Nextcloud vs Vidanis

Compare Nextcloud and Vidanis on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Dropbox, Google Drive, OneDrive

Nextcloud

Germany· Cloud Computing

Needs review

Shortlist Nextcloud when you need an AGPL self-hosted Hub (files, Talk, groupware, office, optional local AI) under German vendor ownership and operator-controlled residency. Skip when you want zero-ops multi-tenant SaaS — prefer Google Workspace/Microsoft 365 — or mainly need lightweight P2P sync (Syncthing) or file-sync without a full collab suite (Seafile).

EU-operated vendorOpen source (AGPLv3)Self-hostedFull collab HubOptional E2EEEnterprise support

View listing Visit Website

Vidanis

Estonia· Office Productivity Suite

Needs review

Shortlist when you want a European-entity consumer companion for multilingual labs and letters and can accept waitlist timing plus unfinished assurance paperwork. Skip when you need a live product, a signed DPA with named subprocessors, MDR-cleared clinical software, or self-hosting today. Consider Nextcloud (self-host) or incumbent drives for storage-only needs meanwhile.

EU-operatedAI health recordsMultilingual documentsPre-launch waitlistNot a medical device (claimed)

View listing Visit Website

Highlighted rows differ between the two products.

Nextcloud vs Vidanis: Snapshot
Feature	Nextcloud	Vidanis
Country of origin	Germany	Estonia
Category	Cloud Computing	Office Productivity Suite
Open source	Yes	No
Self-hosted	Yes	No
Headquarters	Germany	Estonia
Legal entity	Nextcloud GmbH (HRB 227086, AG München; VAT DE307093598)	DentroInnovation OÜ (registry 16799548, VAT EE102653070)
Governing law	Germany	Terms refer to the jurisdiction in which Vidanis operates without naming a court; imprint is Estonia.
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Low	Medium
EU-hosted status	Not listed	Partial
Hosting / residency	Primary product path: customer or partner operates the instance (on-prem or chosen hoster). Nextcloud GmbH states it does not offer Nextcloud hosting for others and designs the software so user content is not sent to the vendor. Optional customer-configured backends (S3/SWIFT, SharePoint, SMB, etc.) and partner-managed hosting introduce those providers' regions and subprocessors. Website/CRM tools (e.g. Matomo, embedded video) apply to nextcloud.com, not Hub file data.	Privacy policy claims health data stored on servers in Germany (EU). Marketing site vidanis.com resolved to Hetzner Online GmbH (AS24940, Falkenstein, DE) during research. Privacy also allows anonymized AI queries to unnamed AI service providers. No public subprocessor register.
Summary	Open-source, self-hosted content collaboration Hub from Nextcloud GmbH (Germany): Files, Talk, Groupware, Office, local AI Assistant, and Flow—an on-prem alternative to Microsoft 365-style suites.	Estonian-operated AI health companion (pre-launch waitlist) that organises labs, letters, and scans into a timeline with plain-language explanations.
Tags	privacy cloud open-source self-hosted enterprise productivity collaboration agpl file-sync	privacy ai health gdpr personal-health-record waitlist

At a glance: Nextcloud vs Vidanis
At a glance	Nextcloud	Vidanis
HQ	Stuttgart, Germany (Nextcloud GmbH)	Tallinn, Estonia (DentroInnovation OÜ)
License	AGPLv3 (server); fully open source per vendor	Not listed
Deployment	Self-host or partner-host; vendor does not multi-tenant host files	Not listed
Commercial model	Free community software; seat-based Enterprise subscriptions	Not listed
Hub apps	Files, Talk, Groupware, Office, Assistant, Flow	Not listed
Founded	2016 (ownCloud fork)	Not listed
Status	Not listed	Pre-launch waitlist
Model	Not listed	Consumer subscription (Essentials / Complete)
Self-host	Not listed	No
Open source	Not listed	No public repo found

