Nextcloud vs Microsoft 365
Nextcloud GmbH (Stuttgart, founded 2016 by Frank Karlitschek) runs the open-source AGPLv3 collaboration platform that the German federal administration chose for its Bundescloud in 2018 and that the European Data Protection Supervisor and Schleswig-Holstein have adopted. Compared with Microsoft 365, the suite of Redmond-based, Delaware-incorporated Microsoft, which is subject to the US CLOUD Act.
Why the Bundescloud Chose Nextcloud
In 2017 ITZBund, the German federal government’s central IT service provider, ran a public tender — after a pilot with around 5,000 users — for the platform that would serve as the file-sharing and collaboration backbone for federal agencies. The winner, announced in April 2018, was Nextcloud. According to Nextcloud, strict security requirements were decisive: fully open source under AGPLv3 so the code can be audited, hosted on-premises on the government’s own infrastructure, and supplied by a German vendor — keeping the administration in control of its own data. The service is designed for around 300,000 federal users.
That decision has been replicated. The European Data Protection Supervisor — the EU institution responsible for enforcing GDPR at the level of EU bodies themselves — launched an internal Nextcloud pilot for staff collaboration (announced 2023, delivered by the EU-based TAS Cloud Services) and worked on EU Login integration so other EU institutions could adopt it. The German state of Schleswig-Holstein is replacing its SharePoint-based collaboration platform with Nextcloud, as part of a wider switch that had already put LibreOffice on nearly 80% of its workstations outside the tax administration by December 2025. The French Ministry of the Interior prepared a Nextcloud roll-out on its internal network in 2019, designed to scale to its roughly 300,000 employees. Swedish public agencies followed. Gaia-X, the European federated-cloud initiative, chose Nextcloud as its internal collaboration platform in 2021, although Nextcloud announced in 2025 that it was leaving Gaia-X.
These are not hobbyist deployments: they are rollouts by public administrations that want to keep control over their own data. Nextcloud GmbH is a Stuttgart-based German limited-liability company founded in April 2016 by Frank Karlitschek (previously the founder of ownCloud). It has no US parent, no US private equity, and no Delaware corporation above it.
For European organisations asking whether the productivity layer needs to be American, the Bundescloud already answered.
Jurisdiction Comparison
| Nextcloud | Microsoft 365 | |
|---|---|---|
| HQ | Stuttgart, Germany | Redmond, Washington, USA |
| Corporate entity | Nextcloud GmbH (German limited-liability company) | Microsoft Corporation (Delaware; Nasdaq: MSFT) |
| Founded / led by | 2016, Frank Karlitschek | 1975 (Microsoft as a company) |
| Ownership | Independent German company | Public (Nasdaq) |
| CLOUD Act exposure | None (no US parent) | Yes (US-incorporated) |
| FISA 702 exposure | None | Yes |
| License | AGPLv3 (Community) + commercial Enterprise | Proprietary SaaS |
| Self-hostable | Yes (Community + Enterprise on-premises) | No (SaaS only; retirement of on-prem Office roadmap continuing) |
| Data hosting | Wherever you choose to run it | Microsoft cloud regions (EU Data Boundary available; parent jurisdiction is US) |
| GDPR posture | Native | Compliant via DPA + SCCs + EU Data Boundary |
| Public-sector adoption | Bundescloud, EU EDPS, Schleswig-Holstein, French Interior Ministry | Broad private + public sector |
What Nextcloud Actually Covers
Nextcloud is often described as “the open-source alternative to Google Drive,” which materially undersells what the platform now covers.
Files, Sync, Share
Cloud file storage with versioning, delta sync, external mounting (S3, SFTP, WebDAV, SMB), granular sharing with expiration + password + view-only, virtual filesystem support for large stores, end-to-end encryption at rest.
Talk (Teams / Slack replacement)
Group chat, direct messages, voice calls, video calls up to organisation scale, screen sharing, webinar mode, guest access, federation across Nextcloud instances. E2E encryption for calls.
Office (Word / Excel / PowerPoint replacement)
Real-time collaborative editing via Collabora Online (LibreOffice-derived) or OnlyOffice — both first-party integrations. Formats: DOCX, XLSX, PPTX read/write natively. Track changes, comments, multi-user cursors, live cursors.
Groupware (Outlook replacement)
Mail (full IMAP/SMTP client with signature encryption support), Calendar (CalDAV, shared calendars, scheduling), Contacts (CardDAV), Tasks (CalDAV VTODO), integration with Talk for meeting invites.
Deck (Kanban / project management)
Trello-style kanban boards with due dates, assignments, labels, attachments, comments. Integration with Talk for board discussions.
Notes, Forms, Whiteboard, Flow
Note-taking (Markdown), form builder for surveys, whiteboard (real-time collaborative), and Flow — event-based automation similar to Power Automate.
