Governance Model
Non-US Tooling Guide
Comprehensive catalogue of non-US software alternatives for every layer of government IT infrastructure—from desktop to cloud.
Definition of "Non-US": For this guide, non-US means the software
is either (1) open source with no single controlling US entity, or (2) developed
and controlled by a non-US company. Open source projects with diverse international
governance (like Linux, Kubernetes) are included as they cannot be unilaterally
controlled by any single nation.
1. Desktop & Office Suite
| Function | US Incumbent | Non-US Alternative | Origin | Maturity |
|---|---|---|---|---|
| Operating System | Windows |
Linux distributions: • Ubuntu (UK-founded, now global) • Debian (international community) • RHEL/Rocky Linux (enterprise) • SUSE (German) |
Open Source / EU | Production |
| Office Suite | Microsoft Office |
LibreOffice (desktop) Collabora Online (browser) OnlyOffice (Latvian) |
Open Source / EU | Production |
| Email Client | Outlook |
Thunderbird (Mozilla) Evolution (GNOME) |
Open Source | Production |
| Web Browser | Chrome, Edge |
Firefox (Mozilla Foundation) Chromium (open source base) |
Open Source | Production |
| PDF Viewer/Editor | Adobe Acrobat |
PDF Arranger Okular (KDE) LibreOffice Draw |
Open Source | Production |
2. Communication & Collaboration
| Function | US Incumbent | Non-US Alternative | Origin | Maturity |
|---|---|---|---|---|
| Email Server | Exchange, Gmail |
Open-Xchange (German) Zimbra (open source) Postfix + Dovecot Mailcow |
Germany / Open Source | Production |
| Secure Email | — |
ProtonMail (Swiss) Tutanota (German) |
Switzerland / Germany | Production |
| File Sync & Share | OneDrive, Google Drive, Dropbox |
Nextcloud (German) ownCloud (German) Seafile |
Germany | Production |
| Video Conferencing | Zoom, Teams, Meet |
Jitsi Meet (open source) BigBlueButton (Canadian) OpenTalk (German) |
Open Source / Canada / Germany | Production |
| Team Chat | Slack, Teams |
Element / Matrix (UK) Mattermost (open source) Rocket.Chat (open source) Zulip (open source) |
UK / Open Source | Production |
| Document Collaboration | Google Docs, SharePoint |
Collabora Online (UK) CryptPad (French) Etherpad |
UK / France / Open Source | Production |
3. Cloud Infrastructure (IaaS/PaaS)
| Function | US Incumbent | Non-US Alternative | Origin | Maturity |
|---|---|---|---|---|
| Cloud Platform (IaaS) | AWS EC2, Azure VMs, GCP Compute |
OpenStack (open source) Self-hosted on European providers |
Open Source | Production |
| Container Orchestration | EKS, AKS, GKE |
Kubernetes (CNCF) K3s (lightweight) Rancher (SUSE, German) |
CNCF (international) / Germany | Production |
| Object Storage | S3, Azure Blob, GCS |
MinIO (open source) Ceph (open source) SeaweedFS |
Open Source | Production |
| Container Registry | ECR, ACR, GCR |
Harbor (CNCF) GitLab Registry Quay (Red Hat) |
CNCF / Open Source | Production |
| Serverless / Functions | Lambda, Azure Functions |
OpenFaaS Knative Kubeless |
Open Source | Maturing |
4. Databases & Data Platforms
| Function | US Incumbent | Non-US Alternative | Origin | Maturity |
|---|---|---|---|---|
| Relational Database | RDS, Azure SQL, Cloud SQL |
PostgreSQL (international) MariaDB (Finnish origin) CockroachDB (open source) |
Open Source / Finland | Production |
| Document Database | DynamoDB, CosmosDB |
MongoDB (open source core) CouchDB FerretDB (Postgres-based) |
Open Source | Production |
| Search Engine | Elasticsearch (now complex licensing) |
OpenSearch (AWS fork, open source) Meilisearch (French) Typesense |
Open Source / France | Production |
| Message Queue | SQS, Azure Service Bus |
Apache Kafka (ASF) RabbitMQ (VMware/Pivotal) NATS |
Open Source | Production |
| Cache | ElastiCache, Azure Cache |
Redis (open source) Valkey (Linux Foundation fork) KeyDB Dragonfly |
Open Source | Production |
5. Security & Identity
| Function | US Incumbent | Non-US Alternative | Origin | Maturity |
