Security / trust page — Nextcloud Talk

Cited by

Facts read from this source

• No vendor access to data Report an error

  “Nextcloud is fundamentally designed so that Nextcloud GmbH does not have any access to customer data, removing the need for a data processor or controller agreement under the GDPR or similar legislation.”

• Compliance kit Report an error

  “We offer our customers both a high level 12-step compliance checklist overview as well as hands-on, concrete and extensive over-20-page administrator manual, plus direct consultation and a number of compliance tools and apps.”

• Compliance apps Report an error

  “Configurable imprint and privacy links for your login page Data Request app to allow users to request data deletion or modification from their user settings Delete Account app to allow users to delete their account Terms of Service app that only gives access to Nextcloud after users read and agreed to terms (handles updated terms as well)”

• Encryption Report an error

  “Nextcloud uses industry-standard SSL/TLS encryption for data in transfer. Data at rest in storage can be encrypted using a default military grade AES-256 encryption with server-based or custom key management. Optionally and on a per-folder base data can be end-to-end encrypted on the client with the server assisting in sharing and key management using a Zero-Knowledge model.”

• Encryption hsm support Report an error

  “Seamless integration and ease of use with key features like offline recovery keys, auditing and HSM support make Nextcloud Encryption capabilities leading in the industry.”

• File access control Report an error

  “Criteria include IP address ranges, group membership, file type and size, time and more. Data retention can be controlled as well, enabling administrators to limit the lifetime of certain files.”

• Audit logs Report an error

  “A full auditing system logs all user actions, enabling fully compliant usage of file sync and share.”

• Monitoring tools Report an error

  “Systems can be monitored using the web interface or through monitoring and systems intelligence tools like OpenNMS, Splunk, Nagios or others.”

• Enterprise integration Report an error

  “Its powerful LDAP and storage integration seamlessly fits with existing user directories, Windows Network Drive, NFS and Sharepoint storage solutions.”

• Server location Report an error

  “Federal data protection and GDPR-compliant, protecting data sovereignty, keep the server location in your country.”

13 facts read from this page are not shown because they could not be confirmed on the page as captured.