Nextcloud GmbH Due Diligence

Run due diligence on Nextcloud GmbH: check compliance and get alerts when suppliers change.

Germany · nextcloud.com · 23 vendors

Nextcloud GmbH is a German company providing an open-source, self-hosted content collaboration platform. Its flagship product, Nextcloud Hub, offers secure file storage, synchronization, and sharing, alongside real-time document editing, communication tools, and groupware functionalities. The platform enables organizations to maintain control over their data and ensure compliance with privacy regulations.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 23 sub-vendors.

Insights

Last updated 2026-08-15 · revision 2

23 direct vendors, 184 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

11 in-scope frameworks identified; showing 3.

CCPA — No public evidence

Evidence: https://nextcloud.com/compliance/, https://oag.ca.gov/privacy/ccpa

NIS2 (source) — No public evidence

Evidence: https://nextcloud.com/compliance/, https://nextcloud.com/secure/, https://nextcloud.com/impressum/, https://nextcloud.com/about/

EU AI Act (source) — No public evidence

Evidence: https://nextcloud.com/assistant/, https://nextcloud.com/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689

Financials

Three-year financials

Financial Resilience Score: 7/10

Nextcloud GmbH demonstrates solid financial resilience despite limited public disclosure. As a founder-led, self-funded German GmbH, the company has publicly stated it has been profitable and cash-flow positive since around 2019-2020, avoiding the venture-debt overhang common to growth-stage software companies. Management has cited triple-digit percentage growth in enterprise revenue following the 2020 pandemic-driven demand surge, and the company has grown to over 400,000 known deployments serving tens of millions of end users. The company benefits from a diversified, sticky customer base heavily weighted toward public sector clients including the German Federal IT Center (ITZBund), the German Federal Administration (Bundescloud with 500,000+ users), Deutsche Telekom, and multiple European government bodies. These multi-year recurring contracts provide revenue predictability. The structural tailwind from EU/German digital sovereignty initiatives to reduce dependence on US hyperscalers represents a durable growth driver. However, the small-company disclosure regime limits external transparency, which could hamper large procurement decisions. Customer concentration risk exists in large government tenders, and the open-source model creates conversion risk since the free product is fully functional. Competition from well-capitalized incumbents like Microsoft 365 and Google Workspace remains significant, though Nextcloud's open-source moat and community-driven development lower R&D costs relative to proprietary competitors.

Key strengths: Profitable and cash-flow positive since ~2019-2020, Self-funded with no venture-debt overhang, Diversified sticky public-sector customer base with multi-year contracts, EU/German digital sovereignty tailwind driving structural demand, Open-source moat lowering R&D costs, Founder-led with focus on profitability over burn-and-grow, Product breadth expansion via Roundcube acquisition (2024), Over 400,000 known deployments and tens of millions of end users

Risk factors: Competitive pressure from Microsoft 365, Google Workspace, Box, Dropbox, Customer concentration risk in large government tenders (e.g., Bundescloud), Limited external financial transparency as small GmbH, Open-source revenue conversion risk (free product is fully functional), Talent/wage inflation in German/European tech labor market, FX exposure on non-Euro revenue, Competition from other European sovereign-cloud initiatives

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report