Security / trust page (compliance) — Nextcloud Files (Nextcloud Hub)

Cited by

Facts read from this source

• GDPR no DPA needed Report an error

  “Nextcloud is fundamentally designed so that Nextcloud GmbH does not have any access to customer data, removing the need for a data processor or controller agreement under the GDPR or similar legislation.”

• Certifications list Report an error

  “GDPR NIS2 KRITIS EN 301 549 WCAG 2.2 NIST CCPA HIPAA FERPA COPPA MTCDPA PCI DSS”

• Additional certifications Report an error

  “ANSSI CSPN BITV 2.0 BLAUER ENGEL”

• ISO 27001 BSI Report an error

  “ISO/IEC 27001 BSI IT-GRUNDSCHUTZ”

• More standards Report an error

  “REUSE OPENSSF BEST PRACTICES”

• Compliance kit contents Report an error

  “We offer our customers both a high level 12-step compliance checklist overview as well as hands-on, concrete and extensive over-20-page administrator manual, plus direct consultation and a number of compliance tools and apps.”

• GDPR overview contents Report an error

  “An overview of where personal data can be stored in Nextcloud, covering user accounts, monitoring and logs, apps, file storage, database, backups and more”

• Compliance apps Report an error

  “To make compliance easier, Nextcloud Enterprise comes with a number of Compliance apps and capabilities:”

• Hosting responsibility Report an error

  “The actual compliance with regulations depends on the hosting solution used for Nextcloud Enterprise. The hosting party is responsible for certification.”

• Fda title21 Report an error

  “Nextcloud Enterprise is ready for use in a FDA Title 21 CFR Part 11 compliant environment, if set up and run properly on appropriate infrastructure.”

• Anssi cspn Report an error

  “Nextcloud Files has been CSPN-certified by the French cybersecurity authority ANSSI. CSPN is a first-level security certification and a standard reference point in French public tenders.”

• Docs enterprise only Report an error

  “Note: these compliance documents only cover Nextcloud Enterprise, not the community edition. We do not offer any guarantees or certification for the community version and strongly recommend against its use in compliance-critical environments.”

• Downloadable documents Report an error

  “Download data processing record Download HIPAA compliance statement”

• Encryption levels Report an error

  “Multiple levels of encryption (HTTPS/SSL/TLS, AES-256 or stronger, server-side and end-to-end encryption) ensure the highest level of data protection from hacking.”

• Security features Report an error

  “File access control Monitoring and auditing logs Encryption Easy access Multi-platform productivity Secure file exchange Integrated in email”

• Integration surface Report an error

  “Its powerful LDAP and storage integration seamlessly fits with existing user directories, Windows Network Drive, NFS and Sharepoint storage solutions.”

• Cybersecurity act readiness Report an error

  “Nextcloud follows the strictest security protocols in the industry and anticipates to be ready for easy and quick certification of customer deployments once the Cybersecurity Act goes into effect.”

Scores citing this record

• The Agency Producer Encryption, key custody & recovery
• The Architecture Practice Partner Encryption, key custody & recovery
• The Data Protection Officer Encryption, key custody & recovery
• The Data Protection Officer European sovereignty
• The IT Lead Encryption, key custody & recovery
• The IT Lead European sovereignty
• The Skeptic Encryption, key custody & recovery
• The Skeptic European sovereignty
• The Tax Adviser Encryption, key custody & recovery
• The Tax Adviser European sovereignty