Google Workspace and Microsoft 365, replaced by a platform you actually control: Nextcloud is the self-hosted digital workspace. Files is the core: file storage and sync across desktop, mobile, and web clients, with sharing, versioning, and collaboration built in. Around it, Talk provides private text chat, audio/video conferencing with screen sharing, SIP integration, and persistent voice rooms; Groupware bundles calendar, contacts, and mail with delegation support; and Office offers two collaborative suites - the Collabora-based option with deep ODF support, and Euro-Office, whose local-processing architecture delivers strong Microsoft Office compatibility and fast browser rendering with reduced server load. The Nextcloud Assistant threads AI through the platform via a context-aware sidebar, Whiteboard covers visual collaboration, Flow handles automation, and an app ecosystem of hundreds of extensions adds everything from Kanban boards to end-to-end encryption. Hub 26 brings a lighter UI with a unified app switcher and Nextcloud Governance for organizations under strict regulatory requirements. This is the flagship of data sovereignty: your files, chats, calendars, and documents live on your server, under your jurisdiction, with GDPR compliance by architecture rather than by contract.

The project that proved organizations could have Dropbox-style convenience with complete data ownership: ownCloud is the original open-source file sync and share platform - the codebase Nextcloud later forked from. This deployment runs the classic ownCloud Server (PHP over PostgreSQL or MariaDB, with Redis caching), the battle-tested edition trusted across enterprises, universities, and public institutions worldwide. The core loop: store files on your server, sync them via desktop clients for Windows, macOS, and Linux plus iOS and Android apps, and access everything through the web interface or standard WebDAV. Sharing is granular - internal users and groups, external recipients via public links with passwords and expiration dates, and federated sharing that connects separate ownCloud instances into one network. Security controls include file firewall rules, multi-factor authentication, encryption, and detailed audit-friendly lifecycle management with versioning and trash-bin recovery. An app marketplace extends the platform, and Web Office integrations bring collaborative document editing through Collabora Online, OnlyOffice, or Microsoft Office Online directly into your files. LDAP and Active Directory integration slots it into existing identity infrastructure. For teams that need a proven, self-hosted alternative to Dropbox or Google Drive - where compliance demands knowing exactly which disk your data sits on - ownCloud remains a foundational choice.

With over 1,200 GitHub stars, 12,000+ commits, and more than a decade of active development distributed under the AGPL-3.0 license, Cozy Cloud operates as a comprehensive personal data hub that goes far beyond file storage by connecting your documents, contacts, calendars, banking transactions, energy bills, and productivity tools into a single self-hosted platform where no third party profiles you. The cozy-stack Go binary handles file storage, CouchDB document management, job scheduling, app serving, and the REST API in a single process consuming approximately 150MB of RAM idle. Sandboxed konnectors import data from 50+ external services — banks, utility providers, telecom operators, cloud drives — running as isolated jobs via nsjail to prevent untrusted code from accessing other user data. The built-in app store serves web applications in subdomain-isolated environments with Content Security Policy headers, each app communicating exclusively through the documented REST API. Real-time synchronization via PouchDB replication and WebSocket keeps files, contacts, and documents consistent across desktop clients, mobile apps for iOS and Android with automatic photo backup, and the web interface. Security features include automatic Let's Encrypt TLS certificates, Argon2id password hashing, optional TOTP two-factor authentication, and GDPR-compliant data export via the CLI. Each user receives their own isolated instance with independent storage, database, and application configuration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

A personal cloud does not need the weight of a small enterprise suite, and bewCloud proves it by keeping files, photos, notes, contacts, and calendars in one compact service a single person can run for a whole household. The Files app stores uploads in a plain folder tree on disk, offers public sharing links, optional whole-folder downloads as zip archives, and a WebDAV endpoint that desktop tools can mount. Photos turns that same storage into a browsable gallery, while Notes keeps quick text within reach of every login. Contacts and Calendar speak CardDAV and CalDAV through a bundled Radicale server, so the calendar and address book on a phone or laptop stay in sync without another account anywhere. News collects feeds to read in the browser, and Expenses tracks spending in a small ledger beside everything else. The header shows only the apps you enable, in the order you choose, and companion desktop and mobile apps connect to the same server for people who prefer native sync. Accounts can be protected with multi-factor authentication using TOTP, passkeys, or email codes, and optional single sign-on lets a household sign in through an existing identity provider. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

