Cloud Storage & File Sharing
Nextcloud Files (Nextcloud Hub)
EU-Made Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Nextcloud GmbH · nextcloud.com
Compare with Microsoft OneDrive for Business → Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Nextcloud Files (Nextcloud Hub) at a glance
- Vendor
- Nextcloud GmbH
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan
- Not stated on the vendor’s pages as of 1 Nov 2026
- Panel verdict
- The AI panel rates Nextcloud Files (Nextcloud Hub) 4/5, the mean of 6 judges. Persona-weighted totals run from 7.2 to 7.9. how scores are made
- As of
- Vendor pages captured 1 Nov 2026; evaluated by the panel 1 Nov 2026. all sources
Nextcloud Files (Nextcloud Hub) alternatives, European ones first →
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Persona-weighted totals run from 7.2 to 7.9. It is strongest at sharing and collaboration, scored 8 to 9, where judges credit enforced link passwords and expiry, hide-download, video verification, watermark-protected secure view, File Drop uploads into end-to-end encrypted folders and a virtual data room; sovereignty holds at 8, with a published subprocessor list naming locations and transfer mechanisms while files stay on the customer's own infrastructure. It is weakest at pricing transparency, 6 to 7: tiers are public — Standard starting at 100 users for 71.29€/user/year, Premium at 104.99€/user/year, Ultimate at 204.75€/user/year, net excluding VAT — but the bench found no public prices for the separately purchasable optional components and no public information on storage included or the minimum contract term. Judges genuinely split on that criterion and on portability and integrations, 7 to 8: higher scores weigh self-hosted open-source exit paths, lower ones note community answers that shares cannot generally be re-created on another system.
Speaks for it
- Link sharing carries enforced passwords, expiration, hide-download, watermark-protected secure view, video verification and a virtual data room with audit log
- End-to-end encryption is folder-level with user-held 12-word mnemonics, a published whitepaper, a zero-knowledge server and an optional offline master recovery key
- Fully open-source code runs self-hosted on-premises, in the cloud or hybrid, keeping files on infrastructure the customer chooses
- The vendor publishes its subprocessor list with names, locations and transfer mechanisms
- Documented migration paths cover Microsoft 365, Google Workspace, Box, Dropbox and DRACOON, with a dedicated migration service
Held against it
- The bench found no public prices for the separately purchasable optional components, nor public information on storage included or the minimum contract term
- Subscriptions carry a stated minimum of 100 users, above the headcount of smaller teams
- A captured community answer states a lost 12-word end-to-end encryption mnemonic cannot be recovered
- Community answers state shares cannot generally be re-created on another system and the user migration app must be installed before export works
- Compliance documents and certifications are stated to cover Nextcloud Enterprise only, not the community edition
Best for
- You operate your own servers — or contract a hosting partner — and want files on infrastructure you choose
- You exchange confidential documents with outside parties and need enforced passwords, expiry, watermarking and video verification on links
- You are migrating from Microsoft 365, Google Workspace, Box, Dropbox or DRACOON and want documented migration paths and open APIs
- Your organisation sits at or above the 100-user subscription minimum and can budget from published per-user tier prices
Avoid if
- You are a team below the stated 100-user subscription minimum
- Your work depends on a virtual drive for large datasets — a community answer notes the desktop client must be running for it, and the bench found no public figures on block-level or delta sync
- You need SIEM streaming or legal hold — the bench found no public information, and a community answer states the audit app cannot log directly to syslog
The scores
| Criterion | Panel median |
|---|---|
| Sync, clients & file access | 3.5 of 5 |
| Sharing & external collaboration | 4 of 5 |
| Encryption, key custody & recovery | 4 of 5 |
| Administration, audit & governance | 3.5 of 5 |
| Export, API & self-hosting | 4 of 5 |
| European sovereignty | 4 of 5 |
| Pricing transparency | 3 of 5 |
Sync, clients & file access
Show reasoningHide reasoning
How this is scored
How files reach the people who work with them: desktop clients for Windows, macOS and Linux, files on demand (virtual drive) and selective sync, offline access, mobile apps with camera upload and offline folders, a web interface, block-level or delta sync for large files, sync of folders outside the main folder, file size limits, preview of common formats, full-text search, and access through open protocols (WebDAV, SFTP, S3) or a mounted network drive.
0 — Not a file storage or sync product; files cannot be stored and synced with it.
3 — A web interface and apps for some platforms to upload and download files; desktop sync, files on demand, offline access and limits are basic or not described.
5 — Desktop sync clients for Windows and macOS, files on demand or selective sync, mobile apps with offline files and camera upload, a web interface with previews, file size limits stated, and search by file name.
8 — Clients for Windows, macOS and Linux, a virtual drive with files on demand, block-level or delta sync documented, full-text search inside documents, access via WebDAV, SFTP or S3, large-file handling stated, and LAN sync or a performance figure for big folders.
