Identity and access management (IAM) services
Open source identity and access management from Switzerland
SwitzerlandEFTAOpen source Ownership reviewed, controller unresolvedHigh non-EU dependencyScope verdict
This service remains visible for context, but it is not counted or recommended as a European-controlled option.
Operational dependency warning
Current public evidence shows 4 non-European infrastructure or email dependencies across 3 providers: Amazon Web Services, Google, HubSpot. The reviewed operational path is therefore not entirely European.
ZITADEL is an open source identity and access management service from Switzerland. It takes care of logins, user accounts and access rights for your own applications, and comes with a modern administration interface and flexible pricing.
The company is Swiss and the code is open, which makes ZITADEL a European alternative to the American identity providers, but the hosted service runs on Google Cloud Platform. Customers can pay for their data to be stored in an EU or Swiss region, which still means a different Google region rather than a European cloud provider. It suits teams that want open source identity management and can self-host for full independence.
Data and operations
Verified operational dependencies, shown separately from ownership and from the service's core data hosting.
Public website
Why this matters
This public website route ends on Amazon Web Services, whose European seller is wholly owned by Amazon.com, Inc. An EU region can provide European data residency but remains under US ultimate ownership. DNS does not reveal the AWS region, the core service's host, or use of the separately operated AWS European Sovereign Cloud.
Incoming business email
Why this matters
Published MX records route incoming business email through Google Workspace. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.
Authorised outbound email
Authorised outbound email
Why this matters
This domain authorises Google Workspace to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.
Authorised outbound email
Why this matters
This domain authorises HubSpot to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.
Open source
France
