Data processing agreement (dpa) — Nextcloud Hub (Groupware & Office)

Cited by

Facts read from this source

• Entity Report an error

  “Data processing by Nextcloud GmbH for Nextcloud Enterprise customers”

• Hosting model Report an error

  “We do not provide hosting services and consequently do not act as data controller for personal data processed on customer-operated or third-party hosted Nextcloud instances.”

• Customer data access Report an error

  “We have no access to any data customers process within their Nextcloud installations.”

• DPA scope Report an error

  “The following only applies to Nextcloud Enterprise customers:”

• Processing activities count Report an error

  “There are ten specific circumstances in which we may collect personal data, outlined below.”

• Security newsletter retention Report an error

  “When admins provide their names and email addresses to subscribe to the Nextcloud security update newsletter, including log.”

• Procurement correspondence retention Report an error

  “7-10 years statutory retention periods under the German Fiscal Code (AO) and German Commercial Code (HGB) for relevant business correspondence.”

• Support tickets retention Report an error

  “Support tickets 3 years after contract termination. Admins can request Nextcloud to delete all support tickets older than 13-15 months.”

• Diagnostic data retention Report an error

  “As long as the contract exists. IP addresses collected by the Support Portal are stored for 7 days.”

• Webserver log retention Report an error

  “7 days in webserver access log, only processed in RAM memory before aggregation for analytics”

• Cookie expiry Report an error

  “Maximum expiry date for cookies in visitor’s browser: 30 days.”

• Update log retention Report an error

  “14 days.”

• Push notification retention Report an error

  “Until the app is deinstalled or the account removed from the device.”

• Dsar log retention Report an error

  “2 years after the request.”

• Usage survey data Report an error

  “Server instance details (version, memcache used, status of locking/previews/avatars)”

• Support app data Report an error

  “subscription key”

• System info report privacy Report an error

  “System Information reports do not collect the ID of the Nextcloud instance, or passwords/secrets/tokens and hostnames.”

• Push proxy no content access Report an error

  “It therefore cannot decrypt the content of push notifications.”

• Push proxy logging Report an error

  “No notification content is logged or stored in persistent form.”

• Transfer mechanism disclosure Report an error

  “Storage locations outside the EU/EEA are shown together with the applicable transfer mechanism.”

• Ac pm Report an error

  “AC PM, LLC Email content United States (adequacy decision under Art. 45 GDPR, limited to organisations certified under the EU-US Data Privacy Framework) Email delivery service (Postmark)”

• Hetzner Report an error

  “Hetzner Online GmbH Name, email address Germany Hosting of portal.nextcloud.com”

• Odoo Report an error

  “Odoo SA Name, email address (commercial and admin) European Union Provision of security information and updates”

• Openproject Report an error

  “OpenProject GmbH Company name, name, email address, number of licenses, duration of contract, support data Germany Provision of licenses and support services for OpenProject”

• Open xchange Report an error

  “Open-Xchange AG Company name, name, email address, number of licenses, duration of contract, support data Germany Provision of licenses and support services for Dovecot Pro”

• Sendent Report an error

  “Sendent BV Company name, name, email address, number of licenses, duration of contract, support data Netherlands Provision of licenses and support services for MS Outlook Add-in, MS Exchange Connector, MS Teams Integration”

• Stalwart Report an error

  “Stalwart Labs Ltd. Company name, name, email address, number of licenses, duration of contract, support data United Kingdom (adequacy decision under Art. 45 GDPR, renewed 19 December 2025 and valid until 27 December 2031) Provision of licenses and support services for Stalwart”

• Struktur Report an error

  “Struktur AG Company name, name, email address, number of licenses, duration of contract, support data Germany Provision of licenses and support services for the Nextcloud Talk High Performance Back-end and SIP bridge”

• Thinkfree Report an error

  “Thinkfree Inc. Company name, name, email address, number of licenses, duration of contract, support data Republic of Korea (adequacy decision under Art. 45 GDPR of 2021, confirmed on review 23 July 2026) Provision of licenses and support services for Thinkfree Office”

• Xwiki Report an error

  “XWiki SAS Company name, name, email address, number of licenses, duration of contract, support data France Provision of licenses and support services for XWiki”

• Zammad Report an error

  “Zammad GmbH Name, email address, support tickets Germany Provider of the Nextcloud support portal”

• Zammad log retention Report an error

  “Nextcloud’s sub-processor Zammad retains the Zammad Production Log with technical data relating to the use of the Support portal for 42 days.”

• Copyright Report an error

  “© 2016 - 2026 Nextcloud GmbH”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer European sovereignty
• The IT Administrator European sovereignty
• The IT Service Provider Mail, domains & deliverability
• The IT Service Provider European sovereignty
• The Public Sector IT Lead Mail, domains & deliverability
• The Public Sector IT Lead Security, encryption & compliance archiving
• The Public Sector IT Lead European sovereignty
• The Skeptic Mail, domains & deliverability
• The Skeptic European sovereignty
• The Small Firm Owner Migration, open standards & exit
• The Small Firm Owner European sovereignty