10 — File access that a whole organisation runs on: every platform covered with feature parity stated, sync conflicts and their resolution documented, open protocols and a mountable drive on every desktop, search across content and metadata with OCR, and sync behaviour and limits published in technical documentation.
The IT Lead
Sync clients for Windows, Linux and Mac plus Android and iOS, with automatic photo upload, selective sync and a virtual drive based on Dokan that keeps every file visible without holding it locally, are all documented, and full-text search runs on ElasticSearch or Solr with files reachable through a WebDAV API. We found no public information on block-level or delta sync, on large-file handling or on any LAN sync or performance figure, which for our CAD folders is the difference between very good and complete. 1 2 3 7 8 13
The Data Protection Officer
Sync clients exist for Windows, macOS and Linux as well as Android and iOS, with automatic upload of pictures and videos and synchronisation of selected files and folders; a virtual drive built on Dokan keeps files visible whether or not they are held locally, offline-cached copies remain usable, full-text search runs on ElasticSearch or Solr, and files are reachable through the documented WebDAV API. We found no public information on block-level or delta sync, file size limits, or LAN sync and performance figures for large folders. 1 2 3 8 13
The Architecture Practice Partner
Sync clients for Windows, Linux and Mac plus Android and iOS, automatic camera upload, and synchronisation of selected files and folders are confirmed, and a Dokan-based virtual drive keeps every file visible on demand so laptops do not fill — my CAD software keeps a drive letter, though a community answer notes the client must be running for it. WebDAV access and a full-text search engine with ElasticSearch or Solr backends are documented, and external storage from Windows network drives to S3 can be mounted. I found no public information on block-level sync for multi-gigabyte BIM models, on file size limits, or on LAN sync, which is exactly the missing piece for us. 1 2 3 7 8 13
The Tax Adviser
Sync clients for Windows, Linux and Mac plus Android and iOS with automatic photo and video upload and selective sync are documented, a virtual drive keeps files visible on demand, full-text search runs on ElasticSearch or Solr, and WebDAV, SFTP and S3 access is described. We found no public information on block-level or delta sync, file size limits, or large-folder performance figures, which keeps it short of the top band. 1 2 3 7 8 13
The Agency Producer
Sync clients for Windows, Linux and Mac plus Android and iOS are documented, with automatic upload of pictures and videos, selective folder sync, multiple accounts, and a virtual drive that keeps files visible whether or not they are local. Full-text search on ElasticSearch or Solr and external storage via WebDAV, S3 and SFTP are documented too. For my 100-gigabyte footage transfers, we found no public information on block-level or delta sync, large-file handling or any performance figure. 1 2 3 7 13
The Skeptic
Clients for Windows, Linux and Mac plus Android and iOS with automatic photo upload and selective sync are documented, a virtual drive keeps files visible on demand, and full-text search with ElasticSearch and a WebDAV API sit on the developer pages. What the captured pages never state is block-level or delta sync, file size limits, or a performance figure for large folders — precisely the technical depth an organisation with big data sets needs before committing. 1 2 3 8 13
Sharing & external collaboration
Show reasoningHide reasoning
How this is scored
How files are shared inside the team and with people outside it: shared team folders or spaces, share links with password, expiry, download limits and view-only or no-download mode, upload links (file requests) for customers, guest or external user accounts, link and access reports, notifications, watermarking, comments and file locking, editing of office documents in the browser together, large-file transfer, and an Outlook or Teams add-in for sending links instead of attachments.
0 — Files cannot be shared with anyone else.
3 — Folders and files can be shared with other users and by public link; link controls, upload links and external accounts are basic or not described.
5 — Shared team folders, share links with password and expiry, view-only links, upload links for external people, permissions per folder (view, edit), notifications on changes, and office documents opened and edited in the browser.
8 — Link policies the administrator sets (forced expiry, passwords, domains allowed), download limits and no-download view, watermarking, guest accounts with their own permissions, an access log per share, file locking and comments, co-editing documented with the editor named, and an Outlook or Teams add-in.
10 — External collaboration at the level of a data room: granular rights including print and download control on shared files, revocation that also reaches copies already opened, recipient identity verification, a complete record of who opened and downloaded what, and end-to-end encryption kept intact when sharing externally and when editing.