OxiCloud is a self-hosted cloud for files, photos, calendars, contacts, and office documents. Drives can be personal or shared, with configurable storage quotas. Multi-gigabyte uploads travel as parallel, resumable chunks with integrity verification. Images, PDFs, audio tracks, and video streams preview right in the browser, and photos show EXIF details and map locations. Files sync over WebDAV. Calendars sync over CalDAV. Contacts sync over CardDAV. Desktop file managers, Thunderbird, Apple Calendar, and mobile DAVx5 clients connect without proprietary software. Collabora Online or OnlyOffice plug in through WOPI for real-time co-editing of spreadsheets, presentations, and text documents. Administrators enforce role-based access controls. Sign-in runs through OpenID Connect providers such as Keycloak, Authentik, or Azure AD. Public share links can carry a password and an expiration. Identical files are stored once, and adaptive compression keeps footprints compact. Local disks, Amazon S3, and Azure Blob can be mounted at the same time, with live background migration and automated consistency checks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Organizations seeking complete data sovereignty over their documents, spreadsheets, and shared project folders can deploy OpenCloud as a self-hosted workspace for file sync, sharing, and real-time collaboration across web, desktop, iOS, and Android clients. Teams organize departmental assets inside dedicated Spaces where files belong to the project rather than individual user accounts, ensuring continuity when personnel change and enabling delegated space managers to assign granular read, edit, or upload permissions. Through built-in WOPI integration with Collabora Online, multiple colleagues can co-edit Microsoft Office and OpenDocument files simultaneously in the browser with automatic conflict locking and version history recovery. External partners and clients can access files via password-protected public links with custom expiration dates or upload deliverables into write-only File Drop folders without seeing existing directory contents. Cross-organization collaboration works seamlessly over the Open Cloud Mesh federation protocol, while full-text and tag-based search locates documents across personal and shared drives in seconds. Client devices synchronize changes in real time with support for virtual files on demand, resumable chunked uploads, and offline mobile access with camera document scanning. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Jmal Cloud is a self-hosted private cloud drive that keeps your files on your own server, with online previews, resumable uploads, full-text search, and WebDAV access. The web manager previews photos, videos, Office documents, PDFs, EPUB books, and even CAD DWG drawings in the browser, then puts recently modified files, favorites, shared folders, and a trash bin a click away. Huge uploads resume from the exact chunk that stopped, while full-text search drills into text, PDFs, and Office documents when filenames fail you. Connect Alibaba Cloud OSS, Tencent Cloud COS, or MinIO as storage backends and browse every bucket through the same folders. Wire in a self-hosted OnlyOffice Document Server and draw.io to edit Word, Excel, and PowerPoint files and sketch flowcharts or mind maps without leaving the drive. Mount the library as a local network drive over WebDAV, share folders through links for upload and download, and push scheduled backups with the Rust jmalcloud CLI. Packages and Docker images cover Ubuntu, Debian, CentOS, Fedora, and Arch on x86_64 and ARM64, and the interface speaks English, Chinese, and Japanese. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

FolderHost turns a folder on your server into a private cloud that you and your team reach from any browser, with the whole platform shipping as one executable of about 19MB and zero dependencies to install. Upload, download, move, copy, rename, archive, and extract files through a familiar explorer interface, with chunked uploads that survive big transfers and a recovery bin that keeps accidental deletions restorable within limits you set. Code files open in a real editor where several people can type at once, which makes it a surprisingly handy way to tweak server configs or a game server's files together live. Long-running programs can be registered as services and started, stopped, and driven from a built-in terminal that shows live uptime and memory use. Accounts come with granular permissions for every action, optional folder scopes that confine a user to one directory tree, and per-instance storage quotas. Every activity lands in audit logs you can review and auto-expire, sessions use short-lived tokens tied to the login device, and TLS can be self-signed for a LAN or issued through Let's Encrypt for a public domain. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

SilentSuite is an end-to-end encrypted sync service for your calendar, contacts, and tasks, where the server stores only ciphertext and cannot read a single event, name, or plan. Encryption happens on your devices with keys derived locally, so record contents are sealed before upload and opened only on another trusted device of yours. Manage everything in the web app, sync a phone through the Android adapter's system calendar, contacts, and task providers, or connect desktop apps like Thunderbird and GNOME Calendar through the local Bridge. The Bridge speaks CalDAV and CardDAV only on localhost, then forwards encrypted records upstream, so standard desktop clients work without ever exposing plaintext to the server. Import and export keep exit paths open, and because sync rides the open Etebase protocol, your data model stays inspectable rather than locked into a proprietary format. Self-hosting unlocks every feature at no cost: one Compose file starts the sync server and PostgreSQL, with open registration you can close after your own account exists, nightly backup tooling, and Umbrel packaging. Signing up hosted users is not required at all; the same web app, Android adapter, and Bridge run against your own server with your domain. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

