# XWiki — Knowledge Base & Wiki

XWiki by XWiki SAS holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-11-01. Provenance: EU-Made; sovereignty: not determined.

- Vendor: XWiki SAS (https://xwiki.com/en)
- Category: [Knowledge Base & Wiki](https://whats-best.ai/software/knowledge-base.md)
- Provenance (editorial classification): EU-Made
- Canonical page: https://whats-best.ai/software/knowledge-base/xwiki
- Alternatives: https://whats-best.ai/software/knowledge-base/xwiki/alternatives ([markdown](https://whats-best.ai/software/knowledge-base/xwiki/alternatives.md))
- Data as of: 2026-11-06 · evaluated 2026-11-01 · oldest source captured 2026-11-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: XWiki SAS
- Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting: Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan: Not stated on the vendor’s pages as of 1 Nov 2026
- Starting price: “Starting at €3.63/user/month” (vendor’s words) [S5]

## The panel's verdict

XWiki is XWiki SAS's open-source wiki, offered as cloud or self-hosted. Access control and pricing transparency hold a flat 7; portability and hosting and sovereignty cluster at 7-8; authoring and search sits at 6-7; publishing and integrations at 5-6; knowledge governance at 3-4 — the clear weak point. It is strongest on getting content in and out: a Confluence Migration Toolkit documented to move data, page history, users, permissions and attachments, export to PDF, ODT, RTF, XML and HTML, and a self-hosted edition with the same feature set as the cloud. Pricing runs from Starter €773 / year for 25 users to Enterprise €33,990 / year for 500 users. The flagged splits flag none and no criterion spans more than a point, though the captured pages give different figures for the starting per-user price — €3.63/user/month on the migration page against €2.58/user/month on the pricing page. Sovereignty rests on OVHcloud hosting in France with subprocessors OVH and Scaleway, both in France with no third-country transfer; we found no public information on a data processing agreement, an AI model provider, or a no-training statement.

**Speaks for it:**
- Access control holds a flat 7 — permissions by wiki, space, page and group with view, edit, delete and administer rights, SSO from the Business plan, SCIM at Enterprise and IP allowlisting from Business
- Pricing transparency holds a flat 7 — four tiers carry exact euro figures plus a feature matrix showing where SSO, SCIM, IP allowlisting, custom domain and the AI integration sit
- Portability and hosting scores 7-8 — the Confluence Migration Toolkit moves data, page history, users, permissions, attachments and metadata, and a self-hosted edition is stated to match the cloud's feature set
- Sovereignty scores 7-8 — cloud instances run in France on OVHcloud and the subprocessor list names OVH and Scaleway, both in France with no third-country transfer
- Authoring and search scores 6-7 — real-time WYSIWYG editing with Markdown and slash commands, unlimited version history, and Solr search across documents, attachments and objects with filters and tags

**Held against it:**
- Knowledge governance scores 3-4, the lowest band — we found no public information on page owners, review dates with reminders, approval workflows or an exportable audit trail
- Publishing and integrations scores 5-6 — we found no public information on help-center SEO controls, webhooks, Slack or Teams connectors, ticket deflection or an in-product widget
- The captured pages give different figures for the starting per-user price — €3.63/user/month on the migration page against €2.58/user/month on the pricing page
- We found no public information on a published data processing agreement, an AI model provider in the subprocessor chain, or a statement that customer content is not used for training
- We found no public information on reader or guest seats, VAT treatment or individual Pro App prices, and the free trial and the free download both require contact and project details

**Best for:**
- You are migrating from Confluence — the toolkit moves data, page history, users, permissions and attachments and is included for free on Business and Enterprise plans
- You need the wiki on your own servers or hosted in France — a self-hosted edition with the same published feature set as the cloud, or cloud instances on OVHcloud in France
- You need fine-grained access control with enterprise sign-in — rights at wiki, space, page and group level, SSO from the Business plan and SCIM at Enterprise
- You want the price list before talking to sales — four tiers with exact euro figures and a feature-by-plan matrix are published