The IT Lead
This is close to data-room territory: watermark-protected secure view with downloads disabled, video verification of a recipient before a share opens, enforced passwords and expiry dates, upload links, a guests app, file locking, co-editing with Collabora Online, and an Outlook add-in with Teams integration are all documented, and end-to-end encrypted folders can be shared with other users. The one gap I can see is end-to-end encryption held while a document is being edited in the browser; the encrypted-sharing case is shown, the editing case is not. 1 2 5 9 16
The Data Protection Officer
Sharing is documented at data-room level: link protection with enforced passwords and expiration, hide-download and one-time passwords, a watermark-protected secure view that disables downloads, a virtual data room with DRM and audit log, File Drop upload links including uploads into end-to-end encrypted folders, guest accounts, file locking, co-editing with Collabora Online, and Outlook and Teams add-ins; video verification even checks the recipient's identity before access is granted. We found no public information on numeric download limits, comments, or revocation that reaches copies already opened. 1 2 5
The Architecture Practice Partner
Password-protected links with enforced expiration, hide-download, video verification of the recipient, a watermark-protected secure view and a virtual data room with DRM and audit log reach data-room level, while File Drop and file requests let external structural engineers hand over folders without an account. Guest accounts that set their own password, file locking, co-editing with Collabora Online named, and an Outlook secure sharing add-in are documented. A captured forum discussion describes a share link as unprotected at the moment an email address is entered, with the password applied only afterwards — a workflow detail I would want tightened before relying on it for tender documents. 1 2 9 16
The Tax Adviser
This is what my practice needs: File Drop upload links with password, expiry and a unique link per customer, even into end-to-end encrypted folders, alongside enforced passwords and expiry, hide-download, watermark-protected secure view, video verification before access, a data room with audit log, guest accounts, file locking, co-editing with Collabora named, and an Outlook add-in. We found no public information on per-link download limits, comments, or revocation that reaches copies already opened. 1 2 5 9
The Agency Producer
This is close to what my agency needs: password-protected links with expiration and one-time passwords, File Drop for customer uploads with per-customer links, hidden download, watermark-protected secure view, guest accounts, file locking, video verification of recipients, and co-editing with Collabora Online named, plus an Outlook add-in and a virtual data room with audit log and DRM. Slack integration is listed only for the Ultimate subscription. A community answer notes that a share email can go out before a password is set, so I would brief staff to password links before sharing. 1 2 5 9 16
The Skeptic
Enforced passwords and expiry on links, hide-download, watermark-protected secure view, guest accounts, file locking, co-editing with Collabora Online named, an Outlook add-in, video verification and a virtual data room with DRM and audit log are all documented, and end-to-end encryption is documented to survive sharing a folder. One captured community exchange describes a share email going out immediately with the link unprotected until a password is set afterwards — a buyer should test that workflow before trusting the link governance story. 1 2 5 16
Encryption, key custody & recovery
Show reasoningHide reasoning
How this is scored
How the files are protected and restored: encryption in transit and at rest, client-side or end-to-end encryption and whether it covers all folders, sharing and office editing, who holds the keys and what happens when a user loses theirs, customer-managed keys, two-factor authentication and single sign-on, version history and its length, a recycle bin, restore of a whole folder or account to a point in time after ransomware, ransomware detection, malware scanning, an independent security audit or penetration test, a bug bounty, and certifications (ISO 27001, SOC 2, BSI C5) with their scope. Where the data is stored is scored under sovereignty.
0 — Files are stored without any stated encryption and no account protection beyond a password.
3 — Encryption is mentioned and a recycle bin or version history exists; key custody, two-factor, restore after ransomware and audits are basic or not described.
5 — TLS in transit and AES encryption at rest stated, two-factor authentication, version history with its length stated, a recycle bin, the restore of deleted or overwritten files, and a security page naming at least one certification or audit.
8 — Client-side or end-to-end encryption documented with who holds the keys (or customer-managed keys), a whitepaper describing the scheme, single sign-on (SAML), restore of a folder or account to a point in time, ransomware detection or recovery documented, an independent audit or penetration test named, and ISO 27001, SOC 2 or BSI C5 stated with scope.
10 — Security that can be verified: zero-knowledge end-to-end encryption by default that stays on for sharing and editing, the cryptography published and externally audited with the report available, key recovery for organisations documented without the provider gaining access, open-source clients or a public bug bounty, and certifications published with their scope and date.