|---|---|---|---|---|
| Identity Provider (IdP) | Azure AD / Entra, Okta |
Keycloak (Red Hat, open source) Authentik (German) Gluu (open source) FusionAuth (open source core) |
Open Source / Germany | Production |
| Secrets Management | AWS KMS, Azure Key Vault |
OpenBao (open source core) CyberArk Conjur (Israeli) Infisical (open source) |
Open Source / Israel | Production |
| Certificate Management | ACM, Azure certificates |
cert-manager (CNCF) Smallstep CFSSL |
Open Source / CNCF | Production |
| VPN | — |
WireGuard (open source) OpenVPN Tailscale (WireGuard-based) |
Open Source | Production |
| SIEM | Splunk, Microsoft Sentinel |
Wazuh (Spanish) Graylog (German) Security Onion |
Spain / Germany | Production |
6. Monitoring & Observability
| Function | US Incumbent | Non-US Alternative | Origin | Maturity |
|---|---|---|---|---|
| Metrics | CloudWatch, Datadog |
Prometheus (CNCF) VictoriaMetrics Thanos |
CNCF / Open Source | Production |
| Visualisation | — |
Grafana (Swedish) Kibana / OpenSearch Dashboards |
Sweden / Open Source | Production |
| Logging | CloudWatch Logs, Splunk |
Loki (Grafana Labs, Swedish) OpenSearch Fluentd / Fluent Bit |
Sweden / Open Source | Production |
| Tracing | X-Ray, Datadog APM |
Jaeger (CNCF) Zipkin Tempo (Grafana Labs) |
CNCF / Sweden | Production |
| Alerting | PagerDuty, OpsGenie |
Alertmanager (Prometheus) Grafana Alerting Uptime Kuma |
Open Source / Sweden | Production |
7. DevOps & CI/CD
| Function | US Incumbent | Non-US Alternative | Origin | Maturity |
|---|---|---|---|---|
| Source Control | GitHub |
GitLab (Dutch origin, now global) Gitea (open source) Forgejo (EU community fork) |
Netherlands / Open Source | Production |
| CI/CD | GitHub Actions, CircleCI |
GitLab CI Jenkins Drone CI Woodpecker CI |
Open Source | Production |
| GitOps | — |
ArgoCD (CNCF) Flux (CNCF) |
CNCF | Production |
| Infrastructure as Code | CloudFormation, Pulumi |
OpenTofu (Linux Foundation, open source) OpenTofu (Linux Foundation fork) Ansible |
Open Source / Linux Foundation | Production |
| Project Management | Jira, Asana |
OpenProject (German) Taiga (Spanish) Plane (open source) |
Germany / Spain | Production |
8. API & Integration
| Function | US Incumbent | Non-US Alternative | Origin | Maturity |
|---|---|---|---|---|
| API Gateway | AWS API Gateway, Apigee |
Kong (open source core) Traefik (French) APISIX (Apache) Tyk (UK) |
Open Source / France / UK | Production |
| Service Mesh | — |
Istio (CNCF, Google-originated but open) Linkerd (CNCF) Cilium (Swiss company) |
CNCF / Switzerland | Production |
| Load Balancer | ELB, Azure LB |
HAProxy (French) Nginx (open source) Traefik (French) |
France / Open Source | Production |
| DNS | Route 53, Cloudflare |
PowerDNS (Dutch) CoreDNS (CNCF) BIND |
Netherlands / CNCF | Production |
9. Recommended Sovereign Stack
Based on maturity, European origin/support, and government adoption, we recommend this baseline stack for sovereign cloud deployments:
Sovereign Reference Stack
| Layer | Recommended |
|---|---|
| Desktop OS | Ubuntu LTS or SUSE Linux Enterprise |
| Office Suite | LibreOffice + Collabora Online |
| Email/Calendar | Open-Xchange or Nextcloud + mail |
| File Storage | Nextcloud |
| Video Conferencing | Jitsi Meet or BigBlueButton |
| Team Chat | Element (Matrix) or Mattermost |
| Container Platform | Kubernetes (vanilla) or Rancher |
| Object Storage | MinIO |
| Database | PostgreSQL |
| Identity | Keycloak |
| Secrets | OpenBao |
| Monitoring | Prometheus + Grafana + Loki |
| CI/CD | GitLab (self-hosted) |
| IaC | OpenTofu + Ansible |
| API Gateway | Traefik or Kong |
See Also: Proven Technology Stacks in Production
These tooling alternatives are not theoretical. Our migration case studies document 10 European government programmes where sovereign technology stacks have been deployed at scale, including maturity ratings and deployment evidence for each category.