fesit

Tools

By Nextcloud GmbH

Nextcloud Hub

Open files, chat, office and more. Fairness depends on who hosts it.

Log in to add an offering to your organisation’s current stack.

AGPL-3.0 · https://apps.nextcloud.com/apps/deck · EU legal entity

Files & officeChatVideo meetings

Self-hosted

Hosting: Self-hosted

Sovereignty follows the operator. Easy score drops if there is no sysadmin.

Fair 5.0 Easy 3.0 Secure 3.7

Pillar Criterion Score Evidence
Easy Day-one UX Can non-technical staff use it without a project? 3 Good enough for staff after a short intro; not Gmail-simple. Source
Easy Operate Admin burden, updates, backups and language coverage. 2 Updates, backups and apps are a real operations load. Source
Easy Integrate SSO, mail/CalDAV, APIs and common NGO connectors. 4 OIDC, WebDAV, Collabora, mail and many NGO connectors. Source
Fair Lock-in / exit Can you leave with your data in open formats, at known cost? 5 Full data copy on your disks; open formats and APIs. Source
Fair Sovereignty EU legal entity, EU hosting, and exposure to extra-EU lawful access? 5 You choose EU hardware and EU law. Source
Fair Openness Open source or open standards? Are independent implementations possible? 5 AGPL with a wide independent ecosystem. Source
Secure IT security Authentication, encryption, patch cadence and independent audit. 4 Security is as good as your patching and hardening. Source
Secure User security 2FA, roles, phishing resistance and safe defaults. 3 2FA and sharing warnings exist; defaults need care. Source
Secure Personal data GDPR fit: DPA, residency, sub-processors and Schrems II posture. 4 No US SaaS sub-processor if you host in the EU and read the apps list. Source

EU hoster

Hosting: EU-hosted SaaS

Same software, operated by an EU partner. Check the partner’s DPA.

Fair 5.0 Easy 4.0 Secure 4.3

Pillar Criterion Score Evidence
Easy Day-one UX Can non-technical staff use it without a project? 4 Feels like Drive once the hoster has set it up. Source
Easy Operate Admin burden, updates, backups and language coverage. 4 Hoster handles updates if you pay for managed service. Source
Easy Integrate SSO, mail/CalDAV, APIs and common NGO connectors. 4 Same Nextcloud integrations as self-host. Source
Fair Lock-in / exit Can you leave with your data in open formats, at known cost? 5 You can migrate to another Nextcloud at any time. Source
Fair Sovereignty EU legal entity, EU hosting, and exposure to extra-EU lawful access? 5 German vendor; pick an EU provider. Source
Fair Openness Open source or open standards? Are independent implementations possible? 5 AGPL; provider lock-in is operational, not legal format lock-in. Source
Secure IT security Authentication, encryption, patch cadence and independent audit. 4 Ask the provider for patch SLA and pentest. Source
Secure User security 2FA, roles, phishing resistance and safe defaults. 4 Managed 2FA and sharing policies are usually on. Source
Secure Personal data GDPR fit: DPA, residency, sub-processors and Schrems II posture. 5 EU DPA with a known hoster is the intended model. Source