[vc_section el_class=”titlebar at_home noPaddingBottom” css=”.vc_custom_1680164795357{background-image: url(https:\/\/nextcloud.com\/wp-content\/uploads\/2023\/03\/nextcloud-security-auth-titlebar.jpg?id=109304) !important;}”][vc_row content_placement=”middle”][vc_column width=”1\/2″][vc_icon use_svg=”yes” icon_fontawesome=”” color=”white” css=”.vc_custom_1760967713568{margin-bottom: 11px !important;}” el_class=”titlebar-icon” svg_id=”344121″][vc_column_text el_class=”page-title centerMobile”]<\/p>\n

Security and authentication<\/h1>\n

[\/vc_column_text][vc_column_text css=”.vc_custom_1680159622359{margin-top: 2rem !important;margin-bottom: 2rem !important;}” el_class=”page-subtitle centerMobile”]Nextcloud is designed to protect user data through multiple layers of protection.[\/vc_column_text][\/vc_column][vc_column width=”1\/2″][\/vc_column][\/vc_row][\/vc_section][vc_section el_class=”vertical-page-intro powerful_collaboration” css=”.vc_custom_1670420045995{padding-bottom: 0px !important;background-image: url(https:\/\/nextcloud.com\/wp-content\/uploads\/2022\/08\/nextcloud-logo-icon-light-bg.svg?id=53508) !important;}”][vc_row gap=”10″ content_placement=”middle” css=”.vc_custom_1663598629396{margin-bottom: 2rem !important;}”][vc_column width=”3\/5″][vc_column_text el_class=”intro-title nc-section-title”]<\/p>\n

Verified Enterprise Class Security<\/h2>\n

[\/vc_column_text][vc_column_text]<\/p>\n

Our customers care deeply about security and so do we. Nextcloud aligns with industry standards such as Clause 14 of ISO\/IEC27001-2013 and related standards, guidance and security principles. Our solution is built around combined assurance layers consisting of rich security features, applied best practices governed by policy and the design itself validated by industry standard testing processes.<\/p>\n

[\/vc_column_text][\/vc_column][vc_column width=”2\/5″][\/vc_column][\/vc_row][vc_row el_class=”row_features_carousel” css=”.vc_custom_1668672840991{margin-bottom: 3rem !important;}”][vc_column]

\n

\n

\n\n\t\t\t\t\t \t\t\t\t\t\t \t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\n\t\t\t\t\t\t\t\t\t\t \t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tLogging and monitoring\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t

Nextcloud has built in monitoring and logging tools, compatible with industry standard tools like Splunk, Nagios and OpenNMS. It also offers a full, compliance-ready activity log for reporting and auditing purposes.<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tMonitoring <\/i>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\n\n \t<\/div>\n

\n\n\t\t\t\t\t \t\t\t\t\t\t \t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\n\t\t\t\t\t\t\t\t\t\t \t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tPermissions\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t

Administrators can set permissions on sharing and access to files using groups. Permissions of underlying storage, like Windows Network Drive access rights, are respected by Nextcloud\nSharing can be protected by passwords, expiration dates, hiding of existing files, blocking downloads and the enforcing of a video call before access is granted (Video Verification). There is also support for ACLs on team folders.<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tSharing permissions <\/i>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\n\n \t<\/div>\n

\n\n\t\t\t\t\t \t\n\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t

\n\n\t\t\t\t\t\t\t\t\t

<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\n\t\t\t\t\t\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\tData retention\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t

Define rules for data retention, allowing regular cleanup of files or ensurances that data stays put for a set amount of time.<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\n\n \t<\/div>\n

\n\n\t\t\t\t\t \t\t\t\t\t\t \t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\n\t\t\t\t\t\t\t\t\t\t \t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tFile access control\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t

The powerful workflow tools in Nextcloud enable administrators to limit access to data in accordance to business and legal requirements and perform automatic actions like file conversion. Describe restrictions like \u201cXLSX files from the HR department are not to be accessible outside company IP ranges\u201d or \u201cemployees in the US shouldn\u2019t access customer data from European data centers\u201d for Nextcloud to enforce.<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tFile access control <\/i>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\n\n \t<\/div>\n

\n\n\t\t\t\t\t \t\t\t\t\t\t \t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\n\t\t\t\t\t\t\t\t\t\t \t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tMulti-layered encryption\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t

Nextcloud uses industry-standard SSL\/TLS encryption for data in transfer. Additionally, data at rest in storage can be encrypted using a default military grade AES-256 encryption with server-based or custom key management. Also optionally and on a per-folder base data can be end-to-end encrypted on the client with the server assisting in sharing and key management using a Zero-Knowledge model.<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tMore about encryption <\/i>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\n\n \t<\/div>\n

\n\n\t\t\t\t\t \t\t\t\t\t\t \t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\n\t\t\t\t\t\t\t\t\t\t \t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tCompliance\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t

Nextcloud puts all the pieces for compliance with regulations like HIPAA and GDRP at your fingertips. This goes from extensive documentation on our customer portal to specific apps for data requests as well as encryption and security capabilities in Nextcloud itself.<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tCompliance <\/i>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\n\n \t<\/div>\n <\/div>\n\n\t\t\t