We're building Vault42. Join the waitlist for early access. Join Waitlist

Your code belongs in Europe.

Managed Git hosting on Forgejo, run entirely in the EU.

We run the servers, updates, backups and security for you, in EU data centres. Your repositories never leave the EU, and your code is never used to train AI models.

Private repositories from €7.50 a month.

Developer: €7.50 a month with yearly billing, or €9 with monthly billing.

We take care of

HostingSecurityBackupsCI/CD runners

Not just a European alternative.

European hosting is the reason to choose Vault42 over an equally convenient alternative. It's not the reason people start looking.

Client code under contract

Client contracts increasingly ask where the code lives, and who could be compelled to hand it over. Vault42 will be incorporated in the EU, and your repositories will be hosted there, outside the CLOUD Act's reach.

Let us handle the infrastructure

Someone has to patch the host, watch disk space, test restores and apply upgrades at an inconvenient hour. On Vault42, that will be handled for a fixed monthly price.

Predictable billing

Usage-based CI/CD billing is hard to forecast, and a busy month can mean an invoice nobody budgeted for. Vault42's plans are flat and published, with no per-minute billing on managed runners either.

Professional Git hosting with European values at every layer.

Vault42 is built on open-source technology, hosted in Europe, and designed to keep your code under European rules.

EU jurisdiction

Many US providers offer an "EU region", but the company behind it still answers to US courts. Vault42 will be incorporated in the EU with no US parent company, so your repositories fall under EU law only.

Zero AI data harvesting

We don't use your code to train AI models, and we never will. We don't sell an AI product, so there's no training pipeline pointed at your repositories.

Independently owned

Vault42 is independently owned and run: no venture capital, no acquisition roadmap, and no outside investor with a say over what it builds.

We're open about everything, including our code.

From launch, we'll publish a monthly transparency report with the raw figures for infrastructure changes, uptime, and Forgejo donations.

Forgejo

Built on open-source you can trust.

Vault42 is being built on Forgejo, a community-governed free-software Git platform with no closed-source components. Every line of code powering your repositories can be read, audited, and verified.

Don't want to take our word for it? Forgejo is free and open-source, so you can self-host it today without a Vault42 account and move to us later only if you decide you want to.

Codeberg, one of the largest Forgejo instances, is operated by Codeberg e.V., a non-profit European code host, with over 750,000 projects and 450,000 users as of November 2026. The platform is proven at scale.

The Dutch government runs its own code platform on Forgejo, code.overheid.nl, where government organisations develop and share source code.

Visit forgejo.org

Transparency report

Published monthly from launch

Uptime
TBA
Infrastructure changes
TBA
Forgejo donation
TBA
Data requests received
TBA

First report after launch

Our Forgejo Pledge

A small team, two countries

Vault42 is a small team of freelancers working from Czechia and the Netherlands. We build products as an answer to the big tech oligarchy and to enshittification: made for the people who use them, not for investors. Independently owned, with no venture capital and no acquisition roadmap.

A lot of developers, myself included, have had enough of Microsoft, of GitHub, and of trusting American companies with their work. We host git on EU soil, under GDPR, where your code is never scanned to train a model, and where what we say we sell is all that we sell.

Marijn Wijbenga, Founder

A complete git forge.

Vault42 runs standard Forgejo with no proprietary additions.

Full git hosting

SSH & HTTPS, unlimited private repos

Pull requests & review

Inline comments, approvals, squash & rebase

Branch protection

Required reviews, force-push blocked

Issues & planning

Labels, milestones, project boards

Forgejo Actions

GitHub Actions-compatible workflows

Package registry

npm, Docker, Maven, PyPI, Cargo, NuGet

Releases

Tagged, with build artifacts

Wikis

Per repository, versioned in git

Webhooks & REST API

Every event, fully scriptable

Signed commits

SSH & GPG verification, signed tags

Orgs & teams

Per-team permissions, 2FA

Mirroring

Push or pull, any git host

Pipelines run on a runner: a managed one from us on any paid plan, or one you host yourself, free on every plan. Ours run in the EU; for a self-hosted runner, build location depends on where you host it.

Vault42 runs unmodified upstream Forgejo. Your repositories run on any Forgejo instance.

The actual software you'll be using.

These screenshots come from a demo repository on the Forgejo version that we deploy for you.

Repository

Captured from our own instance. The repository is a demo; the software is exactly what you get.

Vault42 vs GitHub

FeatureVault42GitHub
CI/CDForgejo Actions, same workflow syntaxGitHub Actions
Package registrynpm, Docker, Maven, PyPI+GitHub Packages
JurisdictionEU only; your code is outside the CLOUD Act and FISA 702US, CLOUD Act and FISA 702
Platform sourceOpen source (Forgejo)Proprietary
LeavingRuns on any ForgejoSelf-hosting only with GitHub Enterprise Server
Build machinesYours free, or a managed runner on a paid planShared runners
AI assistantNoneCopilot
Cloud dev environmentsNoneCodespaces
MarketplaceNoneThousands of apps
SupportEmail on Developer; email and chat on Teams; scheduled calls on EnterpriseTiered, paid plans only

Workflow files use GitHub Actions syntax. Actions hosted on GitHub need a full URL, and workflows that call the GitHub API or rely on GitHub-specific context need small changes.

From GitHub to Vault42 in one step

GitHub
Vault42
  • Repositories, branches, and tags
  • Issues, pull requests, and comments
  • GitHub Actions-compatible workflow syntax

Move your repositories over, history intact.

