Collaboration Platforms

Collaboration platforms provide file storage, synchronisation, document editing, and team productivity tools that enable distributed teams to work on shared content. These platforms combine cloud storage with real-time co-authoring capabilities, ranging from lightweight file sharing to comprehensive office suites with calendaring, email, and communication features.

This page covers integrated collaboration suites that combine file management with document creation and editing. Adjacent categories include Communication and Telephony for video conferencing and messaging, and Website and CMS for public-facing content management.

Assessment methodology

Tool assessments derive from official vendor documentation, published API references, release notes, and technical specifications as of 2026-01-11. Feature availability varies by product tier, deployment model, and region. Verify current capabilities directly with vendors during procurement. Community-reported information is excluded; only documented features are assessed.

Requirements taxonomy

This taxonomy defines evaluation criteria for collaboration platforms. Requirements are organised by functional area and weighted by typical priority for mission-driven organisations. Adjust weights based on specific operational context.

Functional requirements

Core capabilities that define what the platform must do.

File storage and synchronisation

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
F1.1	Desktop synchronisation client	Native application that synchronises files between local filesystem and cloud storage, maintaining offline access to selected folders	Full: clients for Windows, macOS, Linux with selective sync. Partial: limited platform support or no selective sync. None: web-only access.	Review client documentation; verify platform availability	Essential
F1.2	Mobile file access	Native applications for accessing, viewing, and editing files from mobile devices	Full: iOS and Android apps with offline caching and editing. Partial: view-only or limited editing. None: no mobile apps.	Check app store listings; review mobile documentation	Essential
F1.3	File versioning	Automatic retention of previous file versions with restoration capability	Full: configurable retention period, version comparison, granular restore. Partial: limited versions or time-based only. None: no versioning.	Review versioning documentation; test restoration process	Essential
F1.4	Conflict resolution	Handling of simultaneous edits to the same file from multiple clients	Full: automatic conflict detection, merge where possible, clear user notification. Partial: manual conflict resolution required. None: last-write-wins without notification.	Review sync documentation; test conflict scenarios	Important
F1.5	Large file handling	Support for files exceeding 5GB with chunked upload and resume capability	Full: documented support for files over 10GB with resumable uploads. Partial: support for 5-10GB with limitations. None: hard limit under 5GB.	Review file size limits in documentation; test upload behaviour	Important
F1.6	External sharing	Ability to share files and folders with users outside the organisation	Full: configurable link sharing, password protection, expiry dates, download limits. Partial: basic link sharing only. None: internal sharing only.	Review sharing documentation; test external access	Essential

Document editing

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
F2.1	Word processing	Creation and editing of text documents with formatting, styles, headers, footers, and tables	Full: comprehensive formatting, styles, track changes, comments. Partial: basic formatting only. None: plain text only.	Review editor documentation; test feature availability	Essential
F2.2	Spreadsheet editing	Creation and editing of spreadsheets with formulas, functions, charts, and data validation	Full: 400+ functions, pivot tables, conditional formatting, charts. Partial: basic formulas and formatting. None: no spreadsheet capability.	Review function documentation; compare to standard spreadsheet applications	Essential
F2.3	Presentation editing	Creation and editing of slide presentations with themes, transitions, and speaker notes	Full: master slides, animations, presenter view, export to PDF. Partial: basic slide creation. None: no presentation capability.	Review presentation documentation; test export options	Important
F2.4	Real-time co-authoring	Simultaneous editing by multiple users with live cursor tracking and conflict-free merging	Full: real-time sync under 2 seconds, visible cursors, automatic merge. Partial: near-real-time with periodic sync. None: file locking only.	Review collaboration documentation; test with multiple users	Essential
F2.5	Track changes	Recording and display of document modifications with accept/reject workflow	Full: per-change attribution, filtering by author, comparison view. Partial: basic change tracking. None: no change tracking.	Review track changes documentation; test workflow	Important
F2.6	Comments and annotations	Inline and margin comments with threading and resolution tracking	Full: threaded replies, @mentions, resolution status, notification. Partial: basic comments only. None: no commenting.	Review commenting documentation; test threading	Important
F2.7	Office format compatibility	Reading and writing Microsoft Office formats (DOCX, XLSX, PPTX) with formatting preservation	Full: high-fidelity import/export documented, complex formatting preserved. Partial: basic compatibility with formatting loss. None: native formats only.	Review format documentation; test round-trip with complex documents	Essential

Organisation and search

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
F3.1	Folder hierarchy	Nested folder structure for organising files with drag-and-drop management	Full: unlimited nesting, bulk operations, folder templates. Partial: limited depth or operations. None: flat file storage.	Review folder documentation; test hierarchy depth	Essential
F3.2	Full-text search	Search within file contents, not just filenames and metadata	Full: content indexing across all file types, advanced operators, filters. Partial: limited file types or basic search. None: filename search only.	Review search documentation; test content search accuracy	Essential
F3.3	Tagging and metadata	Custom labels and metadata fields for file organisation beyond folder structure	Full: custom tags, metadata fields, tag-based navigation. Partial: predefined tags only. None: no tagging.	Review tagging documentation; test custom metadata	Desirable
F3.4	Favourites and shortcuts	Quick access to frequently used files and folders	Full: favourites, recent files, custom shortcuts. Partial: recent files only. None: no quick access features.	Review navigation documentation; test quick access	Desirable

Team collaboration

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
F4.1	Shared workspaces	Dedicated areas for team collaboration with shared files and permissions	Full: team spaces, project folders, customisable permissions. Partial: shared folders only. None: individual storage only.	Review workspace documentation; test team setup	Essential
F4.2	Permission granularity	Fine-grained access control beyond simple read/write	Full: view, comment, edit, share, admin levels per item. Partial: read/write/admin only. None: binary access.	Review permission documentation; test access levels	Essential
F4.3	Guest access	Limited access for external collaborators without full accounts	Full: guest accounts with configurable permissions, expiry. Partial: link sharing only. None: full accounts required.	Review guest documentation; test external collaboration	Important
F4.4	Activity feeds	Visibility into recent changes and team activity	Full: per-file and per-folder activity, filtering, notifications. Partial: basic activity log. None: no activity tracking.	Review activity documentation; test feed granularity	Desirable

Technical requirements

Infrastructure, architecture, and deployment considerations.

