Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Nextcloud

VERIFIED
File sharing · Germany
Founded 2016 · nextcloud.com ↗

German open-source content-collaboration platform (Nextcloud GmbH, Stuttgart, 2016); fully self-hostable + managed Nextcloud One hosted in DE.

In short

Nextcloud, in the File sharing category, is an EU-owned service with Germany as its hosting location and no identified CLOUD Act exposure.

Assessment notes

Nextcloud GmbH (Stuttgart, founded June 2016 by Frank Karlitschek and Niels Mache with ~12 open-source founders, privately held, founder-CEO still in place) is the reference EU-sovereignty content-collaboration platform: 400,000+ deployments, tens of millions of users, fully open source (AGPL-3.0) and self-hostable by default with explicit 'keep your data on servers you own' positioning; reference customers include Deutsche Telekom, Amnesty International, German federal agencies, BWI (Bundeswehr IT), and EU public administrations; EU-owned, open-source under AGPL-3.0, no CLOUD Act exposure because the customer typically operates the infrastructure itself.

CLOUD ACT
OWNERSHIP
SUB-PROCS
0 none disclosed
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Nextcloud

Nextcloud is the directory's flagship self-hostable content-collaboration platform, operated by Nextcloud GmbH at Hauptmannsreute 44a, 70192 Stuttgart, Germany. Founded in June 2016 by Frank Karlitschek (founder and CEO; previously creator of ownCloud) together with Niels Mache and approximately a dozen open-source entrepreneurs, the company is privately held and founder-led with no external venture capital. Nextcloud reports 400,000+ deployments and tens of millions of users at thousands of organisations, and ships as an integrated suite: Files (Dropbox-class storage), Talk (Slack/Zoom-class messaging and video), Groupware (mail/calendar/contacts), Office (with Collabora / OnlyOffice integrations), Assistant (sovereign AI), and Flow (no-code automation), positioning itself as "the better Microsoft 365 for private clouds."

The compliance story is structurally different from every other vendor in this category. Nextcloud is open source under AGPL-3.0 and designed to be self-hosted by default, which means the customer becomes the data controller and operator of their own instance: there is no Nextcloud-managed cloud sitting between customer data and the customer (except for Nextcloud One, an optional managed offering for organisations under 100 users that is hosted in Germany with 24/7 support). The privacy policy makes this explicit: "Nextcloud software is designed to ensure no user data is transferred to us." For procurement-grade EU buyers this gives complete control over hosting region, encryption keys, and sub-processor footprint: running Nextcloud on Hetzner / OVHcloud / Scaleway / STACKIT or on the customer's own data centre delivers EU-owned, EU-hosted, no CLOUD Act exposure by construction. The reference customer list reflects this positioning: Deutsche Telekom, Amnesty International, German federal agencies, BWI (the Bundeswehr's IT subsidiary), and a long list of European universities. In 2026 Nextcloud partnered with IONOS to launch Euro-Office as an open-source Microsoft Office alternative (stable release summer 2026) and pledged €250M of digital-sovereignty investment by 2030.

Pricing reflects the self-host-first model. The Community Edition is free under AGPL-3.0; commercial Enterprise subscriptions start at €71.29 per user per year (Standard, 100-user tier) ≈ €6/user/month, scaling to €105 (Premium, with consulting and clustering support) and €205 (Ultimate, with AI Assistant, Flow, and 24/7 support) at 100-user volumes. Nextcloud One is the managed German-hosted tier for <100 users. Best fit: every EU procurement-grade buyer in the directory; particularly compelling for public-sector procurement, regulated industries, and any organisation that wants a Microsoft 365 alternative under its own control. Together with Hetzner/OVHcloud/STACKIT (hosting), this is the canonical EU-sovereign-cloud productivity stack.

SUB-PROCESSORS

Sub-processor map · none disclosed

Source ↗
Vendor discloses zero sub-processors. All data processing happens in-house.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-18).
FEATURES

Capability matrix

Max file size Unlimited
Photo sync Yes
File versioning Yes
Link sharing Yes
Platforms iOS macOS Windows Android Linux Web
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option Yes
PRICING

Pricing & tiers

FREEMIUM
from €6/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

DPA accessibility is not scored for this listing. Self-hosted or local software, vendors that are not data processors, and products carrying a SecNumCloud, EUCS or BSI C5 certification are not assessed on DPA accessibility. See How we assess.
  • Data Processing Addendum (DPA)
    — not assessed
    n/a
  • Sub-processors list
    nextcloud.com/privacy…
    Open ↗
  • Terms of Service
    nextcloud.com/terms…
    Open ↗
ALTERNATIVES

Alternatives in this category

Proton Drive
Switzerland · Founded 2014
EU-SOVEREIGN

Swiss zero-knowledge encrypted cloud (Proton AG, non-profit-foundation-controlled), 11,496 owned servers, ISO 27001 + SOC 2, 5 GB free.

Public DPA Sub-processors Open source
FROM
€4/mo
CLOUD ACT
NONE
Tresorit
Switzerland · Founded 2011
EU-HOSTED

Swiss-Post-owned (state-anchored) E2E encrypted enterprise cloud storage (Tresorit AG, Zurich), Swiss + EU DC options, ISO 27001.

Public DPA Sub-processors Open source
FROM
€10/mo
CLOUD ACT
MATERIAL
kDrive (Infomaniak)
Switzerland · Founded 1994
EU-SOVEREIGN

Swiss kDrive cloud (Infomaniak, Geneva, since 1994), own Swiss DCs, ISO 27001 + B Corp 2025, district-heating heat recycling.

Public DPA Sub-processors Open source
FROM
€4/mo
CLOUD ACT
NONE