Papra
AGPL-3.0 document management with native AES-256-GCM encryption. France-based, no CLOUD Act exposure — zero enterprise tax on self-hosted deployments.
Open Source Alternatives: The Sovereign Stack
A curated database of vetted open source alternatives to proprietary SaaS. Find tools that are safe, compliant, and ready for business.
Showing of 110 solutions
OpnForm
AGPLv3 open-core form builder. France-based, no CLOUD Act exposure, self-hostable via Docker — without Typeform's per-response fees or data held hostage on vendor servers.
NocoDB
Source-available no-code layer for existing SQL databases. Zero record limits, auto-generated REST APIs — without Airtable's per-record pricing or proprietary data lock-in.
Blinko
An open-source, AI-first personal knowledge management tool featuring RAG-powered recall and a sovereign second brain architecture.
Mautic
A GPLv3-licensed, self-hostable marketing automation platform. Unlimited contacts, omnichannel campaigns, and full data ownership — without HubSpot's per-contact pricing.
Wazuh
GPL-2.0 unified XDR and SIEM platform from Wazuh, Inc. — all capabilities including RBAC, threat hunting, and compliance mapping modules included in the open-source binary; paid tier is managed cloud only.
Saleor
Headless commerce API for web, mobile, and POS from a single GraphQL core — all platform features in the open-source release; no paywalls.
Pimcore
POCL-licensed PIM, MDM, and DAM platform. Austria-based, EU jurisdiction — €5M revenue threshold triggers mandatory commercial licensing with no open-source exit path.
Snipe-IT
AGPL-3.0 IT asset management system — tracks hardware, software licences, accessories, and consumables with no user or asset limits. No feature paywalls; SLA support and priority fixes require a paid plan.
Uptime Kuma
MIT-licensed, self-hosted uptime monitoring and status page tool — HTTP/S, TCP, DNS checks with 90+ notification channels; single-instance architecture with no RBAC or multi-region polling.
Authentik
MIT-core identity provider for SSO, LDAP federation, SAML, and OIDC — unifies authentication across your entire stack. Advanced compliance features and SLA support require the Enterprise edition.
n8n
Source-available, self-hosted workflow automation platform. Unlimited executions, full data sovereignty, no per-task fees — without Zapier's volume pricing or cloud exposure.
Apache Superset
Self-hosted BI platform with a semantic layer, 40+ chart types, and no per-seat fees — a SQL-first alternative to Tableau and PowerBI at petabyte scale.
Medusa
MIT-licensed headless commerce engine. Zero GMV tax, full database ownership, no revenue sharing — for B2B and DTC architectures that Shopify Plus cannot accommodate.
Infisical
MIT-core secret management platform — end-to-end encrypted secret syncing across your entire infrastructure. SSO, RBAC, and audit logs require the Enterprise edition.
Baserow
MIT-core no-code database platform — unlimited records, no per-row pricing, full relational backend. A self-hostable Airtable alternative; advanced roles and premium plugins require paid plans.
Hoppscotch
Enterprise API development platform. A fast, open-source alternative to Postman for REST, GraphQL, and gRPC testing with full data sovereignty.
Immich
AGPL-3.0 self-hosted alternative to Google Photos — automatic mobile backup, facial recognition, and timeline search with no cloud dependency or per-storage fees.
Formbricks
AGPL-3.0 customer feedback platform — surveys, NPS scoring, and in-app widgets with full data ownership and zero per-response fees.