Deployment and hosting

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
T1.1	Self-hosted deployment	Ability to deploy on organisation-controlled infrastructure for data sovereignty, compliance, or cost reasons	Full: complete feature parity with hosted version, documented deployment. Partial: self-hosted with feature limitations. None: SaaS only.	Review deployment documentation; compare feature matrices	Important
T1.2	Cloud deployment options	Availability of vendor-managed cloud deployment with regional options	Full: multiple regions including EU, documented data residency. Partial: limited regions. None: single region or undisclosed.	Review infrastructure documentation; verify regional availability	Important
T1.3	Container deployment	Support for containerised deployment using Docker or Kubernetes	Full: official images, Helm charts, documented orchestration. Partial: community images only. None: no container support.	Check Docker Hub, artifact registries, deployment documentation	Desirable
T1.4	High availability architecture	Support for redundant deployment eliminating single points of failure	Full: documented HA architecture, automatic failover. Partial: manual failover procedures. None: single-instance only.	Review architecture documentation; verify clustering support	Context-dependent
T1.5	Offline operation	Ability to work with cached files when network connectivity is unavailable	Full: full editing of cached files, automatic sync on reconnection. Partial: view-only offline. None: requires constant connectivity.	Review offline documentation; test disconnected usage	Important

Scalability and performance

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
T2.1	Storage scalability	Ability to scale storage capacity without service disruption	Full: documented scaling procedures, object storage support, no practical limits. Partial: scaling with downtime. None: fixed capacity.	Review scaling documentation; verify storage backends	Important
T2.2	User scalability	Support for growing user counts without performance degradation	Full: documented performance at 10,000+ users, horizontal scaling. Partial: performance degradation at scale. None: hard user limits.	Review performance documentation; check scaling guides	Context-dependent
T2.3	Bandwidth optimisation	Efficient use of network bandwidth for synchronisation	Full: delta sync, compression, bandwidth throttling. Partial: full-file sync with compression. None: no optimisation.	Review sync documentation; test bandwidth usage	Important
T2.4	Storage quotas	Configurable storage limits per user or group	Full: per-user, per-group, per-folder quotas with alerts. Partial: global quotas only. None: no quota management.	Review quota documentation; test configuration	Important

Integration architecture

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
T3.1	REST API availability	Programmatic access via REST API for integration and automation	Full: comprehensive API covering all features, versioned, documented. Partial: limited API coverage. None: no API.	Review API documentation completeness; compare to UI features	Essential
T3.2	WebDAV support	Standard protocol support for file access from third-party applications	Full: complete WebDAV implementation. Partial: read-only or limited operations. None: no WebDAV.	Review protocol documentation; test client compatibility	Important
T3.3	Webhook support	Ability to push event notifications to external systems	Full: configurable webhooks for file and user events, retry logic. Partial: limited events. None: polling only.	Review webhook documentation; check event coverage	Important
T3.4	WOPI protocol support	Web Application Open Platform Interface for office editor integration	Full: complete WOPI implementation enabling third-party editors. Partial: limited WOPI support. None: no WOPI.	Review WOPI documentation; test editor integration	Context-dependent
T3.5	Calendar and contacts	CalDAV and CardDAV protocol support for calendar and contact synchronisation	Full: complete CalDAV/CardDAV with shared calendars. Partial: basic support. None: no calendar/contacts.	Review protocol documentation; test client synchronisation	Context-dependent

Security requirements

Security controls and data protection capabilities.

Authentication and access control

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
S1.1	Multi-factor authentication	Support for MFA on user accounts	Full: TOTP, WebAuthn/FIDO2, push notification, enforced by policy. Partial: TOTP only. None: password only.	Review authentication documentation; test MFA methods	Essential
S1.2	Single sign-on integration	Support for federated identity via SSO	Full: SAML 2.0 and OIDC support, multiple IdP. Partial: single protocol or IdP. None: local auth only.	Review SSO documentation; check supported protocols and IdPs	Essential
S1.3	Password policies	Configurable password complexity and rotation requirements	Full: complexity rules, history, expiry, breach detection. Partial: basic complexity only. None: no policy enforcement.	Review password documentation; test policy configuration	Important
S1.4	Session management	Control over active sessions with timeout and revocation	Full: session listing, forced logout, configurable timeout, device management. Partial: basic timeout only. None: no session control.	Review session documentation; test management capabilities	Important
S1.5	IP-based restrictions	Ability to restrict access by IP address or range	Full: allow/deny lists, conditional access by location. Partial: global restrictions only. None: no IP restrictions.	Review access documentation; test restriction configuration	Desirable

Data protection

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
S2.1	Encryption at rest	Encryption of stored files and metadata	Full: AES-256, customer-managed keys option. Partial: platform-managed encryption only. None: unencrypted storage.	Review encryption documentation; verify key management	Essential
S2.2	Encryption in transit	Encryption of data during transmission	Full: TLS 1.3, HSTS, certificate pinning in clients. Partial: TLS 1.2. None: unencrypted transmission.	Review transport documentation; test connection security	Essential
S2.3	End-to-end encryption	Client-side encryption preventing server-side access to content	Full: zero-knowledge encryption with key recovery options. Partial: optional folder-level E2EE. None: server-side encryption only.	Review E2EE documentation; verify implementation	Context-dependent
S2.4	Data loss prevention	Policies to prevent unauthorised data exfiltration	Full: content inspection, sharing restrictions, alerts. Partial: basic sharing controls. None: no DLP capabilities.	Review DLP documentation; test policy enforcement	Context-dependent
S2.5	Ransomware protection	Features to detect and recover from ransomware attacks	Full: anomaly detection, mass-delete protection, point-in-time recovery. Partial: versioning only. None: no specific protection.	Review ransomware documentation; verify recovery options	Important

Compliance and audit

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
S3.1	Audit logging	Comprehensive logging of user and administrative actions	Full: all actions logged, exportable, tamper-evident. Partial: limited action types. None: no audit logging.	Review audit documentation; test log completeness	Essential
S3.2	Log retention	Configurable retention period for audit logs	Full: configurable retention, archival to external systems. Partial: fixed retention. None: no retention control.	Review retention documentation; test configuration	Important
S3.3	Compliance certifications	Third-party security and compliance certifications	Document certifications: SOC 2, ISO 27001, GDPR adequacy, sector-specific	Review trust centre; verify current certification status	Context-dependent
S3.4	Legal hold	Ability to preserve data for legal or regulatory requirements	Full: granular holds, custodian notification, hold release workflow. Partial: basic preservation. None: no legal hold.	Review eDiscovery documentation; test hold functionality	Context-dependent

Operational requirements

Administration, monitoring, and support considerations.