**Avoid if:**
- You need named page owners, review reminders and approval workflows — knowledge governance scores 3-4 and we found no public information on this machinery
- Your help center depends on SEO controls, ticket deflection or an in-product widget — publishing and integrations scores 5-6
- You must budget an exact annual cost for a headcount between 25 and 500 users without asking the vendor — those are the published reference points
- You are buying for grounded AI answers — the AI integration is listed as a Beta on the Enterprise plan, and we found no public information on answers citing their source pages

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Operations Lead | The IT Administrator | The Support Knowledge Manager | The Engineering Lead | The Quality Manager | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Editor, structure & search | 3/5 | 3/5 | 3/5 | 3/5 | 3.5/5 | 3/5 |
| Verification, ownership & freshness | 2/5 | 2/5 | 1.5/5 | 2/5 | 2/5 | 2/5 |
| Permissions, SSO & administration | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Help-center publishing & integrations | 3/5 | 2.5/5 | 2.5/5 | 3/5 | 3/5 | 3/5 |
| Import, export & self-hosting | 4/5 | 4/5 | 3.5/5 | 4/5 | 4/5 | 4/5 |
| European sovereignty | 4/5 | 4/5 | 3.5/5 | 4/5 | 4/5 | 3.5/5 |
| Pricing transparency | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| **Weighted verdict** | **3/5** | **3.5/5** | **3/5** | **3.5/5** | **3.5/5** | **3.5/5** |

### The judges

- **The Operations Lead** (v1.0): Head of operations at a 180-person machine builder in Baden-Württemberg, where onboarding, travel rules and the service hotline's answers live in a shared drive, three OneNote books and two colleagues' heads. Wants one place the whole company actually uses: an editor office staff manage without training, a search that finds the answer rather than the file, pages that name who keeps them current, and a price that does not double when the workshop gets read access.
- **The IT Administrator** (v1.0): Runs IT for a public utility with 900 staff whose Confluence Server held twelve years of pages until Atlassian ended its support. Was offered the cloud, read the subprocessor list and went looking instead. Needs a migration that keeps page trees, permissions and attachments, single sign-on against Entra ID with groups synced, an audit log the auditor accepts, and an edition they can run in the utility's own data centre if the works council or the regulator asks.
- **The Support Knowledge Manager** (v1.0): Owns the knowledge base of a Dutch SaaS company with customers in six languages and a support team of twenty-five. Writes once for agents and customers, publishes the public part as a help center on the company's own domain, and watches which searches find nothing. Wants review dates that nag the right expert, translations kept in step with the source, a widget inside the product, and articles that show up in the help desk next to the ticket.
- **The Engineering Lead** (v1.0): Leads a forty-person engineering team at a Berlin fintech that writes runbooks, architecture decisions and on-call guides. Writes in Markdown, links pages to Jira tickets and Slack threads, and has moved the team's docs twice. Wants fast search, code blocks and diagrams that render, an API and webhooks to generate pages from the pipeline, AI answers that cite their pages, and a full export the next tool can read.
- **The Quality Manager** (v1.0): Quality manager at a medical device supplier certified to ISO 9001 and ISO 13485, where every work instruction must be approved, versioned and read by the people it applies to. Today that means Word files, a sign-off sheet and an audit every spring. Wants approval workflows with named reviewers, read confirmations, review dates that expire pages, an audit trail they can export for the certifier, and permissions that keep drafts out of sight.
- **The Skeptic** (v1.0): Has migrated a wiki whose "export" turned out to be one PDF per page, watched a self-hosted edition announced as retired with two years' notice, and read "your data is never used for training" above a subprocessor list naming two AI providers. Asks what a full export contains, which model reads the pages and where, whether readers are billed like editors — and what leaving would cost.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Automated decisionmaking: personalized marketing communications · Webmecanik · yes [S9]
- Certification scope: cloud hosting and support services by XWiki SAS for XWiki and CryptPad [S7]
- Continuous improvement: regular audits, security reviews, incident response improvements, employee training [S7]
- ISO 27001: XWiki Cloud support services · yes [S5]
- ISO 27001 certified: yes [S7]
- ISO 27001 cloud: yes · yes [S4]
- Optout contact: privacy@xwiki.com [S9]
- People security: HR security processes, security training, background checks, confidentiality agreements [S7]

