Nextcloud vs reeqee

Compare Nextcloud and reeqee on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Google Workspace, Microsoft 365

Logo: Nextcloud

Nextcloud

Germany· Cloud Computing

Needs review

Shortlist Nextcloud when you need an AGPL self-hosted Hub (files, Talk, groupware, office, optional local AI) under German vendor ownership and operator-controlled residency. Skip when you want zero-ops multi-tenant SaaS — prefer Google Workspace/Microsoft 365 — or mainly need lightweight P2P sync (Syncthing) or file-sync without a full collab suite (Seafile).

EU-operated vendorOpen source (AGPLv3)Self-hostedFull collab HubOptional E2EEEnterprise support
Logo: reeqee

reeqee

Germany· Office Productivity Suite

Needs review

Shortlist reeqee when a DACH team needs German natural-language queries on CSV/XLSX with local row processing and an EU LLM that only receives schema. Skip when you need a full spreadsheet suite, server-side warehouse analytics, independent security audits, or consumer licensing. Consider Microsoft 365 Excel or Google Workspace for authoring, and LibreOffice or Nextcloud for European office/file workflows that are not text-to-SQL.

EU-operatedBrowser-local SQLGerman NLP queriesSchema-only AI pathB2B DACH focus
Nextcloud vs reeqee: Snapshot
FeatureLogo: NextcloudNextcloudLogo: reeqeereeqee
Country of originGermanyGermany
CategoryCloud ComputingOffice Productivity Suite
Open sourceYesNo
Self-hostedYesNo
HeadquartersGermanyGermany
Legal entityNextcloud GmbH (HRB 227086, AG München; VAT DE307093598)Christian Lesemann (sole trader), Torstraße 208, 10115 Berlin
Governing lawGermanyNot listed
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)LowLow
EU-hosted statusNot listedEU hosted
Hosting / residencyPrimary product path: customer or partner operates the instance (on-prem or chosen hoster). Nextcloud GmbH states it does not offer Nextcloud hosting for others and designs the software so user content is not sent to the vendor. Optional customer-configured backends (S3/SWIFT, SharePoint, SMB, etc.) and partner-managed hosting introduce those providers' regions and subprocessors. Website/CRM tools (e.g. Matomo, embedded video) apply to nextcloud.com, not Hub file data.Web app hosted on Hetzner Online GmbH in Germany (vendor privacy policy; public A record in Hetzner AS24940, Nuremberg). Text-to-SQL LLM: Mistral AI SAS in France (schema and questions only per vendor). Payments: Mollie B.V., Netherlands. Analytics: self-hosted Umami on Hetzner. Site CSP also allows cdn.jsdelivr.net for client assets (likely DuckDB-WASM). No US parent found. Backup/DR providers not published.
Summary

Open-source, self-hosted content collaboration Hub from Nextcloud GmbH (Germany): Files, Talk, Groupware, Office, local AI Assistant, and Flow—an on-prem alternative to Microsoft 365-style suites.

Browser-native German text-to-SQL for CSV and Excel: ask in plain language, run DuckDB-WASM locally, send only schema and the question to Mistral in the EU.

Tags
At a glance: Nextcloud vs reeqee
At a glanceLogo: NextcloudNextcloudLogo: reeqeereeqee
HQStuttgart, Germany (Nextcloud GmbH)Berlin, Germany
LicenseAGPLv3 (server); fully open source per vendorNot listed
DeploymentSelf-host or partner-host; vendor does not multi-tenant host filesNot listed
Commercial modelFree community software; seat-based Enterprise subscriptionsTrial then annual prepaid B2B plans via Mollie
Hub appsFiles, Talk, Groupware, Office, Assistant, FlowNot listed
Founded2016 (ownCloud fork)Not listed
Legal entityNot listedChristian Lesemann (sole trader)
Product typeNot listedBrowser SaaS text-to-SQL for CSV/XLSX
AI providerNot listedMistral AI SAS (France), schema + question only (vendor claim)
Self-hostNot listedNo
Open sourceNot listedNo
Key capabilities: Nextcloud vs reeqee
Key capabilitiesLogo: NextcloudNextcloudLogo: reeqeereeqee
EU-operated vendorYesYes
Open source (AGPLv3)YesNot listed
Self-hostedYesNot listed
Full collab HubYesNot listed
Optional E2EEYesNot listed
Enterprise supportYesNot listed
Browser-local SQLNot listedYes
German NLP queriesNot listedYes
Schema-only AI pathNot listedYes
B2B DACH focusNot listedYes