Administration

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
O1.1	Administrative console	Centralised interface for platform administration	Full: comprehensive web console, bulk operations, delegation. Partial: limited console functionality. None: command-line only.	Review admin documentation; test console capabilities	Essential
O1.2	User provisioning	Creation and management of user accounts	Full: bulk import, SCIM provisioning, lifecycle automation. Partial: manual creation only. None: self-registration only.	Review provisioning documentation; test bulk operations	Essential
O1.3	Group management	Organisation of users into groups for permission management	Full: nested groups, dynamic membership, LDAP sync. Partial: flat groups only. None: no group management.	Review group documentation; test nesting and sync	Important
O1.4	Delegated administration	Ability to delegate administrative tasks to non-global administrators	Full: role-based admin delegation, scoped permissions. Partial: all-or-nothing admin access. None: single admin role.	Review delegation documentation; test role assignment	Important
O1.5	Branding and customisation	Ability to customise appearance with organisation branding	Full: logo, colours, custom domain, login page. Partial: logo only. None: no customisation.	Review branding documentation; test customisation options	Desirable

Monitoring and reporting

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
O2.1	Usage analytics	Visibility into platform adoption and usage patterns	Full: user activity, storage trends, collaboration metrics. Partial: basic statistics. None: no analytics.	Review analytics documentation; test report availability	Important
O2.2	Storage reporting	Reports on storage consumption by user, group, and file type	Full: detailed breakdown, trend analysis, forecasting. Partial: total usage only. None: no storage reporting.	Review storage documentation; test report granularity	Important
O2.3	Health monitoring	System health status and alerting	Full: component health, performance metrics, configurable alerts. Partial: basic status page. None: no health monitoring.	Review monitoring documentation; test alert configuration	Important
O2.4	API for reporting	Programmatic access to usage and administrative data	Full: comprehensive reporting API. Partial: limited metrics. None: no reporting API.	Review reporting API documentation; test data extraction	Desirable

Backup and recovery

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
O3.1	Native backup	Built-in backup functionality for data protection	Full: scheduled backups, point-in-time recovery, off-site storage. Partial: manual export only. None: no native backup.	Review backup documentation; test recovery procedures	Essential
O3.2	Third-party backup support	Compatibility with external backup solutions	Full: documented backup APIs, agent support. Partial: filesystem backup only. None: proprietary backup only.	Review backup integration documentation; test tool compatibility	Important
O3.3	Retention policies	Configurable retention of deleted items and versions	Full: per-folder policies, automatic purge, legal hold override. Partial: global retention only. None: no retention control.	Review retention documentation; test policy application	Important
O3.4	Disaster recovery	Documented procedures for recovering from major failures	Full: RTO/RPO documented, tested procedures, geographic redundancy. Partial: basic recovery procedures. None: no DR documentation.	Review DR documentation; verify testing frequency	Essential

Data management requirements

Data import, export, and lifecycle considerations.

Data portability

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
D1.1	Bulk export	Ability to export all data for migration or compliance	Full: complete export including metadata, permissions, versions. Partial: file content only. None: no bulk export.	Review export documentation; test complete extraction	Essential
D1.2	Standard formats	Export data in standard, non-proprietary formats	Full: ODF, standard archive formats, structured metadata. Partial: proprietary formats with converters. None: proprietary only.	Review format documentation; test export formats	Important
D1.3	Migration tools	Tools for importing data from other platforms	Full: migration wizards for major platforms, permission mapping. Partial: basic file import. None: manual upload only.	Review migration documentation; test import capabilities	Important
D1.4	API for data extraction	Programmatic access for data extraction	Full: complete data access via API. Partial: limited data types. None: no extraction API.	Review data API documentation; test extraction completeness	Important

Data lifecycle

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
D2.1	Retention automation	Automatic enforcement of retention policies	Full: policy-based retention, automatic deletion, audit trail. Partial: manual enforcement. None: no automation.	Review retention documentation; test automated deletion	Important
D2.2	Archive capability	Movement of inactive data to lower-cost storage	Full: automated archiving, archive tiers, retrieval workflow. Partial: manual archiving. None: no archive capability.	Review archive documentation; test retrieval times	Desirable
D2.3	Secure deletion	Verified removal of data when deleted	Full: cryptographic erasure, deletion certificates. Partial: standard deletion. None: soft delete only.	Review deletion documentation; verify data removal	Important

Accessibility requirements

ID	Requirement	Description	Assessment criteria	Verification method	Typical priority
A1.1	WCAG compliance	Web interfaces meeting accessibility standards	Full: WCAG 2.1 AA compliance documented. Partial: partial compliance. None: no accessibility testing.	Review VPAT/accessibility documentation; test with screen readers	Essential
A1.2	Keyboard navigation	Complete functionality via keyboard without mouse	Full: all features keyboard-accessible, visible focus indicators. Partial: primary features only. None: mouse required.	Test keyboard navigation; review documentation	Essential
A1.3	Screen reader support	Compatibility with assistive technologies	Full: tested with major screen readers, ARIA implementation. Partial: basic support. None: not tested.	Test with NVDA/JAWS/VoiceOver; review documentation	Essential
A1.4	High contrast support	Display options for users with visual impairments	Full: high contrast themes, customisable colours. Partial: single high contrast option. None: no contrast options.	Test theme options; review accessibility features	Important

Comparison matrices

Rating scale: ● Full support | ◐ Partial support | ○ Minimal support | ✗ Not supported | -Not applicable

Notation: $ Paid tier only | β Beta feature | E Enterprise only | P Plugin required

Functional capability matrix

File storage and synchronisation

Capability	Nextcloud	Collabora Online	ONLYOFFICE Docs	CryptPad	Microsoft 365	Google Workspace
Desktop sync client	●	-	-	○	●	●
Mobile apps	●	-	-	◐	●	●
File versioning	●	-	-	●	●	●
Conflict resolution	●	-	-	●	●	●
Large file support	●	-	-	○	●	◐
External sharing	●	-	-	●	●	●