**Data**
- Analytics consent: Matomo analytics; no tracking until accepted, choice changeable at any time [S9]
- Breach notification: data breach notification within 2 business days [S9]
- Deletion: data deleted on request, timing depends on backups [S9]
- Identification required: identification required to exercise rights [S9]
- Rights: access · rectification · erasure · objection · restriction · data portability in machine-readable format [S9]
- Security measures: encryption and data wiping solutions [S9]
- Support channels: email · telephone · ordinary mail [S9]

**Hosting**
- Built in europe: yes [S1]
- Cloud or on premises: yes · yes [S1]
- Infrastructure certifications: ISO 27001 · SOC 1 · SOC 2 [S7]
- Provider: FR 22 424 761 419 · France · OVH SAS · 2 rue Kellermann 59100 Roubaix, France [S8]
- Provider and regions: France · OVHcloud · ISO/IEC 27001 · SOC 1 · SOC 2 · SOC 3 [S4]
- Provider location: France · OVHcloud [S7]

**Integrations**
- Extensions API: hundreds of extensions · APIs · custom UI [S1]
- Macro checker: macro compatibility checker tool [S5]
- Migrate confluence: Confluence migration supported; positioned as full Atlassian alternative [S6]
- Openproject: bidirectional integration · OpenProject [S5]
- Rest API import: programmatic import via REST API addressed in FAQ [S5]

**Legal**
- Cnil declaration: 2014-04-30 · 1763396 · CNIL [S8]
- Company age: XWiki SAS · 20 [S5]
- Data rights: access · modification · suppression · 34 of the Law Informatics and Liberties of the 6th of January 1978 [S8]
- Entity: Paris 477 865 281 · XWiki SAS · 4 Rue du Faubourg Poissonnière 75010 Paris, France · 38160 [S8]
- Entity: XWiki SAS [S9]
- Ip policy: Copying site content requires explicit authorization from the Director of publication [S8]
- Languages: English · French [S9]
- Last updated: 2021-02-08 [S9]

**Pricing**
- Basic: 25 · 1486 · 4.95 [S6]
- Billing periods: yearly · 3_years · 20 [S6]
- Business: 25 · 2318 · 7.73 [S6]
- Cloud onprem same price: yes [S6]
- Enterprise: 500 · 33990 · 5.67 [S6]
- Free trial: yes [S6]
- Migration toolkit included: Business · Enterprise · yes [S3]
- Ordering: online_5pct_discount_or_manual · online_only · online_5pct_discount_or_manual · online_5pct_discount_or_manual [S6]
- Pro apps purchase model: Basic+ · yes [S3]
- Starter: 25 · 773 · 2.58 [S6]
- Starting price: 3.63 [S5]
- User limits: 1000 · 25 · 10000 · unlimited [S6]

