ONLYOFFICE
Verified“Latvian-registered, Singapore-controlled, Russian-origin office suite.”
- Users
- 15M+
- Founded
- 2009
- License
- AGPL-3.0
- UBO
- Lev Bannov
40 = midpoint of Control 39 & Data 41
Sovereignty Quadrant
Control ↑ who owns & governs the company · Data → where your data lives. Every dot is a company — click to open it.
Every number below traces to 12 sourced facts across 8 independent sources, last verified 2026-06-12. 3 open questions hold confidence at 78% — they lower confidence, never the score.
Control ↑
Who legally and economically controls the company
Legal & Jurisdiction
48
The operating/IP entity and GDPR data controller is Ascensio System SIA, a genuinely EU-incorporated company in Riga (reg. 40103265308, inc. 18 Dec 2009), so EU law and GDPR enforcement directly reach the data-handling entity. But that entity is the bottom of a three-layer chain: it is wholly owned by a UK company (Ascensio System Limited, London), which since 2023 is wholly owned by a Singapore holding. EU jurisdiction reaches the Latvian operator, but ultimate legal control sits outside the EU.
Why 48? 3 sourced facts · click to expand
Operating entity / GDPR controller incorporated in Latvia
firmas.lv (Latvia registry data) · as of 2026-06-12
Latvian SIA is named as the data controller in the privacy policy
ONLYOFFICE Privacy Policy · as of 2026-06-12
Latvian entity sits below a UK company and a Singapore holding
ONLYOFFICE Blog (holding announcement) · as of 2026-06-12
Control & Ownership
30
Voting control and the economic majority sit outside the EU. The Latvian SIA is 100% held by UK Ascensio System Limited (#05718967), which since 7 Aug 2023 is 75%+ owned by ONLYOFFICE Capital Group Pte. Ltd. of Singapore (UEN 202320424D). The ultimate beneficial owner is founder/CEO Lev Bannov, a dual Russian/Turkish citizen resident in Istanbul. UK filings show prior control by Russia's RK-Technology JSC (ceased 29 May 2023) and a Russia-resident director (ceased 2019). Not EU-controlled; no EU listing venue (private).
Why 30? 3 sourced facts · click to expand
UK entity's controlling shareholder is the Singapore holding (75%+)
UK Companies House — PSC · as of 2026-06-12
Prior controllers were Russian (now ceased)
UK Companies House — PSC · as of 2026-06-12
Ultimate beneficial owner is founder Lev Bannov, dual Russian/Turkish citizen in Istanbul
ONLYOFFICE Blog (ONLYFacts) · as of 2026-06-12
Data →
Where your data lives and who can reach it
Data & Infrastructure
35
The official .eu SaaS cloud stores user data on AWS infrastructure in Frankfurt — an EU region but on a US hyperscaler, which carries CLOUD Act / foreign-law exposure despite EEA data residency. Crucially, ONLYOFFICE's core value is the self-hostable, AGPL open-source edition: organisations can run it on their own EU-owned infrastructure, which removes the hyperscaler and jurisdiction exposure entirely. Score reflects the hosted default (US-provider EU region) tempered by the genuine self-host escape hatch.
Why 35? 3 sourced facts · click to expand
.eu cloud user data hosted on AWS in Frankfurt
ONLYOFFICE Blog (Frankfurt move) · as of 2026-06-12
Open-source edition is self-hostable under AGPL
Wikipedia — OnlyOffice · as of 2026-06-12
Company positions hosted cloud as GDPR-aligned via EEA residency
ONLYOFFICE Blog (Frankfurt move) · as of 2026-06-12
Operations & People
50
Riga (Latvia) is a genuine operating hub and the registered home of the IP/data entity, giving a real EU footprint. But the workforce is explicitly distributed across mostly non-EU hubs — Singapore, London, Dallas, Belgrade, Yerevan, Tashkent, Shanghai and Istanbul — with the CEO based in Istanbul. Employees/contributors span 30+ countries. Operations are mixed, leaning out of the EU, with one substantive EU anchor.
Why 50? 3 sourced facts · click to expand
Departments listed across many non-EU cities plus Riga
ONLYOFFICE — About · as of 2026-06-12
CEO based in Istanbul, Turkey since 2023
ONLYOFFICE Blog (ONLYFacts) · as of 2026-06-12
Team/contributors spread across 30+ countries; 15M+ users
ONLYOFFICE — About · as of 2026-06-12
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) →
What we don’t know
3 open questions — they lower confidence, never the score
- ?
Exact shareholding of the Singapore holding (ACRA shareholder/officer detail is behind paid login).
Confirms whether Bannov is sole/majority UBO or whether other parties hold economic stakes — material to the ownership score.
- ?
Whether non-.eu cloud regions or specific enterprise SaaS tenants store data outside AWS Frankfurt.
The Frankfurt/AWS fact is confirmed for the .eu portal; other regional portals' infrastructure is not disclosed.
- ?
Degree of any residual technical or personnel overlap with the Russian R7-Office fork.
Company asserts full separation since 2019/2023 with no shared codebase; independent verification is limited, affecting security/supply-chain confidence.
EU Cloud Sovereignty Framework lens
SEAL targets cloud providers; applied here as an analogous sovereignty mapping, not a certification.
Strategic
Ultimate control and the UBO sit in Singapore/Turkey, not the EU; strategic direction is outside EU reach.
Legal & jurisdictional
EU-incorporated operating entity and GDPR controller in Latvia, but two parent layers (UK, Singapore) sit above it.
Data & AI
.eu cloud data resides in AWS Frankfurt (EEA) but on a US hyperscaler (CLOUD Act exposure); self-hosting removes this.
Operational
Real Riga office, but workforce spans Tashkent, Yerevan, Belgrade, Shanghai, Istanbul, Dallas; leadership in Istanbul.
Supply chain
Russian-origin codebase (NCT, 1998) and historical Russian control; asserted-but-hard-to-audit separation from R7-Office fork.
Technological
AGPL-3.0 open source on GitHub; fully self-hostable, auditable codebase — strong technological independence option.
Security & compliance
Claims GDPR/HIPAA alignment and ISO-style practices; EU public bodies faced sanctions-era restrictions on the commercial edition pre-2023.
Environmental sustainability
No primary disclosures on energy use or sustainability reporting found.
EU alternatives
LibreOffice-based, self-hostable open-source editor; strong EU-aligned engineering roots but the company is UK (post-Brexit, non-EU) incorporated.
German-incorporated (Stuttgart), German-controlled, self-hostable collaboration suite — bundles document editing and keeps data on your own EU infrastructure.
French-developed (XWiki SAS), end-to-end encrypted, open-source office suite; EU-controlled and self-hostable.
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes — Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced — challenge it and we correct the record.
- 2026-06-12 — Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 · Human + AI joint review (sources independently checked) · Methodology