Assessment notes:

Collabora Online and ONLYOFFICE Docs are document editing components, not file storage platforms; they integrate with storage platforms like Nextcloud
CryptPad desktop sync is limited; primary access is via web browser
CryptPad file size limits are lower due to encryption overhead (25MB default per file)
Google Workspace large file limit is 5TB per file; uploads over 5GB require stable connection

Document editing

Capability	Nextcloud	Collabora Online	ONLYOFFICE Docs	CryptPad	Microsoft 365	Google Workspace
Word processing	●P	●	●	●	●	●
Spreadsheets	●P	●	●	●	●	●
Presentations	●P	●	●	○	●	●
Real-time co-authoring	●P	●	●	●	●	●
Track changes	●P	●	●	○	●	●
Comments	●P	●	●	●	●	●
OOXML compatibility	●P	●	●	○	●	●

Assessment notes:

Nextcloud requires Collabora Online, ONLYOFFICE, or built-in Text app for document editing (marked P)
CryptPad presentations are whiteboard-based, not traditional slide format
CryptPad prioritises privacy over format compatibility; export to Office formats has limitations
Collabora Online and ONLYOFFICE both achieve high Office format fidelity through independent testing

Technical capability matrix

Deployment options

Option	Nextcloud	Collabora Online	ONLYOFFICE Docs	CryptPad	Microsoft 365	Google Workspace
Self-hosted	●	●	●	●	✗	✗
Vendor cloud	●	●	●	●	●	●
Container images	●	●	●	●	-	-
Kubernetes Helm	●	●	●	○	-	-
Air-gapped	●	●	●	●	✗	✗

Assessment notes:

Nextcloud provides official Docker images and AIO (All-in-One) container deployment
Collabora Online provides Kubernetes deployment via COOL Controller
CryptPad Docker deployment is documented but Helm charts are community-maintained
Microsoft 365 and Google Workspace are SaaS-only; no self-hosted options exist

Self-hosted infrastructure requirements

Platform	Minimum RAM	Recommended RAM	Storage backend	Database
Nextcloud	512 MB	4 GB+	Local, S3, Swift	MySQL, MariaDB, PostgreSQL
Collabora Online	1 GB per 10 users	4 GB+	-	-
ONLYOFFICE Docs	2 GB	4 GB+	-	PostgreSQL, MySQL
CryptPad	2 GB	4 GB+	Local filesystem	None (file-based)

Integration architecture

Capability	Nextcloud	Collabora Online	ONLYOFFICE Docs	CryptPad	Microsoft 365	Google Workspace
REST API	●	●	●	◐	●	●
WebDAV	●	-	-	-	●	-
Webhooks	●P	○	●	○	●	●
WOPI support	●	●	●	✗	●	-
CalDAV/CardDAV	●	-	-	-	○	○

Assessment notes:

CryptPad API is limited due to end-to-end encryption design; server cannot access content
Nextcloud webhooks require the Webhooks app (marked P)
Microsoft 365 CalDAV support is deprecated; Exchange protocols preferred
Google Workspace supports CalDAV but recommends Google Calendar API

Security capability matrix

Authentication methods

Method	Nextcloud	Collabora Online	ONLYOFFICE Docs	CryptPad	Microsoft 365	Google Workspace
SAML 2.0	●	●¹	●E	●P	●	●
OIDC	●	●¹	●E	●P	●	●
TOTP MFA	●	●¹	●E	○	●	●
WebAuthn/FIDO2	●	●¹	○	○	●	●
LDAP	●	●¹	●	○	●²	●²

Assessment notes:

¹ Collabora Online inherits authentication from the integrating platform (Nextcloud, ownCloud, etc.)
² Microsoft 365 and Google Workspace LDAP sync requires directory synchronisation tools
CryptPad SSO plugin available for enterprise customers
ONLYOFFICE Docs Enterprise required for SSO features

Data protection

Capability	Nextcloud	Collabora Online	ONLYOFFICE Docs	CryptPad	Microsoft 365	Google Workspace
Encryption at rest	●	●¹	●¹	●	●	●
Encryption in transit	●	●	●	●	●	●
End-to-end encryption	◐	✗	✗	●	○	○
Server-side encryption	●	●¹	●¹	-	●	●
Customer-managed keys	●$	●¹	●E	-	●$	●$

Assessment notes:

Nextcloud E2EE is available but limited to specific apps; not all features support E2EE
CryptPad provides true zero-knowledge encryption; server operators cannot access content
Microsoft 365 Customer Key and Google Workspace CSEK require enterprise tiers
¹ Document editing components inherit storage encryption from integrating platform

Compliance certifications

Certification	Nextcloud	Collabora Online	ONLYOFFICE Docs	CryptPad	Microsoft 365	Google Workspace
SOC 2 Type II	●¹	✗	✗	✗	●	●
ISO 27001	●¹	✗	✗	✗	●	●
GDPR compliance	●	●	●	●	●	●
HIPAA BAA	●¹	✗	●E	✗	●	●
FedRAMP	✗	✗	✗	✗	●	●

Assessment notes:

¹ Nextcloud certifications apply to Nextcloud Enterprise via hosting partners
Self-hosted deployments inherit certifications from hosting infrastructure
CryptPad’s zero-knowledge architecture provides privacy guarantees independent of certifications

Commercial comparison matrix

Pricing models

Platform	Model	Free tier	Entry price	Enterprise features
Nextcloud	Open core	Full FOSS version	€36/user/year (Enterprise)	Support, compliance, branding
Collabora Online	Open core	CODE (dev edition)	€8/user/year	HA, support, SLA
ONLYOFFICE Docs	Open core	Community (20 connections)	€15/user/year	SSO, audit, support
CryptPad	Open core	Self-hosted	€5/user/month (hosted)	SSO, audit, support
Microsoft 365	Subscription	-	£4.90/user/month (Business Basic)	Security, compliance, eDiscovery
Google Workspace	Subscription	-	£4.60/user/month (Business Starter)	Vault, security, compliance

Assessment notes:

Prices verified from official documentation as of January 2026; nonprofit pricing varies
Microsoft 365 and Google Workspace offer significant nonprofit discounts via TechSoup
All FOSS platforms can be self-hosted without licensing costs (infrastructure costs apply)

