Skip to content
Independently verified · Quarterly re-audit
EU VETTED

OnlyOffice

VERIFIED
Docs & wikis · Latvia
Founded 2009 · onlyoffice.com ↗

Riga-based Latvian office suite (Ascensio System SIA), AGPLv3 self-hostable + DocSpace cloud; complex post-2023 Singapore+UK+Russian-origin ownership chain.

In short

OnlyOffice, in the Docs & wikis category, is a European service with Latvia as its hosting location and at most minor, transient US exposure under the CLOUD Act.

Assessment notes

ONLYOFFICE has a complex ownership chain procurement-grade buyers must understand: operating entity is Ascensio System SIA in Riga, Latvia (so Latvian + EU jurisdiction at the contracting layer); founder and CEO Lev Bannov is a Russian national with Russian + Turkish dual citizenship who has been residing in Istanbul since 2023; the company was originally a 2009 subsidiary of Russian-based New Communication Technologies until an August 2023 ownership restructure transferred control to Ascensio System Limited (UK), in turn owned by OnlyOffice Capital Group Pte. Ltd. (Singapore), with Bannov as the ultimate beneficial owner across the group. AGPLv3-licensed and self-hostable, so EU buyers can fully escape the ownership chain by running their own instance. The operating entity is EU-incorporated (Latvia) but the ownership chain spans UK–Singapore–Russian-Turkish UBO; no public DPA or sub-processors list is available. Self-host on EU infrastructure (Hetzner / OVHcloud / Scaleway) is the procurement-grade recommended path. It neutralises the ownership-chain complexity by keeping all data flows under the customer's chosen EU jurisdiction.

CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
CLOUD Act by deployment

Exposure depends on how you run this product.

Hosted SaaS (default)

Vendor-operated: the sub-processors below apply.

Self-hosted (open-source)

Deploy on your own EU infrastructure and you control hosting and every sub-processor.

Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About OnlyOffice

ONLYOFFICE is a Microsoft 365 / Google Docs alternative office suite (documents, spreadsheets, presentations, PDF editing, fillable forms, real-time co-authoring) operated by Ascensio System SIA, headquartered in Riga, Latvia and founded in 2009 by Lev Bannov. The product ships as a fully open-source AGPLv3 codebase plus a managed DocSpace cloud, with desktop apps (Windows, Linux, macOS), mobile apps (iOS, Android), and 40+ third-party connectors for embedding into platforms like Nextcloud, ownCloud, Confluence, and many others. Real-world EU adoption is significant: the city of Lyon, France publicly migrated to OnlyOffice in 2025 as part of its sovereign-IT strategy.

For an EU-sovereignty audit ONLYOFFICE is the most structurally complex listing in the docs-and-wikis category. The operating-and-contracting entity is Ascensio System SIA in Riga, Latvia, an EU member state company. But the corporate ownership chain has multiple non-EU layers that procurement teams must understand before signing material multi-year deals: Ascensio System SIA was originally established in 2009 as a subsidiary of the Russian-based New Communication Technologies; in August 2023 the ownership restructure transferred control to Ascensio System Limited (UK), which is in turn owned by OnlyOffice Capital Group Pte. Ltd. (Singapore); the founder and ultimate beneficial owner Lev Bannov holds Russian and Turkish dual citizenship and has resided in Istanbul, Turkey since 2023. The August 2023 restructure was specifically designed to distance the operating entity from Russian ownership and align with EU procurement norms, but the structure is still non-trivial: EU-operating, UK-holding, Singapore-master-holding, Russian-Turkish UBO.

AGPLv3 open-source means the entire codebase is auditable and self-hostable: this is the procurement-grade escape hatch. Running the open-source ONLYOFFICE Community / Document Server on EU infrastructure (Hetzner, OVHcloud, Scaleway, IONOS, STACKIT) keeps everything inside the customer's chosen jurisdiction and effectively neutralises the ownership-chain complexity for the deployment data flows. Pricing: open-source self-host free; DocSpace Cloud free Startup tier with paid Business / Enterprise tiers. Best fit: EU public-sector and government buyers (Lyon model) that self-host on EU infrastructure under AGPLv3, organisations needing Microsoft Office format compatibility with sovereign-deployment options, and any procurement-grade buyer comfortable with the complex but EU-operating ownership chain (or who self-hosts to neutralise it).

SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-11).
FEATURES

Capability matrix

Self-hostable Yes
Real-time collaboration Yes
Databases / tables No
Public publishing Yes
Version history Yes
Granular permissions Yes
Offline mode Yes
AI assist Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option Yes
PRICING

Pricing & tiers

FREEMIUM
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement. This is recorded as no public DPA (see How we assess).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    www.onlyoffice.com/legal…
    Open ↗
ALTERNATIVES

Alternatives in this category

Anytype
Germany · Founded 2019
EU-SOVEREIGN

Berlin-based local-first peer-to-peer E2E-encrypted knowledge OS (Anytype, 2019); Any Source Available License; data lives on user device.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE
BookStack
United Kingdom · Founded 2015
EU-BASED

UK solo-dev MIT-licensed self-hosted wiki + documentation platform (Dan Brown, 2015); no SaaS, no vendor counterparty risk.

Public DPA Sub-processors Open source
FROM
€0/mo
CLOUD ACT
NONE
Collabora Online
United Kingdom · Founded 2012
EU-BASED

Cambridge-based LibreOffice Online (MPL-2.0/LGPL) by Collabora Productivity Ltd: free CODE dev edition + €3/user/mo Business; self-hostable on EU infra.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
MINOR