Forgejo includes a native GitHub importer for repositories, issues, pull requests and history. Forgejo Actions uses GitHub Actions-compatible workflow syntax. For CI, connect your own runner, or add a managed one on a paid plan.

Get Early Access

Infrastructure

Your code will never leave Europe

Built on Scaleway's European infrastructure. Your code is stored and processed only on EU infrastructure, on servers owned, operated and governed within the EU.

Paris

France

Amsterdam

Netherlands

Warsaw

Poland

Milan

Italy

Backup and recovery

Daily encrypted backups

Snapshots will be taken every 24 hours and kept for 30 days.

Second-region copy

Every backup will be replicated to a separate EU region.

Tested restore

The restore procedure will be documented and tested regularly, not only written down.

Know when a dependency you use has a published vulnerability

Vault42 will check the dependencies your repositories declare against public vulnerability advisories, and open an issue in the affected repository when it finds one.

security#128

Vulnerable dependency: example-package

Affected
2.3.1
Fixed in
2.3.4
Severity
High
Source
OSV

No new company sees your dependencies

The scan runs on Vault42's own EU infrastructure, the same servers that already host your repositories. Your dependency list isn't sent anywhere else to make this work.

Open data, open tooling

Advisories come from open sources, including OSV and ENISA's European Vulnerability Database (EUVD). The scanning tooling is open source too, so leaving Vault42 doesn't mean losing the check.

A record for the Cyber Resilience Act

Teams increasingly need to show they track known vulnerabilities in what they ship. This isn't a compliance guarantee, just one piece of that record.

Included on every plan, including Open Source. Paid plans add pull requests that update the dependency to a fixed version, for you to review.

Pricing built on principle

Open Source

Freeforever

Developer

€9/ month

Teams

€12/ user / month

Enterprise

Starting from

€450/ month

Prices shown are for monthly billing; yearly billing takes two months off the plan price. Teams has a 3-seat minimum, so from €36 a month.

Add-ons: CI/CD runners from €5 / month and extra LFS storage from €5 / month.

See all plans

Planned pricing, not final. Prices are confirmed at launch.

Your next commit doesn't have to leave Europe.

Join the waitlist of European developers who want their code to stay where they live.

Your repositories are hosted in the EU, and you can migrate from GitHub with Forgejo's import tool.

Is my data actually protected from US law?

Vault42 will be incorporated in the EU, with no US parent company. Your repositories will be hosted on EU infrastructure, and no US authority can compel us to hand them over under the CLOUD Act or Section 702 of FISA. A small number of sub-processors work for us outside the hosting layer, payment processing being the main one, and none of them can access your repositories. They are listed on our sub-processor page.

Can I migrate from GitHub?

Forgejo's importer handles this natively. Repositories, issues and pull requests move over intact. Workflows use GitHub Actions-compatible syntax, so most run unchanged; jobs that call the GitHub API or rely on GitHub-specific features need small changes. Run them on a runner you host, or on a managed one from us.

What if I'm not ready to trust Vault42 with my code?

Fair enough, we're new. Forgejo, the platform we're built on, is free and open-source; you can self-host it yourself today, no Vault42 account at all. Move to us later only if you want the hosted convenience.

What if Vault42 shuts down?

Your repositories are standard Forgejo, so there is no proprietary format to escape from. If we ever wind down, we commit to at least 90 days' notice, read-only access for the whole of that period, and a full export of every repository, issue, pull request and wiki in Forgejo's native format. That export imports into any other Forgejo or Gitea instance, including one you run yourself. We'd rather say this now than have you wonder about it later.

Do I need my own build server for CI/CD?

No. Forgejo Actions runs your pipelines on every plan, including Open Source. What you need is a runner for the builds to execute on, and there are two ways to get one. Add a managed runner on any paid plan and we run it for you. Or host it yourself, free on any plan: any spare VPS running the Forgejo runner in Docker will do. The managed option still costs more than a bare VPS: what the difference buys is EU residency you don't have to prove yourself, a single-tenant instance that runs only your builds, and no server for you to patch, monitor or keep alive.

What counts as storage?

Storage covers your Git data, Git LFS objects, packages and release artifacts. CI logs and build caches don't count against it, and workflow artifacts are deleted after 30 days. On Teams, storage is pooled across the organisation, so a five-seat team shares 50GB however it likes.

Is there a limit on downloads?

There's no metered bandwidth. Downloads from public repositories, releases and package registries fall under fair use, which covers what an active open-source project normally sees. If a project's traffic starts to look like a file mirror or a content delivery network, we'll contact you to agree on a solution before limiting it. Illegal content is removed as soon as it is reported.

Can we use our own domain and identity provider?

Yes, on the Enterprise plan. Each Enterprise customer will get an isolated Forgejo instance in the EU, on its own domain, with sign-in through your identity provider over OpenID Connect or LDAP and connections to tools such as Jira and Artifactory.

More about Enterprise

100% renewable-matchedEuropean power

Vault42 runs on Scaleway's European data centres, where every kilowatt-hour is matched to wind and hydro generation in some of the most energy-efficient facilities in the industry. It runs on EU infrastructure, and the environmental figures come directly from Scaleway's published impact data.

Wind turbines, part of Scaleway's renewable energy infrastructure

Paris

our primary region, on one of the lowest-carbon grids in the world

1.37 PUE

Scaleway's 2024 data centre average, against a ~1.55 industry norm

€0

spent with US hyperscalers

France's grid, where our primary region sits, runs mostly on nuclear and hydro and is roughly ten times lower-carbon than the US average. Our other EU regions vary; Scaleway publishes the figures for each.