Nextcloud
Germany· Cloud Computing
Comparez Nextcloud et Stackfield sur les capacités, la juridiction, les garanties et l'adéquation pour les acheteurs européens.
Germany· Cloud Computing
Germany· Groupware
Needs review
Shortlist Stackfield when you need a German-operated all-in-one (chat + PM + meetings + docs) with optional client-side E2E rooms, Germany hosting, and a BSI C5 / ISO story for regulated teams. Skip when you need open-source DIY (prefer Nextcloud), Slack-scale app ecosystem depth, or pure secure messaging without project management (consider ginlo Business).
Les lignes surlignées diffèrent entre les deux produits.
| Caractéristique | ||
|---|---|---|
| Pays d'origine | ||
| Catégorie | Cloud Computing | Groupware |
| Open source | Oui | Non |
| Auto-hébergé | Oui | Oui |
| Siège | Non indiqué | Germany |
| Entité légale | Non indiqué | Stackfield GmbH, Maximiliansplatz 17, 80333 München, Germany |
| Maison mère / contrôle US | Non indiqué | Aucune maison mère US connue |
| Exposition CLOUD Act (indicative) | Non indiqué | Moyen |
| Hébergement / résidence | Non indiqué | Product data claimed stored in Germany; infrastructure provider IONOS SE (DE). Vendor states no AWS/GCP/Azure product subcontractors. Named EU processors: Inxmail (email, DE), Myra Security (edge protection, DE). Mobile push uses Apple APNs and Google push services (US platforms). Optional admin-enabled Giphy (US). Marketing site uses Google/Bing ads (not workspace content path). Optional customer-keyed external AI leaves Stackfield’s IONOS-hosted model path. |
| Résumé | Open-source, self-hosted content collaboration Hub from Nextcloud GmbH (Germany): Files, Talk, Groupware, Office, local AI Assistant, and Flow—an on-prem alternative to Microsoft 365-style suites. | German all-in-one collaboration suite (chat, tasks/projects, video, docs) with optional client-side end-to-end encryption and Germany-hosted cloud or commercial on-premise. |
| Tags |
| En un coup d'œil | ||
|---|---|---|
| HQ | Non indiqué | Munich, Germany |
| Legal entity | Non indiqué | Stackfield GmbH (HRB 199536) |
| Founded | Non indiqué | 2012 (vendor claim) |
| Hosting | Non indiqué | Germany; IONOS SE (vendor-named) |
| Deployment | Non indiqué | SaaS cloud + commercial on-premise |
| Open source | Non indiqué | No |
| Commercial model | Non indiqué | Seat-based plans; trial; AI/Office add-ons |
| Key capabilities | ||
|---|---|---|
| EU-operated (DE) | Non indiqué | Oui |
| Optional client-side E2E | Non indiqué | Oui |
| Germany hosting (IONOS) | Non indiqué | Oui |
| ISO 27001 + BSI C5 (claimed) | Non indiqué | Oui |
| Commercial on-premise | Non indiqué | Oui |
| Chat + PM + video | Non indiqué | Oui |
Synchronisation et partage sécurisés de fichiers
Synchronisation chiffrée de bout en bout sur tous les appareils, avec liens publics, permissions et dates d'expiration. Avantages : accès distant sécurisé sans fuite de données — idéal pour les équipes manipulant des fichiers sensibles.
Collaboration et bureautique en temps réel
Intégration de Collabora et OnlyOffice pour l'édition collaborative de documents. Talk permet chat et visioconférence. Productivité comparable à Google Workspace, mais auto-hébergée pour la confidentialité.
Groupware et suite de productivité
Calendrier, contacts, mail et tâches dans une seule application. Flow automatise les workflows ; Assistant utilise l'IA locale pour traductions et résumés. Centralise les outils et réduit la fragmentation applicative.
Optional client-side E2E rooms (AES-256 + RSA-2048)
Rooms and direct messages can add browser-side end-to-end encryption so Stackfield cannot read covered content at rest. Admins can force E2E, ban it, or let creators choose. Trade-offs include room-password recovery after login resets, limited lock-screen/email previews, and client-side search cost—plan org policy before migrating sensitive rooms.
Tasks, Gantt, portfolios, and workflows in the same rooms as chat
List/Kanban/Gantt views, milestones, dependencies, automatic scheduling, critical path, custom fields, time tracking, reports, and project portfolios sit next to room chat and discussions. Suited to PMOs that refuse a separate tool silo; less deep than specialist ALM suites for software engineering pipelines.
