GDPR Compliance Kit

Simplifying the complex requirements of privacy regulations.

The GDPR makes organizations liable for any violations of user privacy and deviations from a high data security standard. Any business-to-consumer company, but also many B2B enterprises will have to ensure they have their data under control.

The self-hosted Nextcloud solution simplifies compliance, decreasing business risk and costs.

Making compliance easy

Nextcloud Compliance Kit

Nextcloud offers everything you need for GDPR compliance.

whitepaper

Clear documentation

Compliance is a multi-step process and data can be in many locations. Our documentation helps administrators check if they have covered their bases and guides them through delivering on data access, modification and deletion requests.

We offer both a high level overview as well as hands-on, concrete documentation for administrators:

  • A 12-step compliance checklist
  • An extensive, over-20-page Administrator manual

All bases covered

  • How the GDPR data processing allowances apply to Nextcloud and when, where and how to ask for permission
  • How to deal with public, in-house and B2B Nextcloud servers
  • An overview of where personal data can be stored in Nextcloud, covering user accounts, monitoring and logs, apps, file storage, database, backups and more
  • How to handle consent, subject access requests, data deletion and more
  • An addendum covering popular apps and their GDPR compliance consequences
  • Personal rights and how to implement this in Nextcloud
whitepaper

GDPR Compliance Apps

To make compliance easier, Nextcloud offers a number of Compliance apps and capabilities.

  • Configurable imprint and privacy links for your login page
  • Data Request app to allow users to request data deletion or modification from their user settings
  • Delete Account app to allow users to delete their account

What our users say

Thank You from a customer

The GDPR Compliance Kit dealt with all our concerns. The global nature of the research community with frequent collaboration with European researchers and students requires global compliance awareness and an on-premises solution backed by the expertise of Nextcloud GmbH gives us the assurances we need.

-Hans Erasmus, Junior Infrastructure Architect at the North-West University in South Africa.

How Nextcloud delivers

Ultimate security

Choosing a self-hosted product means you can guarantee your customers that data never leaves your company and remains 100% confidential.

Powerful server and client side encryption options provide ultimate protection for sensitive documents.

Complete control

Nextcloud combines advanced data access controls with powerful monitoring and logging capabilities to ensure compliance and auditability.

Our Compliance Kit gives administrators the tools they need to export, update and delete user data.

Why self hosting?

You need 100% certainty

Email or public cloud solutions do not provide much security for sensitive data. Encryption is complicated and cumbersome to use, reducing the real benefits due to employees working around them or making mistakes.

Keeping data on your own infrastructure means you stay in control. Only then can you show your customers exactly where their sensitive documents are. Regulators can be certain that non-compliance with proper process is minimized.

Public clouds are not a safe solution

Most consumer-grade solutions like Dropbox or Office 365 were not designed with privacy regulations and security concerns in mind, mixing data from consumers and businesses, spread out in data centers across the globe.

Rather than trying to work around their limitations, Nextcloud Files provides a security-first solution which puts you in complete control over the location and access policies of data with a private cloud solution.

in action

Assicuro Private Insurance

Assicuro chose Nextcloud to ensure confidential data exchange with its over 3000 customers and partners, enabling customers to securily share confidential information e.g. insurance policies. Compared to other evaluated solutions, Nextcloud offered an easier user interface, and a professional and more secure, extensible platform.

Get our whitepaper

Data protection

Secure your data

While data needs to be available for employees at all times, the IT department must be able to ensure policies around securing and sharing personal data are respected.

Many customers care deeply about their privacy and keeping their data secure while regulators give heavy penalties for data leaks. Nextcloud offers you the tools to keep data compliant and safe.

  • Legal compliance
    Federal data protection and GDPR-compliant, protecting data sovereignty, keep the server location in your country.
  • Data security
    Multiple levels of encryption (HTTPS/SSL/TLS, AES-256 or stronger, server-side and end-to-end encryption) ensure the highest level of data protection from hacking.
  • Fine-grained authorization
    A dedicated user and group management as well as a rights system allows the assignment of access rights according to your requirements.

