# Sovereign Web Stack

A scored directory of open-source web infrastructure for digital sovereignty.

Primary pages:
- https://sovereignwebstack.eu/
- https://sovereignwebstack.eu/score-methodology/
- https://sovereignwebstack.eu/digital-sovereignty/

Scoring criteria:
- Open rights and license: 15 points. Can users legally inspect, run, modify, fork, and redistribute the software under a recognized open-source license?
- Self-hostability and runtime independence: 18 points. Can an ordinary operator run the project without mandatory proprietary services or a vendor-controlled control plane?
- Data control and portability: 16 points. Can users decide where data lives, export it, back it up, and migrate away without vendor permission?
- Privacy by default and telemetry control: 12 points. Does the project minimize data collection and make telemetry, cookies, tracking, and external calls explicit and controllable?
- Interoperability and open standards: 8 points. Does the project work with open protocols, standard formats, and portable integrations rather than closed connectors?
- Operational resilience and maintainability: 14 points. Can a small team operate the project safely for years?
- EU hosting and procurement fit: 12 points. Does the project help European organizations meet residency, procurement, accessibility, and governance expectations?
- Governance and supply-chain clarity: 5 points. Is it clear who controls the project, how decisions are made, and how users can assess supply-chain risk?

Ranked projects:
- HitKeep: 92/100, Analytics. Privacy-first web analytics with a self-hostable single-binary path and managed EU/US cloud option. https://sovereignwebstack.eu/projects/hitkeep/
- Keycloak: 89/100, Identity. Open-source identity and access management with standards-based SSO, OIDC, and SAML. https://sovereignwebstack.eu/projects/keycloak/
- Matomo: 86/100, Analytics. Mature open-source web analytics platform with self-hosted and managed options. https://sovereignwebstack.eu/projects/matomo/
- Nextcloud: 86/100, Collaboration. Self-hostable file sync, collaboration, and office ecosystem for organizations that need data control. https://sovereignwebstack.eu/projects/nextcloud/
- listmonk: 85/100, Email and newsletter. Self-hosted newsletter and mailing-list manager with a compact Go application and PostgreSQL. https://sovereignwebstack.eu/projects/listmonk/
- Plausible: 81/100, Analytics. Lightweight privacy-focused analytics with open-source self-hosting and a commercial cloud service. https://sovereignwebstack.eu/projects/plausible/
- Zammad: 81/100, Support. Open-source helpdesk and support system with self-hosted and hosted options. https://sovereignwebstack.eu/projects/zammad/
- Formbricks: 80/100, Forms and surveys. Open-source survey and form platform with self-hosting and managed cloud. https://sovereignwebstack.eu/projects/formbricks/
- Uptime Kuma: 78/100, Monitoring. Self-hosted uptime monitoring with status pages and common notification integrations. https://sovereignwebstack.eu/projects/uptime-kuma/
- Umami: 77/100, Analytics. Open-source web analytics with a simple product surface and managed cloud option. https://sovereignwebstack.eu/projects/umami/
- Meilisearch: 76/100, Search. Open-source search engine designed for fast site and app search experiences. https://sovereignwebstack.eu/projects/meilisearch/
- Directus: 75/100, CMS and data platform. Data platform and headless CMS that layers APIs and admin UI over SQL databases. https://sovereignwebstack.eu/projects/directus/
- Strapi: 75/100, CMS. Open-source headless CMS for building content APIs and editorial workflows. https://sovereignwebstack.eu/projects/strapi/
- PostHog: 70/100, Product analytics. Broad product analytics and feature platform with open-source roots and a commercial cloud. https://sovereignwebstack.eu/projects/posthog/

Notes: Scores are public editorial research, not certification or legal advice.