App Ecosystem
Hundreds of community apps in the Nextcloud App Store: password management, PDF editing, mind mapping, LibreOffice extensions, SSO, LDAP, external storage, integration with third-party services. Everything installable and controllable within your instance.
Federated Architecture
Two Nextcloud instances run by different organisations can share files and chat with each other without any central authority. This is fundamentally different from Microsoft 365’s centralised architecture.
Deployment Models
| Nextcloud | Microsoft 365 | |
|---|---|---|
| Self-host free | Community Edition (AGPLv3) — free forever, unlimited users | Not offered |
| Self-host paid | Enterprise on-premises with commercial support | Not offered (Office 2024 LTSC exists but discontinuation roadmap active) |
| Managed cloud | Nextcloud Enterprise Cloud (EU) or via partners | Microsoft 365 (EU Data Boundary available) |
| Sovereign cloud | Yes — deploy in any German/French/national sovereign-cloud region | Bleu (France) and Delos (Germany) partnerships exist but structural US-corp questions remain contested |
| Air-gapped | Yes | Very limited (Government Community Cloud DoD tier only) |
Real Public-Sector Deployments
- Bundescloud (Germany) — file-sharing and collaboration platform of the federal administration, run by ITZBund; tender won at the end of 2017, announced in 2018, designed for around 300,000 users
- European Data Protection Supervisor — internal Nextcloud pilot announced in 2023 (via EU provider TAS Cloud Services), with EU Login integration to ease adoption by other EU institutions
- Schleswig-Holstein (Germany) — replacing its SharePoint-based collaboration platform with Nextcloud, alongside the state-wide switch to LibreOffice (nearly 80% of workstations outside the tax administration by December 2025)
- French Ministry of the Interior — Nextcloud roll-out on its internal network prepared in 2019, designed for up to around 300,000 employees (according to Nextcloud)
- Swedish public agencies — named by Nextcloud in 2019 as adopters, including the Swedish Social Insurance Agency (Försäkringskassan)
- Gaia-X — chose Nextcloud (hosted at IONOS) as its internal collaboration platform in 2021; Nextcloud announced its exit from Gaia-X in 2025
Who Should Switch?
Nextcloud is the structural choice for:
- European public administrations — from municipality to federal ministry — where the Bundescloud precedent is now cited in national procurement guidance
- Defence contractors and defence-supply-chain organisations where document sovereignty is a contractual obligation
- Regulated industries (banking, healthcare, energy) where NIS2 essential-entity designation makes vendor jurisdiction a documented risk factor
- Universities and research institutions where academic freedom, sovereignty, and open-source commitment align
- Organisations affected by the Microsoft SharePoint 2019 end-of-life who are choosing sovereign self-hosted over Microsoft 365 migration
- Any organisation whose sovereignty procurement rubric now includes vendor corporate parent jurisdiction as an explicit criterion
Microsoft 365 remains the right choice for:
- Organisations already deeply committed to Power Platform (Power BI, Power Automate, Power Apps) and Copilot with no equivalent path
- Excel-critical operations (financial modelling, actuarial work) where VBA + Excel-specific behaviour is required
- Buyers who need Microsoft 365 GCC High or DoD tier for US-government-adjacent work
- Teams whose Exchange + SharePoint + Teams integration depth is deep enough that 12-18 month migration exceeds ROI
The Bottom Line
Microsoft 365 is a genuinely capable productivity suite and Microsoft has invested billions in EU data-residency infrastructure. That work is real. It does not, however, address the underlying jurisdictional exposure: Microsoft Corporation is a Delaware US company, and under CLOUD Act and FISA 702, that fact does not change based on where the data physically sits.
For European organisations where document, email, chat, meeting, and file content is either explicitly sensitive or implicitly reflects operational internals — public administrations, defence-adjacent contractors, NIS2 essential entities, regulated industries, or any organisation whose risk register now names vendor-parent jurisdiction — Nextcloud is the structurally aligned choice. Stuttgart GmbH under German commercial law; AGPLv3 open source with genuine self-host freedom; full Word/Excel/PowerPoint/Outlook/Teams/SharePoint/OneDrive-equivalent surface via Collabora Online + OnlyOffice + Talk + Groupware + Deck + Forms; adopted at federal-administration scale by the German Bundescloud, the European Data Protection Supervisor (2023 pilot), and Schleswig-Holstein.
The Bundescloud made this decision in 2018 with the full internal debate that a federal-government tender involves. The reasoning has aged well.
Looking for more European alternatives to Microsoft’s productivity stack? See also: Nextcloud vs Google Drive, OpenProject vs Jira, and Tuta vs Outlook.
Frequently Asked Questions
Where is Nextcloud based?
Nextcloud GmbH is headquartered in Stuttgart, Germany. The company was founded in April 2016 by Frank Karlitschek, formerly of ownCloud (which he had also founded). The corporate entity is a German limited-liability company — a straightforward GmbH under German commercial law — with no US parent, no US private equity ownership, and no Delaware corporation above it. For European public administrations, defence-adjacent buyers, and regulated industries where the vendor's corporate jurisdiction is a procurement criterion, Nextcloud GmbH is structurally the cleanest answer in the office-suite category.
