Self-hosted on EU infrastructure. Zero licensing fees. Running in under 30 minutes with Docker Compose.
Consider hosting region, processing terms, subscription costs, and operational responsibilities.
A 50-employee team pays ~$6,000-19,200/yr for Lattice or quote-based pricing for Culture Amp, versus a flat €588/yr for Blik hosted.
Hosting location alone does not establish compliance. Your organization remains responsible for lawful processing, configuration, access, retention, and compliance processes.
Deploy on Hetzner (Germany), OVH (France), or another EU provider. Your organization must assess the location of data, backups, email delivery, and other processors, including any international transfers.
Self-hosting lets you choose infrastructure and email providers. Assess each provider's data processing terms and your organization's controller and processor responsibilities.
Self-service export and deletion tools support data subject requests. Your organization must define request handling, retention, backup deletion, and documentation processes.
Token-based reviewer access and category-aggregated reports support confidentiality. Responses retain token references that may link to invitation emails. Invitations, permissions, thresholds, and feedback content affect confidentiality; database administrators may be able to identify reviewers.
Auditors can inspect the public source code. Your organization must document deployment-specific data flows and technical and organizational measures.
EU deployment can help you control data location, but does not by itself resolve international transfer obligations. Review all processors and data flows with your compliance team.
Your EU Server (Hetzner/OVH) → PostgreSQL Database (EU) → Backup Storage (EU) → Admin Access (HTTPS) → Reviewer Tokens (No authentication required)
All data remains in EU jurisdiction at all times
Real numbers for European tech companies
| Company Size | Lattice (published)* | Culture Amp | Blik Hosted | Blik Self-Host |
|---|---|---|---|---|
| 50 employees | ~$6,000-19,200/yr | Quote-based, no published pricing | €588/yr | a small EU VPS (≈€10-50/month) |
| 100 employees | Contact vendor | Quote-based, no published pricing | €2388/yr | a small EU VPS (≈€10-50/month) |
| 200 employees | Contact vendor | Quote-based, no published pricing | €2388/yr | a small EU VPS (≈€10-50/month) |
*Lattice modules per seat/month: Performance $10, Goals & OKRs $8, Engagement $4, Compensation +$6, Grow +$4; the range shows Performance-only ($6,000/yr) to all five ($19,200/yr) at 50 seats. lattice.com/pricing, as of October 2026. Culture Amp publishes no public prices; plans are quote-based (cultureamp.com/platform/plans-and-pricing).
Blik Hosted = €19 per one-time review round (up to 10 employees), €49/month (up to 50 employees) or €199/month (up to 200 employees). Blik Self-Host = a small EU VPS (≈€10-50/month). No per-user fees. Listed prices may differ from negotiated customer contracts.
Developer-friendly deployment and technology stack
Admin dashboard with audit trails and access controls
Anonymized reports with privacy thresholds
Django 5.x with type hints and modern patterns. PostgreSQL 15+ for reliability. Clean architecture following best practices. Well-documented codebase.
Production-ready Docker Compose setup. Gunicorn WSGI server. WhiteNoise static file serving. Automatic database migrations. Zero-downtime updates.
Engineering-appropriate skill assessment framework. Five levels from Novice to Expert. Aligns with technical career ladders. Resonates with developer culture.
Germany: Hetzner Cloud (excellent price/performance, 100% renewable energy, Nuremberg datacenter)
France: OVH Cloud (strong privacy reputation, Strasbourg/Roubaix datacenters)
Netherlands: TransIP (Dutch privacy laws)
Finland: UpCloud (Nordic data protection standards)
Any provider with EU datacenters works. Minimum specs: 2 vCPU, 4GB RAM, 40GB SSD.
Configure SMTP for your chosen provider or your own mail server. Assess where invitations and delivery logs are processed, including subprocessors and international transfers; selecting an EU endpoint alone does not settle these obligations.
Currently, admin authentication uses Django's built-in system. LDAP/SSO integration is on the roadmap. For now, admins log in with username/password. Reviewers never authenticate (token-based access only). You can modify the authentication backend since it's open source.
Use the public source code and GDPR export and deletion tools as inputs to your assessment. Your organization must document lawful processing, deployment-specific data flows, processors, access controls, retention, and request handling. Hosting location alone does not demonstrate compliance. Consult the European Data Protection Board for guidance.
Export your employee list from existing tool as CSV. Import into Blik via Django admin or API. Historical review data can be archived separately (Blik focuses on new cycles, not historical reporting). Plan 2-4 weeks for parallel running during transition period. Most teams switch completely after first successful cycle.
PostgreSQL dumps to EU-based storage (Hetzner Storage Box, S3 EU buckets). Set automated retention policies matching your data retention requirements. Implement deletion scripts for GDPR "right to be forgotten" requests. All backup data stays in EU jurisdiction. Encrypted backups recommended for extra security.
Yes. Disable external AI API calls and use local models. Configure SMTP to your internal mail server. All web traffic stays internal. No outbound internet access required. Perfect for highly regulated environments or companies with strict security policies.
No Standard Contractual Clauses needed. No Schrems II concerns. No DPA negotiations with US vendors. Your legal team will thank you.
A flat €588/yr (up to 50 employees) or €2388/yr (up to 200 employees), versus Lattice's ~$6,000-19,200/yr at 50 seats. Free up budget for engineering salaries, infrastructure, or other priorities.
Developers trust open source more than black boxes. Self-hosting appeals to technical culture. Can customize and extend as needed.
No sales calls, no complex contracts, no multi-week implementations. Running in under 30 minutes with Docker Compose. Run the first cycle in 30 minutes. Ship it Friday, use it Monday.
Performance review data is sensitive. Self-hosting means complete control. No third parties, no vendor breaches, no data leaks.
Open source means no vendor lock-in. If Blik stops development, you still have the code. Community-driven means continuous improvement.
Building a privacy-first tech stack with EU-based tools
Blik joins a growing ecosystem of European alternatives to US-based SaaS. For general surveys, consider:
Replace Slack with EU-based alternatives:
Essential reading for EU tech compliance:
Recommended infrastructure partners:
Understanding AGPL and software freedom:
Connect with the EU tech ecosystem:
Blik offers self-hosting and managed EU hosting for teams that want more control over their feedback data. Assess deployment, processors, and organizational practices against your own compliance requirements.
Flat €588/yr for up to 50 employees. EU data residency. Open source transparency.
Don't want to manage infrastructure? We offer a fully managed version hosted in EU data centers for €49/month. No server management, automatic updates, daily backups. Your organization remains responsible for its GDPR obligations.
View Hosted Plans