Nonprofit programmes

Platform	Programme	Eligibility	Discount
Nextcloud	Enterprise for Education/Nonprofit	Registered nonprofits	Contact for pricing
Microsoft 365	Microsoft for Nonprofits	Registered charities	Up to 75% discount; 300 free licences
Google Workspace	Google for Nonprofits	Registered charities	Free Business Starter tier
ONLYOFFICE	Nonprofit programme	Registered nonprofits	Contact for pricing

Accessibility matrix

Requirement	Nextcloud	Collabora Online	ONLYOFFICE Docs	CryptPad	Microsoft 365	Google Workspace
WCAG 2.1 AA	◐	◐	◐	◐	●	●
Keyboard navigation	●	●	●	◐	●	●
Screen reader support	◐	●	●	○	●	●
High contrast	●	◐	●	◐	●	●
VPAT available	○	○	○	○	●	●

Assessment notes:

Microsoft and Google provide detailed VPATs for all products
CryptPad accessibility is improving but less mature than commercial alternatives
Collabora Online accessibility benefits from LibreOffice core accessibility work

Tool assessments

Nextcloud

Type: Self-hosted collaboration platform with integrated office suite options
Licence: AGPL-3.0 (server), GPL-2.0+ (desktop client)
Current version: 32.0.3 (Hub 25 Autumn) as of January 2026
Deployment options: Self-hosted, managed hosting partners, Nextcloud Enterprise Cloud
Source repository: https://github.com/nextcloud/server
Documentation: https://docs.nextcloud.com/

Nextcloud provides file synchronisation and sharing as a core platform, extensible through an app ecosystem that includes calendar, contacts, mail, video conferencing, and office document editing. The platform originated as a fork of ownCloud in 2016 and has become the most widely deployed self-hosted collaboration suite, with over 500,000 servers reported worldwide.

The architecture separates core file management from productivity applications. Document editing requires integration with Collabora Online, ONLYOFFICE Docs, or the built-in Text app for Markdown editing. This modular approach allows organisations to select their preferred office suite while maintaining consistent file storage and user management.

Nextcloud Hub releases follow a four-month cadence, with each major version supported for 12 months. The current release track (Hub 25) emphasises improved search, mobile experience, and AI-assisted features through the Nextcloud Assistant integration.

Key strengths:

Complete data sovereignty with self-hosted deployment
Extensive app ecosystem covering collaboration, productivity, and communication
Active development with regular feature releases and security updates
Strong federation capability for inter-organisation collaboration
No vendor lock-in; standard protocols (WebDAV, CalDAV, CardDAV) enable client flexibility

Key limitations:

Document editing quality depends on chosen office integration
Performance at scale requires careful tuning and adequate infrastructure
Feature consistency varies across apps due to community development model
Enterprise features (audit logging, compliance tools) require paid subscription

Deployment and operations:

Self-hosted Nextcloud requires Linux server infrastructure with PHP 8.0+, a supported database (MariaDB, MySQL, or PostgreSQL), and a web server (Apache or Nginx). The All-in-One Docker container simplifies deployment for smaller installations, providing automatic updates and integrated backup.

Production deployments at scale (1,000+ users) benefit from:

Dedicated database servers with replication
Object storage backend (S3-compatible) for files
Redis for caching and session handling
Separate web server and application tiers

Integration capabilities:

Integration type	Protocol/API	Documentation
File access	WebDAV	https://docs.nextcloud.com/server/latest/developer_manual/client_apis/WebDAV/
User provisioning	OCS API, SCIM	https://docs.nextcloud.com/server/latest/admin_manual/configuration_user/
Calendar/Contacts	CalDAV/CardDAV	https://docs.nextcloud.com/server/latest/user_manual/groupware/
Office integration	WOPI	https://docs.nextcloud.com/server/latest/admin_manual/office/

Security assessment:

Nextcloud implements security scanning through HackerOne with an active bug bounty programme. Security advisories are published with CVE identifiers, and critical fixes are backported to supported versions. Server-side encryption encrypts files before writing to storage, while end-to-end encryption (available via app) provides client-side encryption for selected folders.

Authentication supports SAML 2.0, OIDC, and LDAP integration, with TOTP and WebAuthn for multi-factor authentication. Brute-force protection is built-in, with configurable account lockout policies.

Cost analysis:

Deployment model	Infrastructure costs	Licence costs	Support costs
Self-hosted (100 users)	£200-500/month (cloud VPS)	£0 (Community)	Community forums
Self-hosted Enterprise	£200-500/month	€36/user/year	Vendor support included
Managed hosting	£400-1,000/month	Varies by provider	Provider support

Organisational fit:

Nextcloud is well-suited for organisations that:

Prioritise data sovereignty and control over data location
Have Linux server administration capacity or access to managed hosting
Need file sync and collaboration without ongoing per-user licensing
Operate in jurisdictions with data residency requirements

Nextcloud is less suitable for organisations that:

Lack technical capacity for server administration
Require advanced enterprise features (eDiscovery, legal hold) immediately
Need guaranteed uptime SLAs without additional infrastructure investment

Collabora Online

Type: Web-based office suite for integration with file sync platforms
Licence: MPL-2.0 (Collabora Online), LGPL (LibreOffice core)
Current version: 24.04.14 (Enterprise), CODE 25.04 (Development Edition)
Deployment options: Self-hosted, Kubernetes, Docker, vendor cloud
Source repository: https://github.com/CollaboraOnline/online
Documentation: https://sdk.collaboraonline.com/

Collabora Online provides web-based document editing built on LibreOffice technology, designed for integration with file sync platforms via the WOPI protocol. As the primary commercial backer of LibreOffice development, Collabora contributes significantly to the underlying codebase and maintains close alignment with desktop LibreOffice capabilities.

The architecture runs LibreOffice as a rendering engine within a containerised environment, delivering document views to web browsers via tile-based rendering. Real-time collaboration occurs through operational transformation, enabling multiple users to edit simultaneously with cursor presence and change synchronisation.

In November 2025, Collabora released Collabora Office Desktop, bringing the same interface to Windows, macOS, and Linux desktop applications. This provides interface consistency between web and desktop editing experiences.