Nextcloud

  • Nextcloud Hub: Files, Talk, Groupware, Office, Assistant, Flow

    One self-hosted platform rather than a file-sync bolt-on: Files for sync/share and external storage; Talk for on-prem chat/video (optional SIP); Groupware for calendar/contacts/mail; Office for browser co-editing; Assistant for local AI tasks; Flow for automation. Limit: Talk scale and Office concurrency need extra backends/licenses for large orgs—budget High Performance Backend and editor capacity explicitly.

  • Self-hosted private cloud with clients and WebDAV access

    Run the server on Linux with MySQL/MariaDB/PostgreSQL; users access via web UI plus desktop (Windows/macOS/Linux) and mobile (Android/iOS) clients. External storage connectors cover NFS, SMB/Windows Network Drive, SharePoint, S3/SWIFT, FTP and more so existing file systems stay under IT policy. Limit: you own patching, backup, HA, and capacity planning unless a partner hosts the instance.

  • Enterprise identity, sharing controls, and audit trails

    LDAP/AD, native SAML 2.0, OpenID Connect, Kerberos, enforced MFA (TOTP, WebAuthn and others), password policies, file access control rules (IP, group, type, time), passworded/expiring shares, File Drop, video verification, remote wipe, and compliance-oriented activity logs. Benefits regulated teams that must prove who accessed what without sending files to a third-party SaaS tenant.

  • Encryption layers: TLS, server-side, optional E2EE

    TLS for transport; optional AES-oriented server-side encryption for data at rest (including object storage scenarios); optional per-folder client-side end-to-end encryption with a published design whitepaper and enterprise options such as recovery keys/HSM identity issuance. Limit: E2EE is not a magic default for all Hub features—evaluate which apps and workflows remain usable when folders are E2EE-encrypted.

  • AGPLv3 open source with Enterprise support subscriptions

    Server source is AGPLv3 on GitHub; Nextcloud states it does not ship proprietary open-core product modules. Community use is free; Enterprise plans (Standard/Premium/Ultimate) are seat-based subscriptions from a stated minimum user tier, buying support SLAs, longer maintenance, early patches, Guard, Global Scale options, and commercial connectors. Choose Enterprise when uptime and vendor SLAs matter more than pure DIY ops.

  • Local AI Assistant without mandatory cloud LLM tenancy

    Assistant integrates summarization, translation, context chat over your data, and generation features inside Hub, designed to run with self-hosted or partner AI backends rather than forcing content into a public consumer AI product. Limit: model quality, GPU/CPU cost, and AI Act classification depend on how you deploy the models—treat AI as an optional module with its own DPIA.

reeqee

  • German text-to-SQL on CSV and XLSX

    Users upload CSV or Excel, ask in everyday German, and receive a generated SQL query plus a result table. Aimed at accountants and SME staff who will not write SQL or complex formulas.

  • Local DuckDB-WASM execution

    Row data is processed in the browser with DuckDB-WASM according to the vendor. Analysis does not require uploading table contents to reeqee servers, which helps with sensitive DATEV or bank exports.

  • Schema-only Mistral EU calls

    The privacy policy states that only the question and column names go to Mistral AI SAS in France for SQL generation and suggested questions. Cell values are excluded from that path.

  • Multi-file join and export

    Paid workflows include linking multiple files or sheets with column matching, then exporting results as Excel or CSV. Plan limits differ between single-file and multi-file tiers.

  • Offline-style CSV/Excel converter

    A separate converter turns files between XLSX, XLS, ODS, and CSV variants entirely in the browser without calling the AI, useful for UTF-8 and delimiter fixes.

Assurance & compliance: Nextcloud vs reeqee
Assurance & complianceLogo: NextcloudNextcloudLogo: reeqeereeqee
Independent security review / audit
Partial

Public third-party signals include NCC Group review (historic Nextcloud 11 era) and Kyos code audit for Geneva; active bug bounty. Not a current continuous independent cert of every release or of your deployment.

Not found

Vendor claims local processing and limited AI payloads; no public third-party audit PDF found.