**Product**
- Access control: granular rights · identity provider integration · flexible authentication methods [S1]
- Access control: centralized authentication, MFA, privileged account management, access lifecycle controls, periodic access reviews [S7]
- Activity dashboard: Out-of-the-box Activity dashboard [S2]
- Additional support: not_included · not_included · multilingual_platforms · multilingual_platforms_custom_developments [S6]
- AI integration: no · no · no · Beta · yes [S6]
- AI mcp server: yes [S1]
- Analytics application: Analytics Application (Pro) [S2]
- Antivirus: yes [S6]
- App within minutes: App Within Minutes: database-like apps with searchable, sortable, filterable live tables [S2]
- Attachments: Attachments with office file editing and drag-and-drop [S2]
- Authentication methods: LDAP · Active Directory · Microsoft Entra ID · SSO [S2]
- Automatic translation: External machine translation services [S2]
- Batch migration: yes [S5]
- Blog application: Blog Application [S2]
- Cloud features: automated backups · proactive monitoring · antivirus scanning · regular security maintenance [S7]
- Cloud maintenance: XWiki SAS · yes · yes [S4]
- Comments threads: Comment threads with images and quotes [S2]
- Community extensions: yes [S6]
- Confluence macro compatibility: Compatibility equivalents for most Confluence macros [S2]
- Confluence migration: Confluence migration [S2]
- Confluence migration stats: 25.8M+ · 6 · 150 · 230 [S1]
- Confluence migration toolkit: Confluence Migration Toolkit · data · page history · users · permissions · attachments · metadata · yes [S3]
- Confluence migration toolkit includes: *core product, all Pro Apps & extensions · Confluence Migrator (Pro) · Confluence-specific bridge macros · All the Pro Apps and Pro Macros · Long-term technical support [S2]
- Custom domain: yes · no · yes · yes [S6]
- Customization: yes · Business · Enterprise [S4]
- Data portability cloud: yes · no [S4]
- Data portability selfhosted: yes [S4]
- Data security: data classification, encrypted backups, secure deletion, restricted access [S7]
- Deployment: cloud_and_on_premise · cloud_only · cloud_and_on_premise · cloud_and_on_premise [S6]
- Deployment options: yes · yes [S5]
- Deployment stats: 7M+ · 14M+ · 30000 [S1]
- Disaster recovery: business continuity planning, tested disaster recovery, backup redundancy, recovery testing [S7]
- Endpoint security: endpoint protection, OS hardening, VPN for remote access, monitoring [S7]
- Export formats: PDF · ODT · RTF · XML · HTML [S2]
- Export methods: space by space XML · full site XML backup [S5]
- Extensions count: 900 [S1]
- Feature parity: Confluence feature parity plus more [S5]
- File manager: File Manager Application [S2]
- Fine grained permissions: wiki · space · page · group · view · edit · delete · administer [S2]
- Flash messages application: Flash Messages Application (Pro) [S2]
- Forms: Forms with predefined fields [S2]
- Free cloud test: XWiki Cloud free testing instance available; requires contact and project details [S9]
- Free download form: XWiki Standard free download requires contact and project details [S9]
- GDPR data sovereignty: yes · yes [S7]
- Hierarchical structure: Spaces, sub-wikis, page trees, children pages [S2]
- Hosting options: Cloud · on-premises [S3]
- Hosting options: cloud · self-hosted [S4]
- Import formats: Office · XWiki pages · other wiki content · Excel · CSV [S2]
- Import scope: pages · attachments · comments · users · groups · permissions [S5]
- Incident management: monitoring, alerting, incident detection and response, escalation, root cause analysis [S7]
- Incremental migrations: incremental migrations addressed in FAQ [S5]
- Individual pro apps purchase: Starter · Business [S4]
- Infrastructure security: secure configuration, environment segregation, monitoring, centralized logging, Infrastructure as Code, change management [S7]
- Installations supported: Linux · Tomcat · Jetty · Docker · Debian · not_included · Linux · Tomcat · Jetty · Docker · Debian · Linux · Tomcat · Jetty · Docker · Debian · Kubernetes · Windows · Oracle · multiple tenants or clusters · others [S6]
- Ip allowlisting: no · no · yes · yes [S6]
- ISO 27001: cloud and support services · yes [S1]
- Jira migration: migration from Jira via OpenProject [S5]
- Large imports: terabytes of data [S5]
- Ldap ad: yes · no · yes · yes [S6]
- Live data: Interactive tables and cards with filtering, sorting, pagination, in-line editing [S2]
- Macro equivalents: Content and structure fidelity · Equivalent macros · Authentication and access control · Permissions, users, and groups · APIs and integrations [S5]
- Migration capabilities: accurate migration, structure and macro preservation, pre-migration validation and risk detection, detailed reporting and troubleshooting [S5]
- Migration confluence: yes [S1]
- Migration experience: 6 [S5]
- Migration report: yes [S5]
- Migration stats: 100 · 100M+ [S5]
- Migration support: XWiki · all Pro Apps · recommended extensions · community extensions (best effort) · yes [S3]
- Migration tools: no · no · confluence_migration_toolkit · migrations_from_confluence_sharepoint_mediawiki [S6]
- Migration webinars: yes [S5]
- Multi wiki support: Multi-wiki support [S2]
- Network security: network segmentation, firewalls, DDoS protection, bastion hosts, monitoring [S7]
- No downtime: yes · yes [S5]
- No vendor lock in: yes · yes [S1]
- Notifications: Real-time notifications for tags and tasks [S2]
- Office docs collaboration: office document collaboration · project management · insights tracking [S1]
- Offline export: no [S5]
- On premises option: hosting · access management · integrations · data residency · yes [S7]
- Open source: open-source knowledge platform [S1]
- Open source: yes [S4]
- Open source: open-source, extensible, cost-effective knowledge platform without downtime or vendor lock-in [S5]
- Open source ownership: yes · yes [S7]
- Preserved data: structure · permissions · metadata · history · comments · attachments [S5]
- Pro applications: yes · no · yes · yes [S6]
- Pro apps included: Basic · Business (Confluence Migration Toolkit) [S4]
- Realtime collaboration: real-time co-editing · comments · unlimited version history [S1]