Key strengths:

Highest Office format fidelity among open-source options (shared codebase with LibreOffice)
Active LibreOffice core contributions ensure ongoing format compatibility
Comprehensive API for customisation and integration
Enterprise-grade scalability with COOL Controller for Kubernetes
Strong European presence with GDPR-focused development

Key limitations:

Requires separate file storage platform (not standalone)
Resource-intensive; each document session consumes significant memory
Performance on complex documents can lag behind native applications
Limited offline capability (requires server connection)

Deployment and operations:

Collabora Online deployments fall into two categories:

CODE (Collabora Online Development Edition): Free for development and small-scale production (up to 20 simultaneous connections). Suitable for evaluation and small teams but lacks enterprise support and SLA guarantees.

Collabora Online (Enterprise): Licensed per user with support, SLA, and access to stable release branches. Recommended for production deployments requiring reliability guarantees.

Deployment options include:

Docker container with built-in CODE server (for Nextcloud)
Standalone Docker/Podman deployment
Kubernetes via COOL Controller with auto-scaling
Native package installation on supported Linux distributions

Integration capabilities:

Integration type	Protocol/API	Documentation
File platform integration	WOPI	https://sdk.collaboraonline.com/docs/How_to_integrate.html
Document conversion	API	https://sdk.collaboraonline.com/docs/conversion_api.html
Customisation	PostMessage API	https://sdk.collaboraonline.com/docs/postmessage_api.html

Collabora Online integrates with Nextcloud, ownCloud, Seafile, EGroupware, Alfresco, Mattermost, and Drupal through documented integrations.

Security assessment:

Collabora Online implements process isolation per document to contain potential vulnerabilities. Security updates follow LibreOffice security advisories, with additional hardening for the web rendering layer. The server component processes documents in sandboxed containers with restricted capabilities.

Transport security requires TLS 1.2+; deployment documentation recommends TLS 1.3 where supported. Document content remains within the integrating platform’s storage; Collabora Online accesses files via WOPI requests.

Cost analysis:

Deployment	Licence	Support	Infrastructure
CODE (free)	£0	Community	Self-hosted
Collabora Online	€8/user/year	Vendor	Self-hosted
Nextcloud All-in-One	Included with Nextcloud	Per Nextcloud plan	Self-hosted

Organisational fit:

Collabora Online is well-suited for organisations that:

Already use or plan to deploy Nextcloud, ownCloud, or similar platforms
Require high-fidelity Office format compatibility
Value European-developed software for GDPR considerations
Have containerisation expertise for deployment

Collabora Online is less suitable as:

Standalone document editing platform (requires file storage integration)
Solution for organisations without server administration capacity

ONLYOFFICE Docs

Type: Web-based office suite for integration or standalone deployment
Licence: AGPL-3.0 (Community), Proprietary (Enterprise/Developer)
Current version: 9.2.1 (December 2025)
Deployment options: Self-hosted (Docker, native), cloud integrations
Source repository: https://github.com/ONLYOFFICE/DocumentServer
Documentation: https://api.onlyoffice.com/

ONLYOFFICE Docs provides document, spreadsheet, and presentation editing optimised for Microsoft Office format compatibility. The platform emphasises OOXML as the native format rather than ODF, resulting in strong compatibility with Microsoft Office workflows while maintaining full open-source availability.

The architecture uses JavaScript-based rendering, delivering document editing through web browsers without server-side document processing for display. Real-time collaboration synchronises changes between connected users with operational transformation.

Version 9.0 (June 2025) introduced significant interface redesign, AI-powered features for spreadsheets and macros, and expanded format support including Markdown import/export. Version 9.2 (December 2025) added AI grammar checking and macro recording.

Key strengths:

Excellent Microsoft Office format compatibility (OOXML native)
Modern, responsive interface with customisable themes
Comprehensive JavaScript API for integration and automation
PDF editing and form-filling capabilities
Lower memory footprint than LibreOffice-based alternatives

Key limitations:

Community edition limited to 20 simultaneous connections
SSO and audit features require Enterprise edition
ODF format support less mature than OOXML
Company headquartered in Latvia; smaller than commercial competitors

Deployment and operations:

ONLYOFFICE Docs Community Edition: Free, open-source, limited to 20 simultaneous editing connections. Suitable for small teams and development environments.

ONLYOFFICE Docs Enterprise: Licensed per user with removed connection limits, SSO support, audit logging, and vendor support.

Deployment requires:

Docker (recommended) or native installation on Debian/Ubuntu/CentOS
PostgreSQL or MySQL database
RabbitMQ for document editing service coordination
Minimum 2GB RAM (4GB+ recommended)

Integration with Nextcloud is available via the ONLYOFFICE connector app, providing an alternative to Collabora Online.

Integration capabilities:

Integration type	Protocol/API	Documentation
File platform integration	WOPI	https://api.onlyoffice.com/editors/wopi
Direct integration	Document Server API	https://api.onlyoffice.com/editors/basic
Document conversion	Conversion API	https://api.onlyoffice.com/editors/conversionapi
Plugins	Plugin SDK	https://api.onlyoffice.com/plugin/basic

Pre-built integrations exist for Nextcloud, ownCloud, Seafile, Alfresco, Confluence, SharePoint, and Moodle.

Security assessment:

ONLYOFFICE implements JWT token authentication for document server requests, preventing unauthorised access to editing sessions. Document Server processes run in isolated containers with restricted network access.

Enterprise edition adds audit logging for compliance requirements and LDAP/SSO integration for centralised authentication. Version 9.1 introduced PDF redaction features for handling sensitive documents.

Cost analysis:

Edition	Licence	Connections	Support
Community	AGPL-3.0	20 simultaneous	Community
Enterprise	Proprietary	Unlimited	Vendor (1 year)
Developer	Proprietary	Unlimited	Vendor (1 year)

Enterprise pricing starts at approximately €15/user/year; volume discounts apply.