ISO 27001
Not found

Vendor describes alignment with ISO-style controls and notes customer deployments can pursue certification; no clear public claim that Nextcloud GmbH holds ISO 27001 for a multi-tenant SaaS product (they are primarily a software vendor).

Not found
SOC 2 / SOC 3
Not found

No public SOC 2/3 report found for Nextcloud as a hosted collaboration SaaS; self-host model shifts assurance to the operator.

Not found
GDPR / EU data protection
Vendor claimed

EU entity; privacy policy; Enterprise GDPR compliance kit (checklist, admin manual, data-request/ToS apps). Self-host design aims to avoid Nextcloud processing instance content—actual GDPR compliance depends on your hosting and configuration.

Vendor claimed

German sole trader controller; detailed DE privacy policy; Hetzner and Mistral named as processors with Art. 28 language.

US CLOUD Act exposure (indicative)
Partial

German GmbH, no known US parent, vendor does not host customer Hub content on self-host path → low vendor-as-host exposure. Partial because optional S3/partner hosting on US-group clouds reintroduces CLOUD Act via infrastructure. Not legal advice.

Partial

EU sole trader, no known US parent, published processors are EU (Hetzner, Mistral, Mollie). Residual risk from possible US-operated client CDN (jsdelivr in CSP) and unpublished backup/DR. Indicative only, not legal advice.

Data processing agreement (B2B)
Partial

For pure self-host software, vendor materials argue Nextcloud GmbH often is not a content processor. Enterprise support/sales process contact data; partner hosters and object-store providers need their own Art. 28 DPAs. Confirm with sales for your contract shape.

Vendor claimed

AGB §10 state parties conclude an Art. 28 DPA when the provider processes personal data on the customer's behalf. Confirm execution in procurement.

EU AI Act
Not applicable

Core product is content collaboration software. Optional local Assistant/AI modules may need separate AI Act classification depending on models and use—handle in deployment DPIA, not as the product category default.

Not found

Product is AI-assisted (Mistral text-to-SQL). No public AI Act classification or conformity statement found on the site.

Considerations & known limitations: Nextcloud vs reeqee
Considerations & known limitationsLogo: NextcloudNextcloudLogo: reeqeereeqee
Operator owns uptime, upgrades, and scale
Medium

Self-host (or partner-host) means you or a hoster must run backups, HA, Talk HPB, Office capacity, and security updates. Community installs without Enterprise SLAs leave incident response on your team.

Not listed
Hosting/object-store choice can reintroduce US cloud risk
Medium

Deploying Nextcloud on AWS/GCP/Azure or primary S3 in a US-group region shifts residual CLOUD Act/process risk to that provider even though Nextcloud GmbH is German and does not hold the data as SaaS host.

Not listed
E2EE is optional and feature-constrained
Medium

End-to-end encryption is not on by default for all Hub data; enabling it can limit some collaborative features. Academic research has scrutinized designs in this space—validate the version you ship against your threat model.

Not listed
Certifications apply to full deployments
Low

ISO/HIPAA/CFR-style compliance is achieved (or not) by the complete stack you operate. The downloadable software is not itself a turnkey certified SaaS environment.

Not listed
App Store apps are not fully code-reviewed by Nextcloud
Low

Privacy policy notes limited capacity to review all third-party apps; misuse policy exists but admins should vet apps before production install.

Not listed
AI SQL can be wrongNot listed
High

AGB disclaim correctness of generated SQL and results. Customers must validate before tax, accounting, or business decisions. Practical impact: treat outputs as assistive, keep human review of the shown SQL.

Questions and SQL are loggedNot listed
Medium

Privacy policy stores question text, generated SQL, success flag, and timestamp. Even if row data stays local, question text may itself be sensitive. Object via hello@reeqee.de per the policy.

No public independent auditNot listed
Medium

Local-processing and schema-only AI claims are first-party. No ISO 27001, SOC 2, or public security audit was found. High-assurance buyers will need contractual evidence and technical due diligence.

Sole-trader operator scaleNot listed
Medium

Legal entity is a Berlin sole trader, not a GmbH with published certs or status page. Fine for many SME tools; weaker for enterprises that need vendor risk tiers, SLA percentages, or succession guarantees.