**Subprocessors**
- List: OVH · Virtualization infrastructure hosting · France · no · Scaleway · Encrypted backup redundancy and cold storage solutions · France · no [S7]

**Support**
- Coverage: 09:00-17:00 CET · yes [S6]
- Expert access: direct access to XWiki experts [S5]
- Flexible plans: 900+ [S5]
- Mode: portal · portal · portal_email · portal_email_dedicated_account_manager [S6]
- Plans: direct access to XWiki specialists · configuration · troubleshooting · upgrades · performance · extensions [S1]
- Reaction critical: 4_business_hours · 1_business_day · 2_business_hours · 2_business_hours [S6]
- Reaction major: 1_business_day · not_included · 4_business_hours · 4_business_hours [S6]
- Reaction minor: 2_business_days · not_included · 1_business_day · 1_business_day [S6]
- Request response time: responses to rights requests within 2 business days [S9]

35 more facts on the canonical page: https://whats-best.ai/software/knowledge-base/xwiki

## Questions

### Is XWiki European?

Yes. whats-best.ai classifies XWiki as EU-Made.

### Where does XWiki store data?

Not stated on the vendor’s pages as of 1 Nov 2026.

### Does XWiki have a free plan?

Not stated on the vendor’s pages as of 1 Nov 2026.

### What are the best alternatives to XWiki?

As of 1 Nov 2026, the panel rates [Document360 (3.5/5)](https://whats-best.ai/software/knowledge-base/document360), [BookStack (3/5)](https://whats-best.ai/software/knowledge-base/bookstack) and [Docmost (3/5)](https://whats-best.ai/software/knowledge-base/docmost) highest among the other 13 Knowledge Base & Wiki products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Document360](https://whats-best.ai/software/knowledge-base/document360) (UK / wider Europe). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [XWiki alternatives](https://whats-best.ai/software/knowledge-base/xwiki/alternatives).

## Head-to-head

- [XWiki vs BlueSpice](https://whats-best.ai/compare/bluespice-vs-xwiki.md)

## What this page leaves out

- 24 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 5 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 legal fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 4 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://xwiki.com/en (checked 2026-11-01)
- [S2] Features page: https://xwiki.com/en/enterprise-knowledge-management-features (checked 2026-11-01)
- [S3] Features page (extensions and integrations): https://xwiki.com/en/extensions-and-integrations (checked 2026-11-01)
- [S4] Features page (cloud or on-premise hosting): https://xwiki.com/en/choose-your-hosting-wiki (checked 2026-11-01)
- [S5] Features page (Confluence migration): https://xwiki.com/en/confluence-to-xwiki-migration (checked 2026-11-01)
- [S6] Pricing page: https://xwiki.com/en/pricing (checked 2026-11-01)
- [S7] Security page: https://xwiki.com/en/security-and-compliance-iso (checked 2026-11-01)
- [S8] Legal notice: https://xwiki.com/en/legal-notice (checked 2026-11-01)
- [S9] Privacy policy: https://xwiki.com/en/privacy-policy (checked 2026-11-01)
- [S10] Code repository (open-source licence) — found from the homepage: https://github.com/xwiki (checked 2026-11-01)

---

Cite as: whats-best.ai, "XWiki — Knowledge Base & Wiki", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/knowledge-base/xwiki

Corrections: https://whats-best.ai/correct/1225?target=page