Key capabilities: Nextcloud vs Vidanis
Key capabilities	Nextcloud	Vidanis
EU-operated vendor	Yes	Yes
Open source (AGPLv3)	Yes	Not listed
Self-hosted	Yes	Not listed
Full collab Hub	Yes	Not listed
Optional E2EE	Yes	Not listed
Enterprise support	Yes	Not listed
AI health records	Not listed	Yes
Multilingual documents	Not listed	Yes
Pre-launch waitlist	Not listed	Yes
Not a medical device (claimed)	Not listed	Yes

Nextcloud

Nextcloud Hub: Files, Talk, Groupware, Office, Assistant, Flow
One self-hosted platform rather than a file-sync bolt-on: Files for sync/share and external storage; Talk for on-prem chat/video (optional SIP); Groupware for calendar/contacts/mail; Office for browser co-editing; Assistant for local AI tasks; Flow for automation. Limit: Talk scale and Office concurrency need extra backends/licenses for large orgs—budget High Performance Backend and editor capacity explicitly.
Self-hosted private cloud with clients and WebDAV access
Run the server on Linux with MySQL/MariaDB/PostgreSQL; users access via web UI plus desktop (Windows/macOS/Linux) and mobile (Android/iOS) clients. External storage connectors cover NFS, SMB/Windows Network Drive, SharePoint, S3/SWIFT, FTP and more so existing file systems stay under IT policy. Limit: you own patching, backup, HA, and capacity planning unless a partner hosts the instance.
Enterprise identity, sharing controls, and audit trails
LDAP/AD, native SAML 2.0, OpenID Connect, Kerberos, enforced MFA (TOTP, WebAuthn and others), password policies, file access control rules (IP, group, type, time), passworded/expiring shares, File Drop, video verification, remote wipe, and compliance-oriented activity logs. Benefits regulated teams that must prove who accessed what without sending files to a third-party SaaS tenant.
Encryption layers: TLS, server-side, optional E2EE
TLS for transport; optional AES-oriented server-side encryption for data at rest (including object storage scenarios); optional per-folder client-side end-to-end encryption with a published design whitepaper and enterprise options such as recovery keys/HSM identity issuance. Limit: E2EE is not a magic default for all Hub features—evaluate which apps and workflows remain usable when folders are E2EE-encrypted.
AGPLv3 open source with Enterprise support subscriptions
Server source is AGPLv3 on GitHub; Nextcloud states it does not ship proprietary open-core product modules. Community use is free; Enterprise plans (Standard/Premium/Ultimate) are seat-based subscriptions from a stated minimum user tier, buying support SLAs, longer maintenance, early patches, Guard, Global Scale options, and commercial connectors. Choose Enterprise when uptime and vendor SLAs matter more than pure DIY ops.
Local AI Assistant without mandatory cloud LLM tenancy
Assistant integrates summarization, translation, context chat over your data, and generation features inside Hub, designed to run with self-hosted or partner AI backends rather than forcing content into a public consumer AI product. Limit: model quality, GPU/CPU cost, and AI Act classification depend on how you deploy the models—treat AI as an optional module with its own DPIA.

Vidanis

Ingest labs, letters, and scans
Marketing and FAQ describe upload via PDF or photo, plus forwarding results by email. Vidanis then claims to read and file each document automatically, whether one report or many years of history. Live connectors to specific lab portals are not documented yet beyond a high-level 'connect a provider' mention.
Continuous medical timeline
The product story centres on sorting results, dates, and sources into one timeline so appointments are not reconstructed from memory. This is the Essentials-tier promise on the pricing section: organised storage and readability without the deeper companion features.
Plain-language and multilingual explanations
Site copy says each result can be explained in everyday language and that lab reports or letters from another country or language can be translated and explained. Exact language coverage and clinical-safety review process are not published.
Trends, chat, and appointment prep
The Complete plan is described as chat grounded in the user's records, pattern detection across years, and one-page appointment summaries with suggested questions. These capabilities are waitlist promises, not independently demoable today.
Export and deletion controls
Privacy and FAQ state users can export complete health data anytime and that account deletion permanently removes data within 30 days. Encryption in transit and at rest is claimed; no public audit of those controls was found.