The IT Lead
End-to-end encryption with a published whitepaper, a zero-knowledge server, a 12-word user mnemonic, an optional offline master recovery key for the administrator and HSM support, enforceable two-factor, an ANSSI CSPN certificate, ISO 27001 and a 10,000 US dollar bug bounty on fully open-source code is security I can actually verify. My ransomware worry is only half answered: individual file versions can be restored and File Drop uploads are virus-scanned, but we found no public information on rolling a whole share back to a point in time, on ransomware detection, or on how long versions are kept. 1 2 4 5 6 7 18
The Data Protection Officer
Key custody is documented in writing: end-to-end encryption runs as a folder-level option on the clients with user-held keys from a 12-word mnemonic, a zero-knowledge server, a whitepaper inviting scrutiny of the cryptography, an optional offline master recovery key for administrators and HSM support on request, alongside TLS in transit, AES-256 or stronger at rest, enforceable two-factor including FIDO2, and ISO 27001, BSI IT-GRUNDSCHUTZ and an ANSSI CSPN certification stated for the Enterprise edition with their scope. The end-to-end encryption is opt-in per folder rather than default, the captured pages state that the key cannot be recovered if the mnemonic is lost, and we found no public information on ransomware recovery or restoring a whole account to a point in time. A $10,000 bug bounty program is documented. 1 2 5 6 7 18
The Architecture Practice Partner
End-to-end encryption is documented as zero-knowledge and folder-level from desktop client 3.0, with a published whitepaper inviting scrutiny of the cryptographic approach, a twelve-word mnemonic held by the user, an optional offline master recovery key for administrators, and pluggable key handling with HSM or external key server support. TLS, AES-256 or stronger, server-side encryption, enforced two-factor with FIDO2 and WebAuthn, ISO 27001, BSI IT-GRUNDSCHUTZ and an ANSSI CSPN certification plus a $10K bug bounty give a verifiable picture — though the compliance documents cover the Enterprise offering only. I found no public information on ransomware detection or restoring a whole account to a point in time, and a community answer states a lost mnemonic cannot be recovered, so key discipline in the office is on us. 1 2 5 6 7 18
The Tax Adviser
End-to-end encryption is opt-in at folder level rather than default, but the server is documented as zero-knowledge, keys sit with the user as a 12-word mnemonic with an optional offline master recovery key for administrators, and a whitepaper invites scrutiny of the cryptography; TLS and AES-256, enforceable two-factor including FIDO2, SAML single sign-on, a $10K bug bounty on HackerOne, and ISO 27001, BSI IT-GRUNDSCHUTZ and an ANSSI CSPN certification are stated, with the compliance documents covering the Enterprise edition only. We found no public information on ransomware detection or restoring a whole account to a point in time. 1 2 4 5 6 18
The Agency Producer
TLS in transfer and AES-256 at rest are stated, and end-to-end encryption is documented with a whitepaper, a zero-knowledge server claim, folder-level sharing, a 12-word mnemonic that by design cannot be recovered by anyone else, and an optional offline admin master recovery key with HSM support on request. Two-factor with TOTP, WebAuthn and FIDO2, SSO/SAML, a 10,000 USD bug bounty on HackerOne, and CSPN certification by ANSSI are stated; we found no public information on version history length, a recycle bin, or ransomware recovery, and the compliance documents cover Nextcloud Enterprise only. 2 5 6 7 18
The Skeptic
End-to-end encryption is documented as a folder-level client option with a whitepaper, a zero-knowledge server and a 12-word mnemonic the user holds — and the captured pages state plainly that a lost mnemonic cannot be recovered, though administrators can create an offline master recovery key. TLS, server-side AES-256, enforcable two-factor including FIDO2, SAML SSO, a $10K bug bounty on HackerOne, fully open-source code and ANSSI CSPN, ISO/IEC 27001 and BSI IT-GRUNDSCHUTZ are listed, with the stated caveat that the compliance documents cover Nextcloud Enterprise only. Version history and restore exist but its length is not stated, and we found no public information on point-in-time restore after ransomware on these pages. 2 4 5 6 7 18
Administration, audit & governance
Show reasoningHide reasoning
How this is scored
What an administrator controls: an admin console with users, groups and roles, provisioning through Entra ID, Google or LDAP with SCIM, quotas per user or team, an audit log of logins, shares and file actions with export, retention policies and legal hold, data loss prevention or classification, device management with remote wipe and unlinking, policies for external sharing, account transfer when someone leaves, team folders that belong to the company rather than to a user, and reports on storage and sharing.
0 — No administration: every account is independent and nobody can manage the team's users or files.
3 — A team plan with an administrator who can invite and remove users; roles, audit log, retention and device controls are basic or not described.
5 — An admin console with users, groups and admin roles, quotas, an activity or audit log, policies for external sharing, file transfer when a user leaves, company-owned team folders, and remote unlinking of lost devices.
8 — Provisioning via SCIM or a directory (Entra ID, Google, LDAP), an exportable audit log covering logins, shares and file actions, retention policies and legal hold, remote wipe, IP or device restrictions, data classification or DLP, and integration with a SIEM.
10 — Governance a regulated organisation can sign off: granular delegated administration per department or tenant, retention and legal hold with eDiscovery export, DLP with content inspection, every admin and user action logged and streamed to a SIEM, and the audit log retention and completeness stated.