Video conferences, screen share, and guest/external roles
Built-in audio/video/screen-sharing (plan-dependent) plus guest and external roles that only see assigned rooms. Useful for law firms, agencies, and public-sector projects with outside counsel or contractors without granting full org access.
Germany cloud (IONOS) plus commercial on-premise
Cloud tenants store data in German data centres; Stackfield names IONOS SE as infrastructure provider and claims no AWS/GCP/Azure product subprocessors. On-premise is a paid subscription (vendor-installed/updated, high minimum seat count) for air-gapped or policy-bound estates—test first in cloud; local PoC installs are not offered.
Enterprise access controls and in-product DPA
Higher tiers add enforced 2FA (including YubiKey options), IP allowlists, password policies, SSO, API provisioning, org-wide exports, and compliance-confirmation workflows. Organisation admins can conclude the GDPR DPA inside settings and download the signed PDF once per organisation.
| Assurance & compliance | ||
|---|---|---|
| Independent security / no-logs audit | Non indiqué | Partial Vendor claims regular penetration tests and APPVISORY Trusted App for mobile; no public independent no-logs or full security audit report found. |
| ISO 27001 | Non indiqué | Vendor claimed Vendor states ISO 27001 (plus 27017/27018) with certificate download on security page; not independently registry-verified in this draft. |
| SOC 2 / SOC 3 | Non indiqué | Not found No SOC 2/3 claim found on primary security pages reviewed. |
| BSI C5 | Non indiqué | Vendor claimed Vendor claims BSI C5 attestation on homepage and security page; obtain current report in procurement. |
| GDPR / EU data protection | Non indiqué | Vendor claimed EU controller Stackfield GmbH; Germany hosting claims; in-product DPA; public privacy policy with processor list fragments. |
| US CLOUD Act exposure (indicative) | Non indiqué | Partial EU entity, no known US parent, core hosting claimed via IONOS DE without AWS/GCP/Azure. Residual paths: Apple/Google mobile push; optional Giphy; optional customer external AI. Assessment only—not legal advice. |
| Data processing agreement (B2B) | Non indiqué | Vendor claimed Organisation admins can conclude DPA inside Organisation Settings and download signed PDF; one DPA per organisation. |
| EU AI Act | Non indiqué | Not applicable Optional text-assist AI add-on; not an AI-centric product. Revisit if agents expand into high-risk use cases. |
| Considerations & known limitations | ||
|---|---|---|
| E2E is optional and irreversible per room | Non indiqué | Medium Without org policy, creators may leave sensitive rooms unencrypted. Encryption mode cannot be changed after creation; password recovery after login reset needs disciplined room-key handling. |
| Mobile push and optional US integrations | Non indiqué | Medium Privacy policy documents Apple/Google push for mobile notifications and optional Giphy (US). Even with German content hosting, notification metadata and optional GIF traffic can touch US platforms—document in DPIA. |
| Certifications vendor-asserted | Non indiqué | Low ISO and BSI C5 are claimed with a downloadable certificate; treat as claimed until your auditor verifies scope, dates, and which systems are in-bounds. |
| On-premise is commercial, not DIY open source | Non indiqué | Low Self-host means a paid on-prem product with vendor install/update and high seat minimums—not a free community edition. Budget implementation and support tickets accordingly. |
| AI features require content decryption for processing | Non indiqué | Medium Stackfield AI decrypts client-side content for the request path (then claims immediate deletion). External AI via customer keys is a separate transfer. Disable AI if zero-knowledge must never leave the client. |
Non indiqué
Non indiqué
When: You need open-source self-host and full operational control of files/collab apps
Consider: Nextcloud
More DIY ops; broader app ecosystem; different PM depth.
When: You mainly need regulated secure messaging, not Gantt/portfolios
Consider: ginlo Business
Messaging-first German B2B chat; thinner project suite.
When: You already run Microsoft 365 and identity is non-negotiable
Consider: Microsoft Teams (incumbent) or stay in M365 with EU data boundaries
Teams wins on suite lock-in; loses on independent German vendor + optional client E2E story.
When: You want lighter EU team chat without full PM suite
Consider: Fleep
Chat-centric; different residency/subprocessor profile—verify separately.
Non indiqué