manager
Every plan is priced publicly — Starter €773 / year for 25 users (€2.58 / user / month), Basic €1,486 / year for 25 users (€4.95 / user / month), Business €2,318 / year for 25 users (€7.73 / user / month), Enterprise €33,990 / year for 500 users (€5.67 / user / month) — with user limits, storage bands by team size, support reaction times, a 20% saving on three-year terms, an online ordering discount, and the statement that cloud and on-premise Pro & Support share the same pricing. The feature matrix shows what costs extra: SSO from Business, SCIM, the AI beta and unlimited users at Enterprise, custom domain support outside Starter. We found no public information on reader or guest pricing, VAT treatment, or the standalone price of Pro apps and the migration toolkit below the Business plan. 3 4 6
The Engineering Lead
Every tier is priced publicly — from Starter €773 / year for 25 users (€2.58 / user / month) to Enterprise €33,990 / year for 500 users — with user limits, storage bands by team size, sub-wiki counts, support reaction times and a feature-by-plan matrix showing what SSO, SCIM, IP allowlisting, custom domain and the AI integration cost by tier. Cloud and on-premises are stated to have the same pricing, and yearly or three-year terms with a 20% discount are published; we found no public information on reader or guest pricing, VAT treatment, or the prices of the individually purchasable Pro Apps. 3 5 6
The Quality Manager
The pricing page is unusually complete: Starter €773/year for 25 users (€2.58/user/month), Basic €1,486/year for 25 users (€4.95/user/month), Business €2,318/year for 25 users (€7.73/user/month) and Enterprise €33,990/year for 500 users (€5.67/user/month), each with user limits, storage bands, and an inclusion matrix running from SSO and SCIM to custom domain, AI, antivirus and support reaction times, plus a 20% three-year discount and the same price in the cloud or on premises. What I still could not compute: reader or guest seats, the individual price of Pro Apps sold separately, VAT treatment, and migration or setup fees below the Business plan where the Confluence Migration Toolkit is included for free. 3 5 6
The Skeptic
The pricing page is unusually complete: Starter €773/year for 25 users (€2.58/user/month), Basic €1,486/year for 25 users (€4.95/user/month), Business €2,318/year for 25 users (€7.73/user/month) and Enterprise €33,990/year for 500 users (€5.67/user/month), each with user limits, storage by user count, sub-wiki counts, support contacts and reaction times, and a matrix showing which tier buys SSO, SCIM, AI, custom domains, IP allowlisting and migration tools. Still not computable from the captured pages: readers or guests are never priced as a separate role, VAT treatment is unstated, per-user cost between the 25-user and 500-user examples must be asked for, individual Pro App prices are not shown, and the captured pages give different figures for the starting price — €3.63/user/month on the migration page against €2.58/user/month on the pricing page. The "free" paths are a trial and a download behind a contact form asking for project details. 3 5 6 9
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined ⚠ unverified | — | uncited Report an error |
| Open source | Not determined ⚠ unverified | — | uncited Report an error |
| Data processing agreement | Not determined | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about XWiki
Is XWiki European?
Yes. whats-best.ai classifies XWiki as EU-Made.
Where does XWiki store data?
Not stated on the vendor’s pages as of 1 Nov 2026.
Does XWiki have a free plan?
Not stated on the vendor’s pages as of 1 Nov 2026.
What are the best alternatives to XWiki?
As of 1 Nov 2026, the panel rates Document360 (3.5/5), BookStack (3/5) and Docmost (3/5) highest among the other 13 Knowledge Base & Wiki products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Document360 (UK / wider Europe). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: XWiki alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 1 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Open source, Hosting location, Hosting options, Legal entity. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 24 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 5 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 3 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 legal fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 4 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (10)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage xwiki.com Checked 1 Nov 2026 Details →
- 2 Features page xwiki.com Checked 1 Nov 2026 Details →
- 3 Features page (extensions and integrations) xwiki.com Checked 1 Nov 2026 Details →
- 4 Features page (cloud or on-premise hosting) xwiki.com Checked 1 Nov 2026 Details →
- 5 Features page (Confluence migration) xwiki.com Checked 1 Nov 2026 Details →
- 6 Pricing page xwiki.com Checked 1 Nov 2026 Details →
- 7 Security page xwiki.com Checked 1 Nov 2026 Details →
- 8 Legal notice xwiki.com Checked 1 Nov 2026 Details →
- 9 Privacy policy xwiki.com Checked 1 Nov 2026 Details →
- 10 Code repository (open-source licence) — found from the homepage github.com Checked 1 Nov 2026 Details →