Assurance & compliance: Nextcloud vs Vidanis
Assurance & compliance	Nextcloud	Vidanis
Independent security review / audit	Partial Public third-party signals include NCC Group review (historic Nextcloud 11 era) and Kyos code audit for Geneva; active bug bounty. Not a current continuous independent cert of every release or of your deployment.	Not found No public audit PDF or security whitepaper found.
ISO 27001	Not found Vendor describes alignment with ISO-style controls and notes customer deployments can pursue certification; no clear public claim that Nextcloud GmbH holds ISO 27001 for a multi-tenant SaaS product (they are primarily a software vendor).	Not found
SOC 2 / SOC 3	Not found No public SOC 2/3 report found for Nextcloud as a hosted collaboration SaaS; self-host model shifts assurance to the operator.	Not found
GDPR / EU data protection	Vendor claimed EU entity; privacy policy; Enterprise GDPR compliance kit (checklist, admin manual, data-request/ToS apps). Self-host design aims to avoid Nextcloud processing instance content—actual GDPR compliance depends on your hosting and configuration.	Vendor claimed EU entity; privacy policy references GDPR rights. Confirm DPA and records of processing at launch.
US CLOUD Act exposure (indicative)	Partial German GmbH, no known US parent, vendor does not host customer Hub content on self-host path → low vendor-as-host exposure. Partial because optional S3/partner hosting on US-group clouds reintroduces CLOUD Act via infrastructure. Not legal advice.	Partial Estonian entity / no known US parent, but unnamed AI service providers may introduce US-group exposure. Health-data host not named. Not legal advice.
Data processing agreement (B2B)	Partial For pure self-host software, vendor materials argue Nextcloud GmbH often is not a content processor. Enterprise support/sales process contact data; partner hosters and object-store providers need their own Art. 28 DPAs. Confirm with sales for your contract shape.	Not found No public DPA template located; product is consumer waitlist oriented.
EU AI Act	Not applicable Core product is content collaboration software. Optional local Assistant/AI modules may need separate AI Act classification depending on models and use—handle in deployment DPIA, not as the product category default.	Unknown AI-centric health explanations; no public AI Act classification or risk documentation found. Terms disclaim medical-device status.
MDR / medical device	Not listed	Vendor claimed Terms: not a medical device; informational use only.

Considerations & known limitations: Nextcloud vs Vidanis
Considerations & known limitations	Nextcloud	Vidanis
Operator owns uptime, upgrades, and scale	Medium Self-host (or partner-host) means you or a hoster must run backups, HA, Talk HPB, Office capacity, and security updates. Community installs without Enterprise SLAs leave incident response on your team.	Not listed
Hosting/object-store choice can reintroduce US cloud risk	Medium Deploying Nextcloud on AWS/GCP/Azure or primary S3 in a US-group region shifts residual CLOUD Act/process risk to that provider even though Nextcloud GmbH is German and does not hold the data as SaaS host.	Not listed
E2EE is optional and feature-constrained	Medium End-to-end encryption is not on by default for all Hub data; enabling it can limit some collaborative features. Academic research has scrutinized designs in this space—validate the version you ship against your threat model.	Not listed
Certifications apply to full deployments	Low ISO/HIPAA/CFR-style compliance is achieved (or not) by the complete stack you operate. The downloadable software is not itself a turnkey certified SaaS environment.	Not listed
App Store apps are not fully code-reviewed by Nextcloud	Low Privacy policy notes limited capacity to review all third-party apps; misuse policy exists but admins should vet apps before production install.	Not listed
Pre-launch waitlist only	Not listed	High No generally available product, admin console, or production security pack to diligence yet. Capabilities are vendor marketing.
Unnamed AI and hosting subprocessors	Not listed	High Privacy admits third-party AI processing for anonymized queries and claims German storage without naming operators. CLOUD Act and residency reviews cannot close without that list.
No public independent audit	Not listed	Medium Encryption and non-training claims are vendor statements only.
Estonian register deletion-notice banner	Not listed	Medium e-Business Register showed a deletion-notice warning while status remained registered with recent filings. Confirm current corporate status before relying on the entity.
Informational AI only	Not listed	Medium Explicit non-device disclaimer; unsuitable as clinical decision support without a different regulatory pathway.