Renewal wording inconsistencyNot listed
Low

Pricing page text and AGB renewal clauses have differed on automatic extension. Confirm the signed terms before budgeting renewals.

Fit

Nextcloud

Best fit when

  • Public sector and regulated orgs that must keep content on-prem or in a chosen EU private cloud rather than a US hyperscale SaaS tenant
  • Enterprises replacing SharePoint/OneDrive-style exchange while keeping LDAP/SAML, audit logs, and file access policies
  • MSPs and hosters offering branded private-cloud collaboration on their infrastructure
  • Education and research campuses that want Hub apps (Files, Talk, Office) under institutional IdP and storage
  • Teams that accept ops ownership (or will buy Enterprise + partner hosting) in exchange for AGPL inspectability and no vendor-held file tenancy

Poor fit when

  • Buyers who need a fully managed multi-region SaaS with the vendor running HA, support, and compliance certs as the data processor
  • Use cases that only need peer-to-peer folder sync without a central app server (evaluate Syncthing)
  • Orgs unwilling to size Talk High Performance Backend, Office concurrency, backups, and upgrade windows
  • Teams expecting end-to-end encryption on every Hub workflow by default without configuration trade-offs

Consider instead when

  • When: You mainly need fast file sync/libraries without Talk, Groupware, Office, and AI

    Consider: Seafile

    Seafile is lighter on collab suite surface area; Nextcloud is broader Hub.

  • When: You want decentralized P2P sync with no mandatory central collaboration server

    Consider: Syncthing

    Different architecture—no Hub apps or share-policy model like Nextcloud.

  • When: You need zero-ops global SaaS productivity with vendor-operated tenancy

    Consider: Microsoft 365 or Google Workspace

    Higher extraterritorial/process exposure via US vendors; far less self-host control.

reeqee

Best fit when

  • German-speaking accounting, tax, controlling, or SME operators querying CSV/XLSX exports without SQL skills
  • Teams that want row data to stay in the browser and only send schema plus questions to an EU LLM
  • Buyers who need a narrow analysis tool beside Excel/DATEV exports rather than a full office suite
  • Organisations that prefer German-law B2B contracting with Berlin-based sole-trader operation and Hetzner DE hosting

Poor fit when

  • Teams that need collaborative spreadsheet authoring, macros, or a full Microsoft 365 / Google Workspace replacement
  • Workloads that require server-side data warehouses, scheduled pipelines, or multi-tenant governed datasets
  • Buyers that require ISO 27001, SOC 2, or an independent no-logs/security audit before shortlisting
  • Consumer or personal use cases (AGB limit the offer to entrepreneurs and public-law entities)

Consider instead when

  • When: You need a full European spreadsheet client for creating and editing workbooks offline

    Consider: LibreOffice

    LibreOffice is an office suite, not a text-to-SQL assistant.

  • When: You need EU file sync, sharing, and office collaboration rather than ad hoc CSV questioning

    Consider: Nextcloud

    Complementary stack: store in Nextcloud, analyse exports in reeqee if the AI path fits.

  • When: Analysts already live in Excel/Sheets and only need formulas, Power Query, or pivot tables

    Consider: Microsoft 365 Excel or Google Workspace Sheets

    Stay in the incumbent suite if natural-language German querying is not the bottleneck.

Open questions for due diligence

Nextcloud

  • Which infrastructure (on-prem, EU hoster, or hyperscale) will run the production instance and object storage, and what subprocessors does that path introduce?
  • Is Enterprise subscription required for your SLA, LTS, Talk HPB, Office concurrency, and Microsoft connectors?
  • Will counsel treat Nextcloud GmbH as a processor for any support, push, telemetry, or managed-service path in your architecture?
  • Do you need current third-party penetration testing or certification evidence beyond historic NCC/Kyos materials and the bug bounty?
  • If enabling Assistant/AI, which model backend is used and how is it classified under the EU AI Act?

reeqee

  • Will the vendor sign a customer DPA and provide a complete subprocessor list including backup/DR?
  • Is there an independent review of the browser build proving row data never leaves the client?
  • Which exact Mistral model/endpoint is used, and how are prompt logs retained on Mistral's side?
  • Which renewal and cancellation terms govern paid plans when pricing page and AGB wording diverge?
  • Are there documented row/size limits for DuckDB-WASM on typical office laptops?