Organisational fit:

ONLYOFFICE Docs is well-suited for organisations that:

Work primarily with Microsoft Office formats
Need document editing integration with Nextcloud or similar platforms
Prefer modern interface design
Require PDF editing capabilities

ONLYOFFICE Docs is less suitable for organisations that:

Require unlimited connections without licensing (Community edition limited)
Prioritise ODF format over OOXML
Need enterprise features without per-user licensing

CryptPad

Type: End-to-end encrypted collaboration suite
Licence: AGPL-3.0
Current version: 2025.9.0 (Autumn 2025)
Deployment options: Self-hosted, cryptpad.fr (hosted)
Source repository: https://github.com/cryptpad/cryptpad
Documentation: https://docs.cryptpad.org/

CryptPad provides end-to-end encrypted collaboration where the server has zero knowledge of document contents. All encryption and decryption occurs in the browser; server operators cannot access user data even with full database access. This architecture makes CryptPad unique among collaboration platforms.

The suite includes rich text documents, spreadsheets, presentations, kanban boards, whiteboards, forms, and code editing. Version 2025.3.1 integrated ONLYOFFICE 8 applications for Document, Spreadsheet, and Presentation editing while maintaining end-to-end encryption.

CryptPad is developed by XWiki SAS with funding from NLnet, NGI, and user subscriptions. The public instance at cryptpad.fr serves as reference implementation and funding source.

Key strengths:

True end-to-end encryption with zero-knowledge architecture
No account required for collaboration (link-based sharing)
Privacy-focused design suitable for sensitive contexts
Self-hostable with complete data sovereignty
Active development funded by privacy-focused grants

Key limitations:

Limited Office format compatibility (export only, with fidelity loss)
No desktop sync client; web-based access only
File size limits (25MB default) due to encryption overhead
Search cannot index encrypted content (by design)
Smaller feature set than traditional office suites

Deployment and operations:

CryptPad is self-hostable on Linux servers with Node.js. The application stores encrypted data in the filesystem without requiring a traditional database, simplifying backup and migration.

System requirements:

Node.js 18+ (LTS recommended)
2GB+ RAM (4GB+ for production)
Local filesystem storage (object storage not supported)
nginx for reverse proxy with WebSocket support

Docker deployment is supported with official images. Configuration primarily occurs through config.js and environment variables.

Integration capabilities:

CryptPad’s encryption model inherently limits integration capabilities. The server cannot access document content, preventing server-side APIs for content manipulation.

Integration type	Availability	Notes
REST API	Limited	User and instance management only
Document content API	Not available	E2EE prevents server-side access
SSO integration	Plugin (Enterprise)	SAML/OIDC via optional plugin
Webhooks	Not available	-

Security assessment:

CryptPad’s security model centres on client-side encryption:

Documents encrypted with per-document keys
Keys shared via URL fragments (not transmitted to server)
Server stores encrypted blobs only
Compromise of server does not expose document contents

Authentication supports local accounts with optional TOTP MFA. Enterprise SSO plugin enables SAML/OIDC integration. The architecture has undergone independent security audits.

Cost analysis:

Deployment	Licence	Support
Self-hosted	AGPL-3.0	Community
cryptpad.fr	Subscription	Email support
Enterprise	Contact	Vendor support

Hosted pricing at cryptpad.fr ranges from free (limited storage) to €15/month for 20GB storage.

Organisational fit:

CryptPad is well-suited for organisations that:

Handle highly sensitive data requiring zero-knowledge encryption
Need collaboration tools for journalists, activists, or human rights work
Want to minimise data exposure even from their own IT administrators
Prefer anonymous collaboration without mandatory accounts

CryptPad is less suitable for organisations that:

Require high-fidelity Office format exchange
Need desktop file synchronisation
Require server-side search and content processing
Have workflows dependent on document content APIs

Microsoft 365

Type: Cloud-based productivity suite
Licence: Proprietary (Subscription)
Deployment options: Cloud only (SaaS)
Documentation: https://learn.microsoft.com/en-us/microsoft-365/

Microsoft 365 provides cloud-based productivity tools including Exchange Online (email), SharePoint Online (file storage), OneDrive for Business (personal storage), Microsoft Teams (communication), and Microsoft 365 Apps (Word, Excel, PowerPoint, etc.). The platform serves over 430 million users across commercial, education, and consumer markets.

The suite integrates deeply with Windows and offers desktop applications alongside web access. Recent development focuses on Copilot AI integration across all applications.

Key strengths:

Industry-standard Office applications with full feature parity
Comprehensive security and compliance tooling
Extensive third-party integration ecosystem
Desktop, web, and mobile applications with consistent experience
Strong enterprise identity integration (Entra ID/Active Directory)

Key limitations:

No self-hosted option; SaaS only
US-headquartered; CLOUD Act jurisdiction applies
Complex licensing with feature availability varying by tier
Vendor lock-in through proprietary formats and integrations
Cost scales linearly with user count

Deployment and operations:

Microsoft 365 is administered through the Microsoft 365 admin center. Configuration includes:

User provisioning (manual, CSV import, or directory sync)
Licence assignment (per-user licensing)
Security policies (Conditional Access, MFA, DLP)
Compliance configuration (retention, eDiscovery, legal hold)

Integration with on-premises Active Directory uses Microsoft Entra Connect (formerly Azure AD Connect) for hybrid identity scenarios.

Integration capabilities:

Integration type	Protocol/API	Documentation
File access	Microsoft Graph API, OneDrive API	https://learn.microsoft.com/en-us/graph/
User provisioning	SCIM, Microsoft Graph	https://learn.microsoft.com/en-us/entra/identity/app-provisioning/
Email	Exchange Web Services, Graph API	https://learn.microsoft.com/en-us/exchange/client-developer/
Webhooks	Microsoft Graph subscriptions	https://learn.microsoft.com/en-us/graph/webhooks

Security assessment:

Microsoft 365 holds SOC 2 Type II, ISO 27001, ISO 27018, FedRAMP High, and HIPAA certifications. Security features include:

Multi-factor authentication with Authenticator app, FIDO2, SMS
Conditional Access policies for context-aware authentication
Microsoft Defender for Office 365 (threat protection)
Microsoft Purview (data loss prevention, information protection)
Sensitivity labels for document classification

Data residency options include EU Data Boundary and country-specific data centres, though metadata and some processing may occur outside selected regions.

Jurisdictional considerations:

Microsoft is a US-headquartered company subject to the CLOUD Act, which allows US government access to data held by US companies regardless of data location. Organisations handling sensitive data (protection, safeguarding, human rights) should evaluate this exposure.