The IT Lead
Provisioning from Active Directory including Azure AD, LDAP and SAML single sign-on, teams whose files are owned by the team rather than the person, storage quotas, ownership transfer when someone leaves, remote wipe that works even on unmanaged laptops, retention rules and admin access rules by location, group or file type cover essentially my whole checklist. An audit trail can be written to its own log file for the auditor, though a community answer on the help forum states direct syslog streaming is not possible, and we found no public information on SCIM provisioning, legal hold or SIEM export. 1 2 3 7 19
The Data Protection Officer
An administrator gets user directories through LDAP, Active Directory and Azure AD with SSO/SAML, configurable data retention rules, automatic classification labels, File Access Control rules by location, group, file type and tags, ownership transfer of files and folders, per-team storage quotas with team-owned storage, remote wipe even on unmanaged devices, and a full audit trail in a separate audit log with a monitoring API. We found no public information on legal hold, SCIM provisioning, eDiscovery export or SIEM streaming, and a captured community answer states the admin audit log cannot be written to syslog directly. 1 2 3 19
The Architecture Practice Partner
Active Directory, Azure AD and LDAP user directories, a full audit trail configurable to its own log file, data retention rules, automatic classification labels, location- and group-based file access control, configurable storage quotas per team and remote wipe even on unmanaged devices are all documented, and ownership transfer of files when someone leaves is listed — that keeps project folders with the practice. What holds me back: I found no public information on SCIM provisioning, legal hold, or export of the audit log to a SIEM, and a community answer states the audit app cannot log directly to syslog. That is governance enough for a 25-person practice, short of what a bank would sign off. 1 2 3 7 19
The Tax Adviser
Provisioning from LDAP, Active Directory and Azure AD, configurable retention rules with tag-based control, automatic classification labels, File Access Control by location, group and file type, remote wipe, ownership transfer when someone leaves, team folders with quotas, and a full audit log that can be written to its own file are all documented. We found no public information on SCIM, legal hold or streaming to a SIEM, and a captured community answer states the audit app cannot log directly to syslog, which keeps this short of the top band. 1 2 3 7 19
The Agency Producer
Provisioning through LDAP, Active Directory and AzureAD, SSO/SAML, per-team storage quotas, configurable retention rules, automatic classification labels, File Access Control rules by location, group and file type, remote wipe even on unmanaged devices, ownership transfer when someone leaves, and company-owned team folders are all documented, with an admin audit log file configurable over the command line. A community answer describes logging that audit app directly to syslog as not possible; we found no public information on SCIM, an exportable audit log, legal hold or SIEM streaming. 1 2 3 7 19
The Skeptic
Directory provisioning from Active Directory, Azure AD and LDAP, a full audit trail written to a separate configurable log file, data retention rules, admin access rules by location, group and file type, automatic classification labels, team storage quotas and remote wipe without MDM are all documented. But we found no public information on legal hold, SCIM or SIEM streaming on the captured pages, and one community answer states that logging the admin audit app directly to syslog is not possible — so the SIEM story needs verification before a regulated buyer signs off. 2 3 7 19
Export, API & self-hosting
Show reasoningHide reasoning
How this is scored
Whether the files and their structure can leave and connect: a bulk export or download of all data with folders and versions, open protocols (WebDAV, S3, SFTP) usable for migration, a documented REST API and SDKs, webhooks, migration tools from Dropbox, Google Drive, OneDrive or a file server, integrations with office suites, Microsoft 365 and Teams, Slack, CRM and project tools, an app marketplace, open-source code, a self-hosted or on-premise edition, and deletion of data on termination.
0 — Files can only be downloaded one by one; no export, API or migration path.
3 — Files can be downloaded in bulk or as an archive; an API, migration tools, integrations and self-hosting are basic or not described.
5 — A documented API, bulk download of all files with the folder structure, a migration path from at least one named provider, integrations with named office and collaboration tools, and what happens to data after cancellation stated.
8 — A REST API with SDKs and webhooks, open-protocol access (WebDAV, S3 or SFTP) that makes migration tool-independent, migration tools in both directions or a supported migration service, an app marketplace, a self-hosted or on-premise edition, and deletion on termination under stated terms.
10 — The customer owns the data end to end: open-source code under a named licence that runs fully self-hosted with feature parity stated, a complete export including versions, shares and permissions in a documented format, and the deletion of every copy and backup on termination documented.