End-to-end encrypted by design, CryptPad is a real-time office suite where teams write documents, plan on kanban boards, collect answers with forms, and draw diagrams without the hosting server ever seeing their content. Rich text pages come with comments, replies, @mentions, and a document outline, while the Markdown editor adds a live preview, Mermaid diagrams, mind maps, and math. Kanban columns hold colored, tagged cards with Markdown bodies, and the diagram editor exports PNG, JPG, SVG, or PDF. Optional ONLYOFFICE editors add spreadsheets, word-processing documents, and presentations that several people can edit together. The form builder offers text, choice, grid, date, ranking, and poll questions, conditional sections, and separate author, auditor, and participant roles. Documents can be shared with contacts or teams, by link, or as embed code, with view, edit, present, or view-once access. Passwords, expiry dates, owner lists, and access lists limit who gets in, and every edit lands in a history you can step through, restore, or pin as a named snapshot. CryptDrive keeps files in folders, tags, templates, and a trash bin, while teams get their own drive, chat, and member roles. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Moving a 40 GB video from your laptop to three colleagues takes a shared link instead of a cloud upload when FileSync sends it from one device to many in real time, straight between browsers, from a server you host yourself. Open a room, share its link or QR code, and everyone inside can send, receive, and download everything as a zip. The files travel directly between browsers over encrypted connections while the server only introduces the devices to each other, so your documents never sit on someone else's disk. A verification key rides inside the link itself and is never sent to the server, proving the person who joined is the person you invited. Transfers stream to disk as they arrive, so file size is limited by storage rather than memory, and every file is checked with SHA-256 the moment it lands. Close a tab mid-transfer and the download resumes from the last saved byte instead of starting over. You can send whole folders, paste straight from your clipboard, and coordinate through the built-in room chat while the files move. When two devices cannot connect directly, the included relay carries the traffic automatically, and rooms can ask for a password before anyone joins. Recipients need no account and install nothing; they open the link in any modern browser and start receiving. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Most file sharing leaves copies lying around forever; Tessera shares things with a built-in goodbye. Drop in a file, a whole folder, a code snippet, or a link and you get back a short code and a URL that anyone can open until it expires or hits the download count you set, at which point it is deleted. Expiry is checked on every request and each retrieval is counted atomically, so a one-time share cannot be raced by two people at once. Passwords can be required before anything is shown, code arrives syntax-highlighted, and images, SVGs, and diagrams preview in the page, with link cards when you paste the URL into chat. Uploads resume after interruptions and stream through the server without ballooning memory at any size. Behind the scenes you choose where bytes live: local disk, S3-compatible storage, Azure Blob, Google Cloud Storage, or WebDAV, several at once, added or retired from the admin panel without a restart. Accounts are optional for a home server, sign-in through OpenID Connect suits a team, and roles with per-account quotas decide who may upload, view everyone's shares, or change settings. Optional malware scanning, anonymous-upload caps, and rate-limited code lookups keep a public instance honest. A CLI and API tokens drive the same endpoints as the web app, so scripts can share and clean up exactly like people. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Matrix's flagship client, built by the protocol's creators: Element brings the decentralized open standard for real-time communication to web, desktop, iOS, and Android. Paired with a Matrix homeserver, it delivers Slack-quality team messaging where you own every message, file, encryption key, and byte of metadata. End-to-end encryption is on by default, built on Olm and Megolm - the Double Ratchet algorithm family Signal popularized, extended for large-room scalability and publicly audited by NCC Group. Messages encrypt per-device with cross-signed device verification, so even a compromised server yields nothing readable. Federation is the defining capability: like email, users on different homeservers converse seamlessly, and 30+ bridges connect Matrix rooms to Slack, Discord, WhatsApp, and Telegram, so moving to sovereign infrastructure doesn't sever contact with anyone. Rooms support threads, reactions, file sharing, and voice and video calls via Element Call. The result is digital sovereignty chosen by governments and enterprises across Europe: your data sits on your server in your jurisdiction, portable to any other Matrix host because the protocol is an open standard. Apache-2.0 licensed, with no per-user fees at any scale.

Families and small communities run their own messenger with Databag, where accounts live on a little home server and chats never pass through a platform company. Conversations live in topics instead of contact threads, so the ski trip, the shopping list, and the school parents each keep their own stream with unlimited participants. Seal a topic and end-to-end encryption means even you, the admin, cannot read it on the server. Friends on other Databag nodes join the same topics because accounts federate across servers, and identity comes from a public-private key pair rather than a phone number or a rented domain. Photos, videos, and files ride along in the thread, audio and video calls connect from the mobile and browser apps, and push alerts arrive through UnifiedPush, FCM, or APN when something new lands. The whole node sips resources, happily running on a Raspberry Pi class machine, and websockets deliver messages with low latency instead of polling. Host unlimited accounts for the whole household, protect sign-in with TOTP multi-factor authentication, and manage everything from apps on iOS, Android, F-Droid, or any browser. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Diaspora lets you run your own social network node that federates with thousands of others, creating a network with no central authority and no advertising engine mining your behavior. The defining feature is aspect-based sharing: organize contacts into groups like Family, Work, and Close Friends, then control exactly who sees each post with granularity that mainstream platforms have never matched. Hashtag-based discovery connects conversations across the entire federation regardless of which pod participants call home, building communities around topics rather than algorithmic engagement bait. The Ruby on Rails backend (now running on Puma with Sidekiq workers instead of the heavier Unicorn configuration) handles federation delivery, media processing, and notifications efficiently. Photo albums, video embedding, Markdown posts, mentions, reactions, and resharing provide familiar social primitives for rich communication. Cross-posting bridges to Twitter and Tumblr maintain your presence on legacy networks while your canonical data lives on your own infrastructure. With 13,700+ GitHub stars and 270+ contributors since its 2010 launch, Diaspora proved early that social media can work without surveillance capitalism. The Docker Compose deployment runs the application alongside PostgreSQL, Redis, Sidekiq workers, and Nginx, providing a production-ready pod for your community.