Skip to main content
Nextcloud logo

Nextcloud

Verified

“German-owned, self-hosted: sovereignty you control yourself.”

Operating HQ
πŸ‡©πŸ‡ͺ Berlin / Stuttgart, Germany
where it's run
Legal domicile
πŸ‡©πŸ‡ͺ Germany (Nextcloud GmbH)
where it's incorporated
Ownership
Founder-owned, no VC
License
AGPLv3 open source
Deployments
300,000+ servers
Team
~100-140 staff
91/100
Sovereign: Yes
Control ↑
94
Data β†’
88

91 = midpoint of Control 94 & Data 88

ConfidenceHigh (86%)

Sovereignty Quadrant

Control ↑ who owns & governs the company  Β·  Data β†’ where your data lives. Every dot is a company β€” click to open it.

Where your data lives β†’ Who controls the company β†’ 7 companies Β· fully non-EU (0/0) TikTok β€” Data 32, Control 24 Google β€” Data 16, Control 14 Youtube β€” Data 14, Control 16 Ionos β€” Data 90, Control 90 Disneyplus β€” Data 16, Control 12 Telegram β€” Data 34, Control 14 Carrefour β€” Data 100, Control 32 Corriere β€” Data 100, Control 100 Microsoft β€” Data 26, Control 14 Amazon β€” Data 14, Control 10 Amazon β€” Data 66, Control 0 Reddit β€” Data 14, Control 10 Netflix β€” Data 24, Control 20 LinkedIn β€” Data 14, Control 16 Reuters β€” Data 26, Control 0 Pinterest β€” Data 12, Control 12 Discord β€” Data 16, Control 20 AliExpress β€” Data 18, Control 12 Twitch β€” Data 18, Control 16 Samsung β€” Data 62, Control 4 Canva β€” Data 24, Control 20 Spotify β€” Data 30, Control 68 Apple β€” Data 16, Control 16 GitHub β€” Data 16, Control 10 Uber β€” Data 16, Control 16 Salesforce β€” Data 20, Control 14 Deepl β€” Data 70, Control 78 Airbnb β€” Data 18, Control 18 Shopify β€” Data 18, Control 18 Mastercard β€” Data 36, Control 16 Dropbox β€” Data 14, Control 10 HubSpot β€” Data 24, Control 10 Notion β€” Data 22, Control 16 Stripe β€” Data 30, Control 30 Zalando β€” Data 52, Control 88 Figma β€” Data 18, Control 10 SAP SE β€” Data 68, Control 78 Atlassian β€” Data 18, Control 18 Proton β€” Data 72, Control 54 Miro β€” Data 100, Control 44 Klarna β€” Data 44, Control 42 Ecosia β€” Data 60, Control 92 Zoom β€” Data 20, Control 14 Adyen β€” Data 84, Control 84 GitLab β€” Data 26, Control 14 Slack β€” Data 14, Control 20 Hetzner β€” Data 84, Control 96 Deezer β€” Data 62, Control 66 Typeform β€” Data 100, Control 52 OVHcloud β€” Data 82, Control 94 Tutanota β€” Data 100, Control 100 BlaBlaCar β€” Data 54, Control 76 Qwant β€” Data 56, Control 88 Bitwarden β€” Data 28, Control 20 Contentful β€” Data 34, Control 48 Personio β€” Data 34, Control 58 Ikea β€” Data 34, Control 100 Whatsapp β€” Data 14, Control 12 Instagram β€” Data 28, Control 22 X β€” Data 14, Control 16 Avast β€” Data 60, Control 0 Paypal β€” Data 24, Control 32 Kaspersky β€” Data 56, Control 0 Dailymotion β€” Data 100, Control 74 Snapchat β€” Data 12, Control 14 88 94 Nextcloud
Nextcloud β€” verified peers β€” automated estimate (0–50 pillars, normalized)

Every number below traces to 12 sourced facts across 6 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 86% β€” they lower confidence, never the score.

Control ↑

Who legally and economically controls the company

94/100
6 facts Β· 5 sources Β· mixed confidence
Legal & Jurisdiction
95

Incorporated and operated in Germany as a GmbH, fully within reach of EU and German law; no foreign parent.

Why 95? 3 sourced facts · click to expand
German GmbH, HRB 227086

Nextcloud is operated by Nextcloud GmbH, a German limited company registered in the Commercial Register at the Munich District Court under HRB 227086.

Nextcloud Impressum Β· as of 2026-06-12

HQ Stuttgart, founded 2016

The registered office and operations are in Germany (Hauptmannsreute 44a, 70192 Stuttgart), with the legal entity founded in July 2016.

Northdata company record Β· as of 2026-06-12

Directly subject to GDPR/BDSG

As a German entity processing EU data, Nextcloud GmbH is directly subject to GDPR and German law, and its software is procured by EU governments specifically for GDPR/Cloud Act compliance.

Nextcloud blog (EU governments choose independence) Β· as of 2026-06-12

Control & Ownership
92

Founder-owned German company with no venture capital and not publicly listed; voting and economic control sit in the EU. Exact shareholder split is not public.

Why 92? 3 sourced facts · click to expand
Self-funded, no VC

Nextcloud is fully employee/self-funded, was profitable by end of 2016, and continues to be profitable and independent with no outside investors.

Nextcloud About page Β· as of 2026-06-12

Founder rejects investors

Founder and CEO Frank Karlitschek states investors regularly approach the company and 'we always say no', framing Nextcloud as resistant to acquisition.