The IT Lead
Everything runs self-hosted on our own hardware with fully open-source code, a RESTful OCS API, a WebDAV API and an app store of more than 600 apps, and there is a dedicated migration service from Microsoft 365, SharePoint, OneDrive, Box, Dropbox and DRACOON as well as for legacy file servers and NAS systems — which is precisely my server-retirement project. Two caveats from the captured forum answers: shares cannot generally be re-created on another system, and the user migration tool must first be installed as an app before it can export anything. 2 3 7 8 21 22
The Data Protection Officer
The code is fully open source and the product is documented to run self-hosted on-premises, in the cloud or hybrid; a documented REST and WebDAV API, external storage via SMB, FTP/SFTP, S3 and WebDAV, an app store with more than 600 applications, and a dedicated migration service from Microsoft 365, Google Workspace, Box, Dropbox and DRACOON plus user migration between instances are all on the record. The captured pages state there is no general way to re-create shares on another system and that the user migration app must be installed before export works; we found no public information on SDKs, webhooks, or the deletion of data on termination. 2 3 7 8 21 22
The Architecture Practice Partner
The code is fully open source and self-hostable — Docker, VM or our own cluster — with WebDAV and S3 access that makes any exit migration tool-independent, a REST API, and an app store of 600+ applications. Migration paths from Microsoft 365, Dropbox, Box, DRACOON and legacy file servers are named, including a dedicated migration service and a user migration app for moving individual users between instances. Two real caveats from the captured discussions: there is stated to be no general way to re-create shares on another system, and the user migration tool must be installed separately before it can be used. 2 7 8 21 22
The Tax Adviser
The product is fully open source on GitHub and runs self-hosted on the customer's own infrastructure, WebDAV, S3 and SFTP make migration tool-independent, a REST (OCS) API and a 600-plus app store exist, and a dedicated migration service covers Microsoft 365, Google Workspace, DRACOON, Box, Dropbox and ownCloud, with a user migration app for moves between instances. We found no public information on SDKs, webhooks or deletion terms on termination, and captured community answers state that shares cannot generally be re-created on another system and that the user migration app must be installed first. 2 7 8 9 21 22
The Agency Producer
The software is fully open source and runs self-hosted on-premises, in the cloud or hybrid, with an OCS REST API, a WebDAV API, an app store of 600-plus applications, and a dedicated migration service with a free assessment from Microsoft 365, SharePoint, OneDrive, Teams, Exchange, DRACOON, Box, Dropbox, Google Workspace and legacy file servers. A user migration app moves individual users between instances, though a community answer says shares cannot generally be re-created on another system and the app has to be installed first; we found no public information on SDKs, webhooks, or data deletion on termination. 3 7 8 21 22
The Skeptic
The product is fully open source and self-hosted by design, with a RESTful API, a WebDAV API, an app store of 600+ apps and migration paths from Microsoft 365, Google Workspace, Box, Dropbox, DRACOON and ownCloud — the last with a dedicated migration service covering users, groups, guests and OAuth2 tokens. The catch for anyone planning an exit: a captured community answer says there is no general way to import or re-create shares on another system, and the user migration app must be installed first because it is not present in settings by default. We found no public information on SDKs, webhooks or data deletion on termination on these pages. 3 7 8 9 21 22
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where files, metadata and backups are stored and processed, and who the subprocessors are (data centres, CDN, email that carries share notifications, support desk, payment, office editing). Independently sourced by the sovereignty pipeline; files hold the company's documents and personal data, so the whole chain counts, not only the storage. End-to-end encryption with keys only the customer holds reduces what a foreign provider could hand over but does not change who the provider is. A self-hosted edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.
0 — Non-EU vendor and contracting entity, storage location unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but the storage location is unstated or non-EU and the subprocessors are not listed.
5 — EU storage available and an EU contracting entity or EU representative, but parts of the chain (account data, metadata, notifications, support, office editing, payment) run through non-EU providers without a stated safeguard, or the parent company is subject to non-EU disclosure laws.
8 — EU storage on named data centres, EU or EEA or Swiss contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, BSI C5, SOC 2) stated — or a self-hosted edition documented that keeps every file on the customer's own servers.
10 — Sovereign end to end and evidenced: European ownership, entity, storage and every subprocessor, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.
