Tuleap

What Is Tuleap?

Enalean SAS started building Tuleap in 2011 from an office near Chambéry, in the French Alps. At the time, most European engineering teams were still choosing between IBM Rational tools and homegrown spreadsheets to track requirements. The founders bet on a different model: bundle Git and SVN hosting, agile planning, requirements management, and test tracking into a single open-source platform, released under the GNU GPL. They planned to sell support and cloud hosting around it.

That bet paid off in regulated engineering circles specifically. Automotive suppliers needing ISO 26262 functional-safety sign-off, aerospace contractors working to ASPICE, and defence programs requiring air-gapped deployment all found a tool built for their compliance burden rather than retrofitted for it. Airbus is among the organisations using Tuleap today.

Fifteen years after founding, Enalean reached its biggest milestone yet. In April 2026, Dassault Systèmes — the French engineering software giant behind CATIA and the 3DEXPERIENCE platform, listed on Euronext Paris — acquired Enalean outright. Tuleap now sits inside Dassault's CATIA CYBERSYSTEM portfolio, positioned as the bridge between software development traceability and systems engineering models. For customers, the acquisition keeps Tuleap under French and European ownership rather than introducing an American parent, while adding the financial backing of a multinational software vendor.

Key Features

What Does Tuleap's ALM Stack Actually Cover?

Tuleap's core proposition is traceability from requirement to commit to test result, all inside one system. A requirement written in Tuleap can link directly to the Git commits that implement it, the tickets that track its progress, and the test campaigns that validate it. When an auditor asks "show me how this safety requirement was verified," the answer is a traceability matrix Tuleap generates automatically rather than a manual reconstruction across five disconnected tools.

Agile planning sits on top of this: Scrum and Kanban boards, sprint backlogs, and Gantt-based roadmapping for cross-project visibility. Larger organisations running scaled agile frameworks get dedicated SAFe program management views, letting release trains track dependencies across multiple Tuleap projects at once.

How Good Is Tuleap's Git and SVN Hosting?

Native Git and Subversion repositories ship with unlimited scale per project, and commits, branches, and pull requests link bidirectionally to trackers and requirements. Jenkins integration triggers builds automatically from commits or artifact changes, and Tuleap can act as an OIDC/OAuth2 provider for authentication across connected tools.

Judged purely as a Git forge, though, Tuleap trails GitHub and GitLab. Pull request review tooling, branch protection rules, and the surrounding app marketplace are noticeably thinner. Tuleap isn't trying to out-forge GitHub — it's trying to keep code, requirements, and tests in one traceable system. The Git hosting exists to serve that goal rather than to compete on developer experience alone.

What Makes ISO 26262 and ASPICE Support Different Here?

Most Git-centric platforms treat compliance as an integration problem: bolt on a third-party traceability tool and hope the audit trail holds together. Tuleap builds the traceability matrix natively — automotive functional safety requirements under ISO 26262, or process compliance under Automotive SPICE, generate audit-ready exports directly from the linked data already in the system.

JTEKT, the Japanese automotive component maker, has documented achieving ASPICE compliance using Tuleap's traceability tooling. That's a narrow use case compared to general-purpose DevOps platforms, but for teams inside that narrow use case, it's the reason they chose Tuleap over GitHub Enterprise or GitLab Ultimate in the first place.

Can Tuleap Run Fully Air-Gapped?

Yes, and this matters more than it sounds. Defence contractors and government programs frequently require software with zero external network dependency — no phone-home telemetry, no cloud fallback, no third-party CDN calls. Tuleap's on-premises Expert and Managed editions support fully disconnected deployment, a requirement that immediately rules out most SaaS-first competitors regardless of their feature depth.

What Changes Under Dassault Systèmes Ownership?

The stated integration path connects Tuleap's software traceability to CATIA's systems engineering models and ENOVIA's product lifecycle management. In theory, an automotive OEM could trace a safety requirement from a physical system model in CATIA down to the software commit that implements it in Tuleap. That's a compelling pitch for Dassault's existing manufacturing customers.

It's also unproven. Post-acquisition roadmaps have a habit of drifting from launch-day promises, and Enalean's roughly 20-to-50-person team is now a small division inside a much larger organisation. Existing Tuleap customers should watch release notes over the next 12 months rather than assume continuity by default.

Pricing

Tuleap runs a tiered model that splits cleanly between self-hosted and cloud. The Community Edition is genuinely free and open-source under the GNU GPL, with no restriction on user count or project count — you just handle your own updates, backups, and support.

Cloud pricing starts at myTuleap for €13 per user per month, billed annually, which includes all ALM features plus 50GB of storage and managed hosting. The next tier, Cloud Premium, runs roughly €25 per user per month for 500GB of storage, an SLA, premium support, and SSO via OpenID Connect. Volume discounts apply above 50 users.