Fit

Nextcloud

Best fit when

Public sector and regulated orgs that must keep content on-prem or in a chosen EU private cloud rather than a US hyperscale SaaS tenant
Enterprises replacing SharePoint/OneDrive-style exchange while keeping LDAP/SAML, audit logs, and file access policies
MSPs and hosters offering branded private-cloud collaboration on their infrastructure
Education and research campuses that want Hub apps (Files, Talk, Office) under institutional IdP and storage
Teams that accept ops ownership (or will buy Enterprise + partner hosting) in exchange for AGPL inspectability and no vendor-held file tenancy

Poor fit when

Buyers who need a fully managed multi-region SaaS with the vendor running HA, support, and compliance certs as the data processor
Use cases that only need peer-to-peer folder sync without a central app server (evaluate Syncthing)
Orgs unwilling to size Talk High Performance Backend, Office concurrency, backups, and upgrade windows
Teams expecting end-to-end encryption on every Hub workflow by default without configuration trade-offs

Consider instead when

When: You mainly need fast file sync/libraries without Talk, Groupware, Office, and AI
Consider: Seafile
Seafile is lighter on collab suite surface area; Nextcloud is broader Hub.
When: You want decentralized P2P sync with no mandatory central collaboration server
Consider: Syncthing
Different architecture—no Hub apps or share-policy model like Nextcloud.
When: You need zero-ops global SaaS productivity with vendor-operated tenancy
Consider: Microsoft 365 or Google Workspace
Higher extraterritorial/process exposure via US vendors; far less self-host control.

Vidanis

Best fit when

Individuals or privacy-conscious teams watching European consumer health-record AI before launch
Users who receive labs and letters across languages and want one explained timeline
Buyers who require an EU legal entity on the imprint rather than a US consumer health stack
Early adopters comfortable joining a waitlist and re-checking subprocessors at GA

Poor fit when

Anyone needing a generally available product with production SLAs this quarter
Clinical deployments that require MDR/IVDR medical-device software
Organisations that must see a public subprocessor list, DPA, and independent audit before pilot
Teams that need self-hosted or on-device processing only

Consider instead when

When: You only need encrypted document sync today without medical AI
Consider: Nextcloud (self-host) or Dropbox / OneDrive / Google Drive
Mature export and admin; no Vidanis-style medical NLP
When: You need a live EU collaboration suite rather than a health-record companion
Consider: Nextcloud or Stackfield
Different category; useful stopgaps until Vidanis ships assurance docs

Open questions for due diligence

Nextcloud

Which infrastructure (on-prem, EU hoster, or hyperscale) will run the production instance and object storage, and what subprocessors does that path introduce?
Is Enterprise subscription required for your SLA, LTS, Talk HPB, Office concurrency, and Microsoft connectors?
Will counsel treat Nextcloud GmbH as a processor for any support, push, telemetry, or managed-service path in your architecture?
Do you need current third-party penetration testing or certification evidence beyond historic NCC/Kyos materials and the bug bounty?
If enabling Assistant/AI, which model backend is used and how is it classified under the EU AI Act?

Vidanis

Which legal entities and regions host production health data, backups, and email ingest?
Which AI model providers receive anonymized queries, and are any US-group processors?
Will DentroInnovation OÜ publish a subprocessor list and sign a B2B DPA at launch?
What is the meaning of the Estonian Business Register deletion-notice banner for registry 16799548?
Planned GA date, MDR assessment outcome, and language coverage for medical OCR/NLP?