The IT Lead
The contracting party is Nextcloud GmbH of Stuttgart, commercial register HRB 227086 at AG München, it offers no hosting at all, and the self-hosted software is designed to send no user data back home — so our files sit on servers we choose, in Germany if we want. The published data-processing page lists every subprocessor with its country and transfer mechanism, and ISO 27001, BSI IT-Grundschutz and ANSSI CSPN are stated, though the captured pages note the compliance documents cover the Enterprise subscription only. A few listed subprocessors sit in the United States or the Republic of Korea under adequacy decisions or standard contractual clauses, so the wider chain is not European end to end. 3 6 9 10 11 12
The Data Protection Officer
The vendor-side chain is published with names and locations: Zammad and Hetzner in Germany for support and the portal, Collabora and Stalwart in the United Kingdom, Thinkfree in Korea and Postmark in the United States each with a stated transfer mechanism, and ISO 27001 and BSI IT-GRUNDSCHUTZ stated for the Enterprise edition. 3 6 9 10 12
The Architecture Practice Partner
Nextcloud GmbH is a German company with its seat in Stuttgart and a commercial register entry at AG München, publishes a data processing page listing subcontractors with their locations — mostly German, with stated transfer mechanisms for a US email provider and a Korean office-suite vendor — and documents a fully self-hosted open-source edition that keeps every file on our own servers, which for a Hamburg practice is the decisive fact. ISO 27001 is stated, though scoped to the Enterprise offering. It is not a zero call-home setup: mobile push notifications are forwarded through Google and Apple by default and the server reports configuration data for fourteen days, with documented alternatives such as unified push. 3 10 11 12
The Tax Adviser
The contracting entity is Nextcloud GmbH of Stuttgart, registered at AG München, which offers no hosting and states its employees never gain access to customer data — files stay on the customer's own servers; the vendor's own subprocessors for portal, support and licensing are listed with their locations and transfer mechanisms, a data processing disclosure is published, and ISO 27001 and BSI IT-GRUNDSCHUTZ are stated for the Enterprise edition. Not the top band: parts of the vendor's own chain run through providers in the United States and Korea, and the certifications are scoped to Enterprise with the hosting party responsible. 6 9 10 12
The Agency Producer
Subprocessors from Hetzner and Zammad in Germany to Collabora in the UK, Thinkfree in Korea and Postmark in the US are listed with locations and transfer mechanisms, a data processing page exists, and ISO 27001 and BSI IT-GRUNDSCHUTZ are stated. The vendor itself notes that certification depends on the hosting solution and is the hosting party's responsibility, so residency of customer files is whatever I make it. 3 9 10 11 12
The Skeptic
For the Enterprise subscription the vendor's own chain is disclosed subprocessor by subprocessor with locations and transfer mechanisms: mostly Germany (Hetzner, Zammad, Struktur, OpenProject, Open-Xchange) but also Postmark in the United States, Collabora and Stalwart in the United Kingdom and Thinkfree in Korea. That transparency plus a published data processing page and ISO/IEC 27001, BSI IT-GRUNDSCHUTZ and ANSSI CSPN is strong; it stops short of the top mark because parts of the vendor chain sit outside the EU under safeguards, and the push proxy and update server do call home — with documented alternatives. 1 3 6 9 10 12
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per user or per plan, storage included per user or pooled, the minimum number of users, what extra storage costs, which features (end-to-end encryption, SSO, audit log, longer version history, data residency, advanced admin) need a higher tier or an add-on, the free tier and its limits, lifetime offers and their terms, the self-hosted edition's licence and support, minimum term and VAT.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with users, storage or features is unclear.
5 — Business tiers are public with their price per user and storage included, but at least one commonly needed piece (extra storage, SSO, audit log, data residency, minimum users) is unpriced or "on request".
8 — Every tier priced publicly with its scaling rule (users, storage), extra storage and add-ons priced, minimum users and term stated, the self-hosted edition's licence and support cost stated, and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given team size, storage need and feature set, with every add-on, migration, support and overage fee and the cancellation and data-return terms published.
The IT Lead
The pricing page publishes net euro prices per user and year for Standard, Premium and Ultimate at the 100-user mark and again at the 200-user mark, states a 100-user minimum, and shows which features belong to which tier including support reaction times — so for our 180 people the subscription itself is budgetable from public pages. Optional components are described as separately purchasable but without prices, and we found no public information on storage allowances, add-on costs or a self-hosted licence cost beyond the subscription. 9
The Data Protection Officer
All three tiers are published with per-user annual prices — Standard starting at 100 users for 71.29€/user/year, Premium at 104.99€/user/year, Ultimate at 204.75€/user/year, with lower per-user prices shown at 200 users — a stated minimum of 100 users, prices net excluding VAT, and tier contents itemised down to which integrations, support reaction times and maintenance lifecycles sit in which plan. We found no public pricing for the separately purchasable optional components, larger deployments are directed to framework agreements, and we found no public information on storage included, the minimum contract term, or the terms of the free community edition. 9
The Architecture Practice Partner