Cloud Ultimate and the on-premises Expert and Managed tiers move to custom or near-custom pricing. On-premises plans have historically run from around €23 to €33 per user per month. They add dedicated infrastructure, unlimited storage, and a choice of hosting location: France, elsewhere in the EU, Switzerland, the UK, the US, or Canada.

There's no free hosted cloud tier. A five-person team wanting managed Tuleap pays from day one. That's a real gap against GitLab's generous free SaaS tier, and it means the only genuinely free path is self-hosting the Community Edition yourself.

EU Compliance & Privacy

Tuleap's standard Cloud plans host data in France and the EU, keeping it within GDPR's home jurisdiction without requiring Standard Contractual Clauses or adequacy workarounds. Cloud Ultimate customers can opt into other hosting regions, but the default posture for most customers is EU-resident data under French corporate law.

The Dassault Systèmes acquisition doesn't change this. Dassault is headquartered in Vélizy-Villacoublay, France, and listed on Euronext Paris — there's no US parent company that could be compelled to hand over customer data under foreign data-access statutes. For automotive and aerospace customers already navigating export-control and data-sovereignty requirements, that continuity of European ownership was likely a precondition for the deal being palatable to existing customers at all.

Compliance documentation for ISO 26262 and ASPICE is a structural strength rather than an afterthought. The traceability matrices that support those standards are generated from the same data model that runs the rest of the platform.

Who It's Best For

Regulated engineering organisations — automotive suppliers, aerospace contractors, medical device makers, defence programs — need an auditable trail from requirement to code to test. ISO 26262 or ASPICE sign-off is often a contractual requirement rather than a nice-to-have.

European teams that want sovereign hosting without giving up Git-based version control entirely. Tuleap won't out-feature GitHub Enterprise for pure software teams, but it doesn't need to: its buyers are choosing traceability and data residency over branch-workflow polish.

Organisations already inside the Dassault ecosystem, particularly manufacturers using CATIA or 3DEXPERIENCE, who can now connect systems engineering models to software delivery without a third-party integration layer.

If your team just wants fast, modern Git hosting with a large app marketplace and doesn't need compliance traceability, GitHub or GitLab remain the better default. Tuleap's value is concentrated in a specific, demanding niche.

The Verdict

Tuleap earns its place with regulated engineering teams by doing something GitHub and GitLab don't bother with: native, audit-ready traceability from requirement to commit to test. The Dassault Systèmes acquisition adds financial weight and a genuine systems-engineering integration story, without moving data outside French or EU jurisdiction. Real trade-offs remain — dated forge ergonomics, no free cloud tier, and a small team now absorbed into a much larger one. For automotive, aerospace, and defence teams that need the compliance trail, those trade-offs are the cost of entry, not a deal-breaker.

Frequently Asked Questions

Is Tuleap GDPR compliant and where is data hosted?

Yes. Tuleap is a French company subject to GDPR, and its Cloud plans host data in France and the EU by default. Cloud Ultimate customers can additionally choose servers in Switzerland, the UK, the US, or Canada, but the standard myTuleap and Cloud Premium tiers keep data within the EU.

How does Tuleap compare to GitLab?

GitLab is a purpose-built DevOps platform with deeper CI/CD pipelines and a larger integration ecosystem. Tuleap is an ALM suite that happens to include Git and SVN hosting, and it wins on requirements traceability and ISO 26262/ASPICE compliance exports for regulated engineering teams. GitLab wins on modern branch workflows, pipeline depth, and third-party integrations. Teams needing audit-grade traceability alongside code should look at Tuleap, while those that just need a strong Git forge are usually better served by GitLab.

Does Tuleap have a free plan?

There's no free hosted cloud tier — myTuleap Cloud starts at €13 per user per month. The Community Edition, however, is genuinely free and open-source under the GNU GPL for teams willing to self-host and manage their own updates and support, with no restrictions on users or projects.

Is Tuleap safe to use now that Dassault Systèmes owns it?

Dassault Systèmes acquired Enalean, the company behind Tuleap, in April 2026. As a French, Euronext Paris-listed company, Dassault's ownership keeps Tuleap under European control rather than introducing a non-EU parent. The stated strategy folds Tuleap into CATIA and 3DEXPERIENCE rather than sunsetting it, though roadmap continuity after any acquisition is worth monitoring over the following year.

Who actually uses Tuleap and what is it best for?

Tuleap is built for regulated engineering organisations — automotive, aerospace, defence, medical devices, semiconductors — that need to prove ISO 26262 or ASPICE compliance with an auditable trail from requirement to test to commit. Airbus is a known user. It isn't the right choice for a startup that just wants fast, modern Git hosting; GitHub or GitLab fit that use case better.