Nextcloud is a popular self-hosted solution in businesses dealing with private data for its ability to strictly control access to data and industry-leading security capabilities.

in action

File Access Control

The File Access Control feature of Nextcloud enables IT to codify legal and policy requirements, blocking unauthorized users uploading or downloading data following defined rules. Criteria include IP address ranges, group membership, file type and size, time and more. Data retention can be controlled as well, enabling administrators to limit the lifetime of certain files.

File Access Control
in action

Monitoring and auditing logs

Nextcloud offers built-in powerful monitoring capabilities, enabling organizations to ensure smooth performance. Systems can be monitored using the web interface or through monitoring and systems intelligence tools like OpenNMS, Splunk, Nagios or others. A full auditing system logs all user actions, enabling fully compliant usage of file sync and share.

Monitoring and auditing
in action

Encryption

Nextcloud uses industry-standard SSL/TLS encryption for data in transfer. Data at rest in storage can be encrypted using a default military grade AES-256 encryption with server-based or custom key management. Optionally and on a per-folder base data can be end-to-end encrypted on the client with the server assisting in sharing and key management using a Zero-Knowledge model.

Seamless integration and ease of use with key features like offline recovery keys, auditing and HSM support make Nextcloud Encryption capabilities leading in the industry.

Nextcloud understands the necessity to provide core principle baseline security requirements, as such Nextcloud is built on these security principles to ultimately deliver a secure solution to their customers

Nextcloud offers first-in-class, third-party verified security backed by a USD 5000 Security Bug Bounty program protecting against unauthorized access.

Security in Nextcloud

The best of both

Compliance and security without losing productivity

in action

Easy access

A first requirement for any secure solution to share data is that it does not force complexity on the user. Complexity leads to mistakes and mistakes are costly in many ways!

Nextcloud makes accessing and sharing data a breeze, providing users a comfortable, familiar workspace.

in action

Multi-platform productivity

Data needs to be available where your employees are. Tablets, mobile devices, laptops and desktops all have access to the same files at a moments notice thanks to the first-class Nextcloud clients.

Users can tag and comment on files for easy collaboration, roll back files to earlier versions or find deleted files in the trash. Real time collaborative editing and secure audio/video calls and chat complement the array of features aimed at enhancing productivity.

in action

Secure file exchange

Sharing files across the borders of your organization can be done easily and securely with our file-drop feature.

IT stays in control at all times, enforcing security policy with the File Access Control capabilities.

File Drop

Integrated in email

To quickly and securely get data to your customers or receive documents from them, use the Nextcloud Secure Sharing Outlook Add-in. This avoids insecure and big attachments and instead provides a secure, trust-worthy file exchange that does not direct your customers to a third party but runs on your server and your domain.

Email integration

We provide trust

You are entrusted with the private data of your users. Breaking that trust is a costly, career-ending mistake.

Nextcloud enables you to focus on your work, taking care that your data stays private and completely under your control!

Easy integration

Efficient deployment and management

Complexity is the enemy of security and Nextcloud is designed to offer quick and easy integration in existing infrastructure, leaving policies and procedures in place. Its powerful LDAP and storage integration seamlessly fits with existing user directories, Windows Network Drive, NFS and Sharepoint storage solutions.

The result: a quick implementation at low cost, and easy maintenance making a self-hosted Nextcloud the cloud compliance solution with the lowest TCO.

Deep integration

CanvasCreated using Figma

Nextcloud integrates in hospital infrastructure with support for SAML and Shibboleth, LDAP, Kerberos, Oauth, and other often used authentication mechanisms and runs on all enterprise Linux systems offering support options to match their life cycle.

STORAGE AND DATABASE

Data storage can be one or multiple NFS, Object Storage, Samba or a variety of other powerful storage mechanisms. This way Nextcloud provides seamless access to data on existing storage mechanisms, respecting existing access control policies and transparently handling changes on the underlying storage layer.

You have javascript disabled. We tried to make sure the basics of our website work but some functionality will be missing.

This website is using cookies. By visiting you agree with our privacy policy. That's Fine