Three enterprise tiers are public — Standard from 71.29€/user/year, Premium from 104.99€/user/year, Ultimate from 204.75€/user/year — with 200-user prices also listed, a stated minimum of 100 users, and prices described as "in Euro per year and net/excl. VAT"; for a 25-person practice the 100-user minimum is the floor, not our headcount. Optional components "can be separately purchased" without figures, the phone support option and Global Scale carry no prices, and I found no stated minimum contract term or published price for support on the community edition. The subscription floor is computable from the public page; the real total also depends on the hosting we run ourselves. 9
The Tax Adviser
Three tiers are public with prices quoted exactly as Standard starting at 100 users for 71.29€/user/year, Premium at 104.99€/user/year and Ultimate at 204.75€/user/year, alongside 200-user prices of 53.17€, 81.99€ and 183.75€, prices in Euro per year net/excl. VAT, a stated minimum of 100 users, and a feature matrix showing which tier carries Assistant, Flow, clustered support or SLA on fixes. We found no public information on what the separately purchasable optional components cost or on the minimum contract term. 9
The Agency Producer
The tiers are public and quotable: Standard starting at 100 users for 71.29€ per user per year, Premium for 104.99€ and Ultimate for 204.75€, dropping to 53.17€, 81.99€ and 183.75€ at 200 users, in Euro per year and net excluding VAT, with a stated 100-user minimum and a clear feature map per tier. As a 30-person shop I choke on that 100-user floor, and the optional components are described as separately purchasable without prices; we found no public information on extra storage costs, minimum term, or the licence and support cost of the self-hosted edition beyond these subscriptions. 9
The Skeptic
Tiers are public: Standard from 100 users at 71.29€/user/year, Premium at 104.99€/user/year and Ultimate at 204.75€/user/year, with 200-user steps of 53.17€, 81.99€ and 183.75€, prices stated as net/excl. VAT and a stated minimum of 100 users. Nowhere on the captured pricing pages could I find how much storage each user actually gets, what the "optional components" cost, or the minimum term — so the real annual cost for a given team size and storage need is not computable from public pages alone. 9
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined | — | uncited Report an error |
| Hosting options | Not determined ⚠ unverified | — | uncited Report an error |
| Open source | Not determined ⚠ unverified | — | uncited Report an error |
| Data processing agreement | Not determined | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Nextcloud Files (Nextcloud Hub)
Is Nextcloud Files (Nextcloud Hub) European?
Yes. whats-best.ai classifies Nextcloud Files (Nextcloud Hub) as EU-Made.
Where does Nextcloud Files (Nextcloud Hub) store data?
Not stated on the vendor’s pages as of 1 Nov 2026.
Does Nextcloud Files (Nextcloud Hub) have a free plan?
Not stated on the vendor’s pages as of 1 Nov 2026.
What are the best alternatives to Nextcloud Files (Nextcloud Hub)?
As of 1 Nov 2026, the panel rates Tresorit (3.5/5), Proton Drive (3/5) and DRACOON (3/5) highest among the other 13 Cloud Storage & File Sharing products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Tresorit (UK / wider Europe). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Nextcloud Files (Nextcloud Hub) alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 1 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Open source, Legal entity, Hosting options. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 10 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 integrations fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 legal fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (24)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage (Nextcloud Files) nextcloud.com Checked 1 Nov 2026 Details →
- 2 Features page nextcloud.com Checked 1 Nov 2026 Details →
- 3 Features page (Enterprise subscription) nextcloud.com Checked 1 Nov 2026 Details →
- 4 Security / trust page nextcloud.com Checked 1 Nov 2026 Details →
- 5 Features page (encryption and hardening) nextcloud.com Checked 1 Nov 2026 Details →
- 6 Security / trust page (compliance) nextcloud.com Checked 1 Nov 2026 Details →
- 7 Features page (migration) nextcloud.com Checked 1 Nov 2026 Details →
- 8 API and developer documentation nextcloud.com Checked 1 Nov 2026 Details →
- 9 Pricing page nextcloud.com Checked 1 Nov 2026 Details →
- 10 Legal notice nextcloud.com Checked 1 Nov 2026 Details →
- 11 Privacy policy nextcloud.com Checked 1 Nov 2026 Details →
- 12 Data processing agreement (dpa) nextcloud.com Checked 1 Nov 2026 Details →
- 13 Sync, clients & file access — found from sitemap help.nextcloud.com Checked 1 Nov 2026 Details →
- 14 Sync, clients & file access — found from sitemap help.nextcloud.com Checked 1 Nov 2026 Details →
- 15 Sharing & external collaboration — found from sitemap help.nextcloud.com Checked 1 Nov 2026 Details →
- 16 Sharing & external collaboration — found from sitemap help.nextcloud.com Checked 1 Nov 2026 Details →
- 17 Encryption, key custody & recovery — found from sitemap help.nextcloud.com Checked 1 Nov 2026 Details →
- 18 Encryption, key custody & recovery — found from sitemap help.nextcloud.com Checked 1 Nov 2026 Details →
- 19 Administration, audit & governance — found from sitemap help.nextcloud.com Checked 1 Nov 2026 Details →
- 20 Administration, audit & governance — found from sitemap help.nextcloud.com Checked 1 Nov 2026 Details →
- 21 Export, API & self-hosting — found from sitemap help.nextcloud.com Checked 1 Nov 2026 Details →
- 22 Export, API & self-hosting — found from sitemap help.nextcloud.com Checked 1 Nov 2026 Details →
- 23 Self-hosting / on-premises installation docs — found from the homepage nextcloud.com Checked 1 Nov 2026 Details →
- 24 Code repository (open-source licence) — found from the homepage github.com Checked 1 Nov 2026 Details →