Why did the German federal government choose Nextcloud?
In 2018 Nextcloud announced that ITZBund, the German federal government's central IT service provider, had selected it through a public tender (won at the end of 2017, after a pilot with about 5,000 users) as the file-sharing and collaboration platform for the federal administration — the 'Bundescloud', designed for around 300,000 users and hosted on the government's own infrastructure. According to Nextcloud, strict security requirements were decisive: the platform is fully open source and auditable, runs on-premises on German government servers without any external cloud dependency, and comes from a German vendor, keeping the administration in control of its own data. Subsequent adopters include the European Data Protection Supervisor, the German state of Schleswig-Holstein (which is replacing its SharePoint-based collaboration platform with Nextcloud), the French Ministry of the Interior, and Swedish public agencies.
Isn't Microsoft 365 GDPR-compliant?
Microsoft has done extensive compliance work — Microsoft 365 has EU data residency options via the EU Data Boundary, contractual Data Processing Agreements under GDPR Article 28, Standard Contractual Clauses, and various sector-specific certifications. All of this is real. However, the parent corporation is Microsoft Corporation, a Delaware-incorporated US company. Under the CLOUD Act and FISA Section 702, US authorities can compel Microsoft to disclose data it holds anywhere in the world, including EU-hosted data. The European Court of Justice made this explicit in Schrems II (2020): contractual mechanisms do not remove the risk of extraterritorial legal reach when the parent legal entity is US-domiciled. Nextcloud has no US parent, so the exposure does not exist.
What does Nextcloud actually cover?
The full information-worker collaboration surface: Files (cloud storage + sync + share + versioning), Talk (chat + audio + video + screen share + webinars), Office (Collabora Online or OnlyOffice — real-time collaborative editing of Word, Excel, PowerPoint format documents), Groupware (Mail, Calendar, Contacts, Tasks with CalDAV/CardDAV), Deck (Kanban boards), Notes, Forms (surveys and questionnaires), Whiteboard, Flow (event-based automation like Power Automate), Photos, plus a large ecosystem of community apps. For most information workers this covers Word, Excel, PowerPoint, Outlook, Teams, SharePoint, OneDrive, To Do, and Forms simultaneously.
How does pricing compare?
Community Edition is free forever under AGPLv3 — pay only for hosting infrastructure. Nextcloud Enterprise list pricing (as of October 2026, 100-user tier) is: Standard €71.29/user/year, Premium €104.99/user/year, Ultimate €204.75/user/year (lower per-user prices at 200+ users; no Basic tier is listed). Microsoft 365 Business Standard is about €12.50/user/month (~€150/user/year) and E3/E5 tiers are ~€36-57/user/month. Even at Nextcloud Premium tier, TCO is materially lower than Microsoft 365 E3 for equivalent capability. For public procurement, Nextcloud Enterprise pricing is negotiable and often competitive against the Bundescloud volume tier for German federal agencies.
What about real-time collaborative editing?
Nextcloud offers real-time collaborative editing via either Collabora Online (based on LibreOffice) or OnlyOffice — both are integrated as first-party apps. Real-time cursors, comments, track changes, and multi-user editing all work. For simple to moderate document complexity (letters, reports, spreadsheets, presentations), the experience is genuinely competitive with Microsoft 365 Word/Excel/PowerPoint online. For complex documents with deep Excel formulas, VBA macros, or unusual formatting, there is more Microsoft-specific behaviour that requires accommodation — this is where the 95% parity claim honestly caps out.
Can Nextcloud replace Teams for chat and video?
Nextcloud Talk handles 1:1 and small-group chat + audio + video + screen share very well and is used at organisation-wide scale by the Bundescloud and by other public administrations. For large-scale webinars, meeting-room integration with Microsoft-ecosystem hardware, and Microsoft-specific meeting features (breakout rooms, extensive polls, deep Copilot integration), Teams is still further ahead. Where Nextcloud Talk excels is federation — organisations running separate Nextcloud instances can chat across them without a central authority.
Why does the jurisdiction matter for productivity software specifically?
Productivity platforms hold the everyday content of the organisation: documents, spreadsheets, presentations, emails, chats, meetings, files, calendars. That content includes: legal strategy, HR files, board materials, product roadmaps, financial models, customer contracts, procurement conversations, internal deliberation. It is the substantive intellectual and operational output of the organisation itself. Under CLOUD Act, a US-parent productivity platform makes that content reachable by US authorities without EU-court approval and without notifying the customer. For European public administrations, defence-adjacent contractors, regulated industries, and organisations processing citizen or patient data, that structural exposure has become a defined risk-register item — and the response, increasingly, is to move the productivity layer to Nextcloud.
Was this helpful?
Explore More European Alternatives
252 privacy-first, GDPR-compliant alternatives to US tech services.