Weighted Score:
82
Very high sovereignty due to EU provider built on EU stack and EU law only.
Company name: Nextcloud GmbH
URL: https://nextcloud.com
eurotechguide review(s): Not reviewed
Digital services offered: Cloud drive, Office suite, Video conferencing
| Criterion | Score | Short Assessment | Long Rationale |
|---|---|---|---|
| SOV-1 (strategic) | 4 | EU provider built on EU stack. | Nextcloud One is offered by epiKshare GmbH with offices in Germany/AT/CH; entity listed in Germany. (Nextcloud One) Under SOV-1, decisive authority is EU-anchored and aligned with European sovereignty goals (Nextcloud ecosystem strongly EU-rooted). This supports SEAL-4 strategic sovereignty. |
| SOV-2 (legal) | 4 | EU law only. | Germany is EU jurisdiction; the offering is clearly EU legal. That aligns with SEAL-4 for SOV-2. |
| SOV-3 (data & AI) | 3 | Strong control; hosting details unclear. | Nextcloud-based solutions enable strong data control and can be run EU-only; however, for a hosted service offering, full SEAL-4 would require proof of no critical non-EU dependencies and customer-held cryptographic access by default. With limited public detail on hosting architecture and key control for this specific service, SEAL-3 is the defensible rating. |
| SOV-4 (operational) | 4 | Strong portability and operability. | Open-source architecture enables migration, self-hosting and independent operation by EU actors. Operational autonomy is structurally achievable. → SEAL-4 |
| SOV-5 (supply chain) | 2 | Global semiconductor reliance. | Even with open software, underlying hardware/firmware and semiconductor supply chains remain global (material dependency). → SEAL-2. |
| SOV-6 (technological) | 4 | Open source, auditable stack. | Nextcloud core is open source (AGPL) and designed for auditability and interoperability – squarely aligned with SOV-6 factors. This supports SEAL-4 for technology sovereignty (openness/transparency) even though hardware isn’t EU-made –> SEAL-4 |
| SOV-7 (security) | 3 | EU compliance; specifics vary by operator. | EU jurisdiction supports compliance; still, SOC and certification posture depends on the operator (epiKshare) and isn’t fully evidenced here. SEAL-3 is appropriate without additional certification proof. |
| SOV-8 (environmental) | 2 | Depends on hosting sustainability | Open-source model enables efficient hosting choices, but hosted service lacks quantified environmental reporting. → SEAL-2 |