Industry guides

DAM for universities, public sector and non-profits

Quick answer

Universities, public bodies and non-profits need a DAM that handles many decentralised contributors, consent for photos of identifiable people, accessibility metadata and long-term archives on a constrained budget. Prioritise consent and release tracking, granular permissions, alt text and caption fields, affordable user licensing and EU hosting, and plan procurement around EU thresholds.

Key takeaways

  • Consent is the defining DAM requirement in this sector: photos of students, patients, beneficiaries and minors need recorded consent that can be withdrawn under the GDPR.
  • The Web Accessibility Directive (EU) 2016/2102 has covered public sector websites since 23 September 2020 and mobile apps since 23 June 2021, so alt text and captions belong in the DAM.
  • For 2026 and 2027, EU tender thresholds for supply and service contracts are EUR 140,000 for central government and EUR 216,000 for sub-central authorities.
  • Per-user pricing penalises decentralised institutions; unlimited-user, open-source or published-price models often fit better.
  • Heritage and archive collections need preservation metadata and retention rules that outlive any single platform contract.

Universities, public bodies and non-profits should select a DAM that governs consent, accessibility and long-term archives for many decentralised contributors at a predictable cost. Their asset challenges come from distributed ownership and legal duties toward the people in their images, and the right platform turns both into enforceable metadata.

Asset problems in universities, public sector and non-profits

Sector asset problems fall into four groups: distributed creation, consent, accessibility and archives. Distributed creation means faculties, departments, regional offices and volunteers all produce content, so one central team often governs assets made by hundreds of contributors. Consent is a GDPR matter, since photos of students, patients, beneficiaries and children are personal data that need a lawful basis, usually consent that can be withdrawn. Accessibility applies by law to public sector bodies under the Web Accessibility Directive (EU) 2016/2102, which has covered all their websites since 23 September 2020 and mobile apps since 23 June 2021.

Archives are the fourth group. Universities, museums and public bodies hold photo and film collections spanning decades, with preservation duties that outlast any software contract. Budgets constrain all four, so licence models matter more here than in most sectors.

Must-have DAM capabilities for the public and non-profit sector

Consent tracking and granular permissions are the two capabilities that protect institutions most.

Capability Why it matters in this sector Priority
Consent and release records linked to assets Withdrawal and expiry can be enforced Must have
Granular permissions by faculty or department Distributed teams with central oversight Must have
Alt text, captions and transcripts as fields Web Accessibility Directive compliance Must have
Unlimited or low-cost user licensing Hundreds of occasional contributors Must have
EU hosting or on-premise option Data protection and sovereignty policies Should have
Single sign-on with the institution's identity provider Staff and student access management Should have
Preservation metadata and export in open formats Archives outlive the platform Should have
Public image portal for press and partners Reduces ad hoc requests Could have

Our guide to GDPR and DAM covers consent models in detail, and the European Accessibility Act guide sets out alt text and caption practice that applies equally under the Web Accessibility Directive.

Integration needs: CMS, identity, Microsoft 365 and collections

Integration needs in this sector centre on identity and publishing. Single sign-on through SAML or the institution's identity provider is the first integration, because it makes permissions follow staff and student status automatically. The CMS, often Drupal, WordPress or TYPO3 in European institutions, should embed DAM assets with their alt text intact. Microsoft 365 and SharePoint connectors matter where staff already work in Teams, while museums and archives need links to their collections management system. Non-profits add CRM and fundraising platforms for campaign content.

Typical shortlist profile for universities, public bodies and charities

Sector shortlists typically compare open-source, published-price and sovereign-hosted options, and data residency policy often decides the final round; see EU data residency for DAM.

  • Open source: ResourceSpace, first built for Oxfam in 2006 and developed by UK B Corporation Montala, can be self-hosted with no licence fee.
  • Published-price SaaS: Asset Bank, from Brighton, publishes annual pricing and offers EU hosting regions.
  • AI-enriched libraries: Mediagraph offers AI keywording, alt-text generation and rights tracking with unlimited users.
  • Sovereign hosting: Ajaris, from Aix-en-Provence, offers French sovereign SaaS or on-premise deployment.

These are neutral examples of each profile; our open-source DAM guide explains when self-hosting fits.

Pitfalls in public sector and non-profit DAM projects

Four pitfalls recur in this sector (practitioner observation).

  1. Consent kept on paper. Paper forms cannot trigger withdrawal or expiry, so old images stay in use.
  2. Per-user pricing at scale. Licence costs rise sharply once every department joins.
  3. Tender specifications copied from vendors. Write requirements from your own use cases, using the DAM selection and RFP checklist.
  4. No exit plan for archives. Require bulk export of files and metadata in open formats.

What to do next

  1. Inventory images of identifiable people and check whether consent records exist for each.
  2. Estimate the full contract value to confirm whether an EU tender applies.
  3. Count likely contributors and occasional users to compare licence models fairly.
  4. Make alt text and caption fields mandatory for all web-published assets.
  5. Add data export, EU hosting and single sign-on as pass or fail criteria.

Frequently asked questions

Is there a free DAM for charities and universities?

Yes. ResourceSpace is open source and can be self-hosted with no licence fee, and several other open-source options exist. Total cost still includes hosting, security, upgrades and configuration, which typically range from a few thousand to tens of thousands of euros per year (editorial estimate). Many institutions buy hosted support from the developer to reduce internal IT load.

Do universities need consent to publish student photos?

Under the GDPR, an identifiable photo is personal data and publication needs a lawful basis, which for marketing use is usually consent. Consent must be specific, recorded and as easy to withdraw as to give, and stricter rules apply to children's data. A DAM should link each photo to its consent record and flag assets when consent expires or is withdrawn.

Does a public sector DAM purchase require an EU tender?

It does when the estimated total contract value, usually over the full contract term, exceeds the EU threshold under Directive 2014/24/EU. For 2026 and 2027 the threshold for supplies and services is EUR 140,000 for central government and EUR 216,000 for sub-central authorities. National rules may require competitive procedures below those values.

Sources

  1. Directive (EU) 2016/2102 on the accessibility of websites and mobile applications of public sector bodies (EUR-Lex)
  2. Public procurement thresholds for 2026 to 2027 (Arthur Cox)
  3. Regulation (EU) 2016/679, General Data Protection Regulation (EUR-Lex)

Related guides