this post was submitted on 13 Oct 2026
195 points (98.5% liked)

Buy European

10900 readers
158 users here now

Overview:

The community to discuss buying European goods and services.

Matrix Chat of this community

Rules:

  • Be kind to each other, and argue in good faith. No direct insults nor disrespectful and condescending comments.

  • Do not use this community to promote Nationalism/Euronationalism. This community is for discussing European products/services and news related to that. For other topics the following might be of interest:

  • Include a disclaimer at the bottom of the post if you're affiliated with the recommendation.

  • No russian suggestions.

Feddit.uk's instance rules apply:

  • No racism, sexism, homophobia, transphobia or xenophobia.
  • No incitement of violence or promotion of violent ideologies.
  • No harassment, dogpiling or doxxing of other users.
  • Do not share intentionally false or misleading information.
  • Do not spam or abuse network features.
  • Alt accounts are permitted, but all accounts must list each other in their bios.
  • No generative AI content.

Useful Websites

Benefits of Buying Local:

local investment, job creation, innovation, increased competition, more redundancy.

European Instances

Lemmy:

Friendica:

Matrix:

Related Communities:

Buy Local:

Continents:

European:

Buying and Selling:

Boycott:

Countries:

Companies:

Stop Publisher Kill Switch in Games Practice:

Banner credits: BYTEAlliance

founded 2 years ago
MODERATORS
maam@feddit.uk
alex@jlai.lu
Argyle13@lemmy.world
meldrik@lemmy.wtf
Kjell@lemmy.world
Sunshine@piefed.ca
195
Would you use an EU-hosted GitHub alternative? (vault42.eu)
submitted 3 days ago by vault42_eu@europe.pub to c/buyeuropean@feddit.uk
52 comments fedilink hide all child comments
 

Hi all,

I am trying to find out if there is interest in a hosted Forgejo service with a strong emphasis on EU sovereignty and independence from big tech. Forgejo is an open-source Git hosting platform that I think is great and deserves wider use. For that reason, we will donate 5% of our plan revenue to the Forgejo project.

The plan is to cover what developers and small teams need:

  • Forgejo for Git hosting
  • Servers at Scaleway (a European cloud provider)
  • CI/CD runners
  • Dependency vulnerability alerts on every plan
  • Daily backups
  • Other essentials, as listed on our features page

Vault42 (that's us) has no US parent company and uses only EU-based subprocessors, so your code stays outside US jurisdiction. ISO 27001 certification is a goal for later on.

The focus will be on private repositories, since Codeberg already serves open-source projects very well. There will also be a free plan for open source with unlimited public repositories, not to compete with Codeberg but to give people another option.

If this interests you, you can join the waitlist at vault42.eu.

Questions and suggestions are welcome in the comments or by DM.

Cheers,

Marijn from Vault42

Disclosure: I am the founder of Vault42.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] SirHaxalot@nord.pub 6 points 3 days ago (2 children)

I think that one of the biggest challenges you may face is that source code is probably one of the areas where corporate customers care the least about things like the CLOUD Act or FISA 702. Simply because the main legal issue comes from processing of customers personal data, and that data should never end up in a Git repo. The company I work for is pretty strict with EU data residency, to the point that we have products with strict EU data sovereignty requirements (i.e. no US providers in the chain), and looking to move workloads off US cloudsโ€ฆ but nobody has ever cared about GitHub because in the end the source code is only classified as Corporate Confidential, not Sensitive or Highly sensitive.

That said, a possible selling point if youโ€™re targeting EU companies might be DORA compliance. I am saying this because something that did come up was if we needed a DORA addendum with GitHub since we do a lot of GitOpsโ€ฆ and GitHub did not want to sign any addendum.

[โ€“] vault42_eu@europe.pub 1 points 16 hours ago* (last edited 16 hours ago)

If you don't mind me asking some other questions about this: If you are not comfortable stating this publicly you can also mail me at marijn@vault42.eu

  • What did this DORA addendum from your Git host actually needed to contain?

  • Would your company have been willing to go with a smaller company that would be willing to sign it? If not, why not?

  • What else did your vendor assessment require beyond this addendum?

[โ€“] vault42_eu@europe.pub 2 points 3 days ago

This is really valuable information. For financial customers, being able to sign a DORA addendum makes a lot of sense, and I'll look into it more closely. There are probably similar regulations in other industries that could be relevant too? ISO 27001 certification is already on the roadmap.

Thanks a lot, I really appreciate it!