# Secure Nextcloud. Secured and looked after. Source: https://vetosec.at/en/solutions/managed-nextcloud/ Files are scattered across laptops, private cloud accounts and email attachments. With our Nextcloud your team has one shared place, hosted on-prem or in the EU. Anyone who repeatedly fails to sign in is blocked automatically. - **Auto-block** on failed logins - **SSO** with MFA - **Hosted** on-prem or in the EU ## What changes for you - **Files in the office, at home and on the phone**: In the office, at home and on the phone. The sync client puts files into Explorer or Finder as usual. - **Share safely by link**: Links with password and expiry, large files included. Confidential files stay on your server. - **Co-edit**: Edit documents and spreadsheets in the browser without sending files back and forth. - **Restore deleted files**: Versions and the trash bin bring back overwritten or deleted files in seconds. ## What runs behind it - [**Attackers are blocked automatically**](https://vetosec.at/en/services/monitoring/): Repeated failed logins and suspicious requests block the source immediately. Every block lands in our monitoring, and the server itself is hardened to a recognised baseline. - [**One sign-in with MFA**](https://vetosec.at/en/solutions/single-sign-on/): Connected to your single sign-on. Disable one account when someone leaves and access is gone. - **Separated for confidential data**: Optionally a private instance reachable only via VPN and a public one for outsiders, linked by federation. Confidential files never sit where outsiders have access. - [**Offsite backup**](https://vetosec.at/en/solutions/backup/): Daily encrypted backup to a second site, restores tested on a schedule. [How we build in general](https://vetosec.at/en/how-we-build/) ## Protection for sensitive data On request, depending on how confidential your data is. - [**Private instance only via VPN**](https://vetosec.at/en/solutions/fernzugriff-vpn/): The Nextcloud for confidential data is unreachable from the internet. Your team connects via remote access, signed in per person and device. - **Public instance for outsiders**: A separate instance handles exchange with clients and partners. Both are linked by federation, so your team works from one interface. - **End-to-end encryption**: Especially confidential folders are encrypted on the devices. Even the server only sees encrypted data. - **Encrypted team folders**: Folders per department or project, with centrally assigned rights and encrypted storage. Whoever leaves the team loses access. - **Automatic deletion by tag**: Files with a retention tag are deleted automatically when the period ends. Your GDPR deletion policy runs by itself. - **Rules for sharing and access**: Links only with password and expiry, certain folders only from the company network, external sharing only for authorised groups. - **Virus scan on upload**: Every uploaded file is checked before it reaches the team. - **Log of every access**: Who opened, changed or shared which file and when. That helps in audits and in an incident. ## What it looks like - Sign-in: Your Nextcloud with your logo. Staff sign in via your single sign-on. - Files: Share folders internally, with outsiders by link, or with another Nextcloud via federation. ## Proof of Concept **Try Nextcloud before you switch.** We provide a Nextcloud to try out. Your team tests storing, sharing and editing with its own files and decides afterwards. Request a PoC ## Service or project **We run it for you, or your team takes over.** As a managed service for a fixed monthly price, with updates, backup and monitoring. Or as a project with handover of network plan, runbook and all credentials. ## For IT leads Technical details: Nextcloud · Authentik · ZFS · NetBird - **Application**: Nextcloud in containers on hardened Linux, new versions tested in staging first. - **Authentication**: Authentik via OpenID Connect, MFA via TOTP, WebAuthn or passkey. - **Brute-force protection**: Automatic blocking of the source on failed logins and suspicious requests, every event in the SIEM. - **Network separation**: Private instance only via VPN (NetBird), public instance for outsiders, linked by federated cloud sharing. - **Encryption**: TLS on every connection, encrypted team folders, end-to-end encryption for selected folders. - **Storage**: ZFS with checksums and snapshots. - **Retention and audit**: Deletion after a retention period by tag, log of opening, editing and sharing. - **Backup**: Daily, encrypted to a second site, restores tested on a schedule. - **Hosting**: On your premises or in a data centre in the EU. ## Further reading More on the topic - [**Nextcloud**](https://vetosec.at/en/it-security/nextcloud/): Nextcloud is open source software for file storage, sync and collaboration, comparable to Dropbox, OneDrive or Google Drive. - [**Cloud security**](https://vetosec.at/en/it-security/cloud-sicherheit/): In the cloud responsibility is shared. - [**Souveräne EU-Cloud: Was die großen Anbieter garantieren und was Sie selbst prüfen müssen**](https://vetosec.at/en/articles/it-wissen/souveraene-eu-cloud/): Ein EU-Rechenzentrum ist keine Datenhoheit. - [**Souveräne Daten: Was Datenhoheit in Österreich wirklich bedeutet**](https://vetosec.at/en/articles/dsgvo/souveraene-daten-datenhoheit-oesterreich/): Datenhoheit ist kein Flaggen-Download: Zugriff, Schlüssel, Rechtszugriff und Ausstieg entscheiden. ## Frequently asked questions ### What is Nextcloud? Nextcloud is open source software for file storage, sync and collaboration, developed in Germany. It runs on your own servers instead of a US provider's cloud. ### Can we separate confidential and shared data? Yes. For sensitive data we run a private Nextcloud reachable only via VPN and a public one for exchange with outsiders. Both are linked by federation so your team works from one interface. ### Where is our data stored? In a data centre in the EU or the EU, or on a server in your building. We decide together. ### Who do you offer this to? For regulated companies, professions bound by confidentiality and anyone processing sensitive data, and for companies of about 30+ staff with critical systems. ## Related - [Solutions](https://vetosec.at/en/solutions/): Nextcloud, SSO, backup, clusters - [Managed services](https://vetosec.at/en/services/managed-services/): fixed price per service - [How we build](https://vetosec.at/en/how-we-build/): security and backup standards ## Managed Nextcloud, security first, for businesses in Austria vetosec runs Nextcloud as a managed service for businesses in Austria, a GDPR-friendly alternative to OneDrive, Dropbox and Google Drive. Updated: October 19, 2026 Provider: vetosec, Dipl.-Ing. Samuel Ziegler, BSc, Berndorf, Lower Austria, Austria. Contact: https://vetosec.at/en/contact/