Choosing a sovereign project management tool.
A sovereign tool is one you stay in control of: you know where your data is, who can access it, and you can leave with it. Here are seven criteria to check, the questions to ask each vendor, then Jalonio’s answers, without embellishment.
Published on 20 October 2026 by KersAI Factory.
The seven criteria
1. Where it is hosted
Where are the servers, and which company runs them? The country of the servers is not enough: the country of the company that runs them also matters, because its law applies to it.
2. Subprocessors
An online service relies on other providers: sending emails, payment, network protection, backups. Ask for the full list, with each one’s country. A public, up-to-date list is a good sign.
3. Reversibility
Can you export all your data, at any time, without asking anyone? In what format? Is the format documented, and can the export be imported elsewhere? A partial or paid export ties you to the tool.
4. Accessibility
For a public body, digital accessibility is a legal obligation, measured in France by the RGAA, the French accessibility standard based on WCAG 2.1 AA. Check that everything can be done with the keyboard, including moving a card on a board, and ask for the compliance status: audit carried out or not, rate claimed.
5. Sign-in and security
Does the tool connect to your directory (Microsoft Entra ID, Google Workspace, LDAP), or to ProConnect, the French State’s single sign-on for public agents? Does it offer two-factor authentication, an audit log, backups?
6. The licence
Free software leaves you a way out: if the service closes or changes its terms, you can install it yourself. Check the licence and whether installing it on your own servers is really possible.
7. The pricing model
Who counts as a user? Do people who only read, or outside partners, have to be paid for? What happens when the team grows? A clear price can be worked out in one line.
The checklist
| Criterion | Questions to ask |
|---|---|
| Hosting | In which country are the servers? Which company runs them, and which country is it from? |
| Subprocessors | Is the list public, with each one’s country and role? Which of them see your data? |
| Reversibility | Is the export complete, self-service and free? Is the format documented and can it be imported again? |
| Accessibility | Can everything be done with the keyboard? Has an accessibility audit been carried out? |
| Sign-in | Single sign-on with your directory or ProConnect? Two-factor authentication? Audit log? |
| Licence | Free or proprietary software? Can it be installed on your servers? |
| Price | Who is counted? Are viewers and guests paid for? What discounts are there? |
Jalonio’s answers
Jalonio is the project manager of KersAI Factory, a publisher established in France. Here are its answers, criterion by criterion, including what remains to be done.
| Criterion | Jalonio’s answer |
|---|---|
| Hosting | Servers and data with Contabo, in Germany, in the European Union. |
| Subprocessors | Listed with their country in the privacy policy: Contabo (Germany), Scaleway (France) for emails, Stripe (Ireland) for payment, Mistral AI (France) for AI assistance. Two are American: Cloudflare, through which traffic passes, and Google, which stores the backups. |
| Reversibility | Full export of the organisation or of a project, at any time, even in read-only mode, in an open, documented format that can be imported into another Jalonio installation. |
| Accessibility | Designed for level AA of RGAA 4.1: everything with the keyboard, drag and drop included, charts accompanied by their data table, automatic checks with every release. Full audit planned, not yet carried out. |
| Sign-in | Two-factor authentication for everyone. With the Organisation plan: Microsoft Entra ID, Google Workspace, ProConnect, OpenID Connect, LDAP, a chained audit log that can be viewed and exported, security policies. |
| Licence | Free software under the EUPL 1.2 licence. Can be installed on your Debian servers, without Docker, with no outgoing requests by default. |
| Price | Free for up to 10 billable users. After that, only users from the 11th onwards are paid for: €3.90 per month (Team) or €6.90 (Organisation). Viewers and external guests are never counted. |
Net prices: VAT not applicable, article 293 B of the French General Tax Code. Paid plans are reserved for organisations established in France. Details on the Pricing page.
Frequently asked questions
What is a sovereign project management tool?
A tool you stay in control of: data hosted under a known legal framework, declared subprocessors, a full export available, and ideally free software you can install yourself.
Is hosting in France or in the European Union enough?
No. Also look at the company that runs the servers and at the list of subprocessors, with their country. For full control, installing on your own servers remains the safest option.
Is Jalonio SecNumCloud qualified?
No. Jalonio claims no qualification or certification (SecNumCloud is the French cloud security qualification). It is hosted in Germany and can be installed on your servers, with a hardening guide that follows the recommendations published by ANSSI, the French national cybersecurity agency.
How can we check reversibility before committing?
Try it: create a project and a few tickets, then run a full export and open the archive. With Jalonio, export is available in every plan, including the free plan.
Read also: Jalonio’s sovereignty and security, Jalonio for the public sector, migrating from Jira.
See for yourself.
Create a workspace, import a few tickets, export everything. Free for up to 10 users, no credit card required.