Security / trust page (compliance) — Nextcloud Hub (Groupware & Office)

Cited by

Facts read from this source

• Data access design Report an error

  “Nextcloud is fundamentally designed so that Nextcloud GmbH does not have any access to customer data, removing the need for a data processor or controller agreement under the GDPR or similar legislation.”

• Standards list Report an error

  “GDPR NIS2 KRITIS EN 301 549 WCAG 2.2 NIST CCPA HIPAA FERPA COPPA MTCDPA PCI DSS”

• Certifications list Report an error

  “ANSSI CSPN BITV 2.0 BLAUER ENGEL ISO/IEC 27001 BSI IT-GRUNDSCHUTZ REUSE OPENSSF BEST PRACTICES”

• Compliance kit Report an error

  “We offer our customers both a high level 12-step compliance checklist overview as well as hands-on, concrete and extensive over-20-page administrator manual, plus direct consultation and a number of compliance tools and apps.”

• Imprint privacy links Report an error

  “Configurable imprint and privacy links for your login page”

• Data request app Report an error

  “Data Request app to allow users to request data deletion or modification from their user settings”

• Delete account app Report an error

  “Delete Account app to allow users to delete their account”

• Terms of service app Report an error

  “Terms of Service app that only gives access to Nextcloud after users read and agreed to terms (handles updated terms as well)”

• Hosting responsibility Report an error

  “The actual compliance with regulations depends on the hosting solution used for Nextcloud Enterprise. The hosting party is responsible for certification.”

• HIPAA support Report an error

  “HIPAA mandates industry-wide standards for protection and confidentiality of protected health information (PHI), both technical and in terms of processes.”

• Fda cfr part11 Report an error

  “Nextcloud Enterprise is ready for use in a FDA Title 21 CFR Part 11 compliant environment, if set up and run properly on appropriate infrastructure.”

• Anssi cspn Report an error

  “Nextcloud Files has been CSPN-certified by the French cybersecurity authority ANSSI.”

• EU cybersecurity act readiness Report an error

  “Nextcloud follows the strictest security protocols in the industry and anticipates to be ready for easy and quick certification of customer deployments once the Cybersecurity Act goes into effect.”

• Encryption Report an error

  “Data security: Multiple levels of encryption (HTTPS/SSL/TLS, AES-256 or stronger, server-side and end-to-end encryption) ensure the highest level of data protection from hacking.”

• Security features Report an error

  “File access control Monitoring and auditing logs Encryption Easy access Multi-platform productivity Secure file exchange Integrated in email”

• Ldap storage Report an error

  “Its powerful LDAP and storage integration seamlessly fits with existing user directories, Windows Network Drive, NFS and Sharepoint storage solutions.”

• Enterprise only scope Report an error

  “Note: these compliance documents only cover Nextcloud Enterprise, not the community edition. We do not offer any guarantees or certification for the community version and strongly recommend against its use in compliance-critical environments.”

• Available documents Report an error

  “Download data processing record Download HIPAA compliance statement”

• Document retention auditing Report an error

  “Nextcloud features the required retention, versioning and auditing features and can integrate with signature application and validation solutions.”

• GDPR admin manual access Report an error

  “Customers can download the complementing GDPR Admin Manual in our customer portal.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer Calendar, contacts & office apps
• The Data Protection Officer Security, encryption & compliance archiving
• The Data Protection Officer European sovereignty
• The IT Administrator Security, encryption & compliance archiving
• The IT Service Provider Security, encryption & compliance archiving
• The IT Service Provider European sovereignty
• The Public Sector IT Lead Security, encryption & compliance archiving
• The Public Sector IT Lead European sovereignty
• The Skeptic Security, encryption & compliance archiving
• The Skeptic European sovereignty
• The Small Firm Owner Security, encryption & compliance archiving
• The Small Firm Owner European sovereignty