Open Knowledge Foundation interview Β· as of 2025-07-15

~3 EU shareholders, no parent

The commercial register lists a small number of active shareholders (reported as three) of the German GmbH, with no foreign parent or holding company disclosed.

Northdata company record Β· as of 2026-06-12

Data β†’

Where your data lives and who can reach it

88/100
6 facts Β· 4 sources Β· mixed confidence
Data & Infrastructure
90

Nextcloud sells self-hostable AGPL software; the vendor does not hold customer data, so residency follows the operator's own (often EU on-prem) infrastructure with no vendor-side CLOUD Act exposure. Score reflects that residency depends on the deployer, not the vendor.

Why 90? 3 sourced facts · click to expand
Self-hosted, customer-controlled data

Nextcloud is a self-hosted, on-premises platform where the customer hosts everything on their own infrastructure, keeping data under customer control.

Nextcloud About page Β· as of 2026-06-12

Vendor hosts no customer data

Nextcloud GmbH is a pure software vendor and does not require customers to host in its data centers; managed/SaaS hosting is provided by independent partner providers.

Nextcloud Providers page Β· as of 2026-06-12

On-prem EU government hosting

EU public-sector deployments (German federal administration, French Ministry of Interior, Swedish agencies) run Nextcloud on-premises explicitly to keep data on sovereign infrastructure and avoid US cloud providers.

Nextcloud blog (EU governments choose independence) Β· as of 2026-06-12

Operations & People
85

EU-centered company: German HQ (Berlin/Stuttgart), German founder-CEO, EUR-denominated German GmbH, with a distributed but Europe-anchored workforce.

Why 85? 3 sourced facts · click to expand
HQ Berlin/Stuttgart, DE

Nextcloud is headquartered in Germany (Berlin and Stuttgart), founded by Frank Karlitschek and Niels Mache.

Nextcloud About page Β· as of 2026-06-12

~100-140 staff, 25 countries

The team passed 100 members (December 2023) and is spread across roughly 25 countries; later third-party trackers report ~127-143 employees.

Nextcloud About page Β· as of 2024-01-01

EU customer/revenue base

Most of Nextcloud's funding comes from European customers and governments (France, Italy, Spain, Germany, the Netherlands, Sweden), per the founder.

Open Knowledge Foundation interview Β· as of 2025-07-15

Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) β†’

What we don’t know 3 open questions β€” they lower confidence, never the score
  • ?

    Exact shareholder split of Nextcloud GmbH (founder vs. other holders) is behind registry paywalls.

    Slightly lowers ownership confidence; the EU-control conclusion holds, but the precise founder stake is unconfirmed.

  • ?

    Current, vendor-confirmed employee headcount and revenue β€” public figures range from ~100 (vendor) to ~143 (trackers) and ~$7M revenue (third-party estimate).

    Affects operations precision and scale pills, not the EU-centered conclusion.

  • ?

    For any given user, where data actually resides depends entirely on the operator's deployment choice, which the vendor does not control.

    Infra score is for the vendor/architecture; a poorly chosen host could undercut real-world sovereignty despite the software.

EU Cloud Sovereignty Framework lens

The EU Cloud Sovereignty Framework targets cloud service providers; Nextcloud is self-hostable software, not a cloud, so this is an analogous mapping for orientation, not a certification.

Strategic

German founder-owned, self-funded, explicitly mission-driven on EU digital sovereignty; no foreign control or acquisition pressure.

strong

Legal & jurisdictional

German GmbH fully subject to GDPR/BDSG and EU law; no foreign parent or extraterritorial owner.

strong

Data & AI

Self-hosted, customer-controlled data; supports server-side and end-to-end encryption; vendor holds no user data by default.

strong

Operational

EU-centered HQ and leadership; revenue base is European governments and enterprises; distributed but Europe-anchored team.

strong

Supply chain

AGPL software stack reduces vendor lock-in, but real deployments depend on the host's infrastructure and any third-party SaaS partner chosen.

moderate

Technological

100% open source (AGPLv3), forkable and auditable; near-maximum anti-lock-in posture; open standards (LDAP/SAML/OAuth2).

strong

Security & compliance

Bug bounty program, end-to-end encryption, used in high-assurance government settings; compliance ultimately depends on the operator's configuration.

strong

Environmental sustainability

No vendor-operated data centers to assess; environmental footprint depends on the self-hosting operator.

not assessed
EU alternatives
πŸ‡©πŸ‡ͺ Nextcloud (this company) nextcloud.com EU-controlled

Already a near-maximum EU sovereignty option: German-owned, open source, self-hostable. The strongest peer in its category.

πŸ‡©πŸ‡ͺ OpenDesk (ZenDiS) opendesk.eu EU-controlled

German government-backed sovereign workplace suite (which itself integrates Nextcloud); fully EU-controlled public-sector alternative.

πŸ‡«πŸ‡· CryptPad (XWiki SAS) cryptpad.org with caveats

French open-source, end-to-end encrypted collaboration; narrower feature scope and smaller backer than Nextcloud.

How the method works

Methodology v2 (provisional): the score is the midpoint of two axes β€” Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.

Spotted an error? Every claim is sourced β€” challenge it and we correct the record.
  • 2026-06-12 β€” Initial golden profile, authored from primary sources (human + AI review).

Report Incorrect Data

Found an error in this company's profile? Help us improve our data by submitting a correction.

Required so we can follow up if needed. We won't share your email.

Verified 2026-06-12 Β· Human + AI joint review (sources independently checked) Β· Methodology