Cost analysis:

Plan	Price (UK)	Key inclusions
Business Basic	£4.90/user/month	Web apps, 1TB OneDrive, Teams
Business Standard	£10.30/user/month	Desktop apps, webinars
Business Premium	£18.70/user/month	Advanced security, Intune
Enterprise E3	£32.00/user/month	eDiscovery, compliance tools
Enterprise E5	£51.10/user/month	Advanced threat protection, analytics

Nonprofit pricing (via Microsoft for Nonprofits): Up to 300 free Business Premium licences for eligible organisations; additional licences at significant discount.

Organisational fit:

Microsoft 365 is well-suited for organisations that:

Need comprehensive productivity suite with email, files, and communication
Require advanced security and compliance features
Have Windows-centric desktop environments
Can accept US jurisdiction for data

Microsoft 365 is less suitable for organisations that:

Require data sovereignty outside US jurisdiction
Need to minimise ongoing subscription costs
Prefer open-source solutions or vendor independence
Operate in contexts where US government data access is a concern

Google Workspace

Type: Cloud-based productivity suite
Licence: Proprietary (Subscription)
Deployment options: Cloud only (SaaS)
Documentation: https://support.google.com/a/, https://developers.google.com/workspace

Google Workspace provides cloud-native productivity tools including Gmail, Google Drive, Google Docs/Sheets/Slides, Google Meet, Google Chat, and Google Calendar. The platform emphasises web-first design with real-time collaboration as a core feature rather than an addition.

January 2025 saw Gemini AI integration included in Business and Enterprise plans, adding AI-assisted writing, analysis, and summarisation across Workspace applications.

Key strengths:

Web-native design with excellent real-time collaboration
Strong mobile experience (Android and iOS)
Simple administration compared to Microsoft 365
AI features (Gemini) included in standard plans
Competitive pricing with generous nonprofit programme

Key limitations:

No self-hosted option; SaaS only
US-headquartered; CLOUD Act jurisdiction applies
Desktop applications limited (Drive sync only, no offline Docs/Sheets)
Less feature-rich than Microsoft Office for complex documents
Vendor lock-in through proprietary formats

Deployment and operations:

Google Workspace is administered through the Google Admin console. Configuration includes:

User provisioning (manual, CSV, or directory sync via Google Cloud Directory Sync)
Organisational unit structure for policy application
Security settings (2-Step Verification, Context-Aware Access)
Data protection (Vault for retention and eDiscovery)

Integration capabilities:

Integration type	Protocol/API	Documentation
File access	Google Drive API	https://developers.google.com/drive/api
User provisioning	Admin SDK, SCIM	https://developers.google.com/admin-sdk
Calendar	Google Calendar API	https://developers.google.com/calendar
Email	Gmail API	https://developers.google.com/gmail/api

Google Workspace supports Apps Script for automation and integration, enabling custom workflows without external development infrastructure.

Security assessment:

Google Workspace holds SOC 2, ISO 27001, ISO 27017, ISO 27018, FedRAMP High, and HIPAA certifications. Security features include:

2-Step Verification with Security Keys, TOTP, push notification
Context-Aware Access for conditional authentication
Data Loss Prevention (DLP) policies
Google Vault for retention and legal hold
Client-side encryption (CSEK) for additional protection

Data regions can be configured for primary data storage in EU, US, or other regions; some processing metadata may occur outside selected regions.

Jurisdictional considerations:

Google is US-headquartered and subject to the CLOUD Act. Data stored by Google can be subject to US government access requests regardless of storage location. Organisations handling sensitive data should evaluate this exposure.

Cost analysis:

Plan	Price (UK)	Key inclusions
Business Starter	£4.60/user/month	30GB storage per user
Business Standard	£9.20/user/month	2TB storage, Meet recordings
Business Plus	£15.30/user/month	5TB storage, Vault, advanced security
Enterprise Standard	Contact	Unlimited storage, advanced controls
Enterprise Plus	Contact	Advanced security, DLP, investigation

Nonprofit pricing (via Google for Nonprofits): Free Business Starter tier for eligible organisations.

Organisational fit:

Google Workspace is well-suited for organisations that:

Prioritise web-based collaboration and mobility
Want simple administration with less complexity than Microsoft 365
Can leverage generous nonprofit programme
Have Chromebook deployments or Chrome-centric environments

Google Workspace is less suitable for organisations that:

Require complex spreadsheet or document features (pivot tables, macros)
Need robust desktop applications for offline work
Require data sovereignty outside US jurisdiction
Operate in contexts where US government data access is a concern

Selection guidance

Decision framework

                               +------------------+
                               | Start            |
                               +--------+---------+
                                        |
                               +--------v---------+
                               | Data sovereignty |
                               | required?        |
                               +--------+---------+
                                        |
                  +---------------------+-------------------+
                  |                                         |
                  | Yes                                     | No
                  v                                         v
         +--------+---------+                      +--------+---------+
         | Self-hosted      |                      | Cloud acceptable |
         | required         |                      |                  |
         +--------+---------+                      +--------+---------+
                  |                                         |
       +----------+----------+                     +--------+---------+
       |                     |                     |                  |
       v                     v                     v                  v
+------+------+       +------+------+        +-----+------+    +------+------+
| E2EE        |       | Office      |        | Microsoft  |    | Google      |
| required?   |       | editing?    |        | ecosystem? |    | preferred?  |
+------+------+       +------+------+        +-----+------+    +------+------+
       |                     |                     |                  |
   +---+---+          +------+------+              |                  |
   |       |          |             |              v                  v
   v       |          v             v        +-----+-----+      +-----+----+
CryptPad   |      Nextcloud      Nextcloud   | Microsoft |      | Google   |
           |      + Collabora    Files only  | 365       |      | Workspace|
           v      or ONLYOFFICE              +-----------+      +----------+
      Nextcloud
      + E2EE app

Recommendations by context

Organisations with minimal IT capacity

Primary recommendation: Google Workspace (via Google for Nonprofits)

Google Workspace requires no infrastructure management and provides the simplest administration interface among enterprise options. The free Business Starter tier for eligible nonprofits reduces cost barriers. Implementation requires only domain verification and user account creation.

Alternative: Microsoft 365 Business Basic

Microsoft for Nonprofits provides up to 300 free licences. Choose Microsoft 365 if the organisation already uses Windows desktop applications extensively or requires Outlook for email.

Avoid: Self-hosted platforms without IT support capacity

Nextcloud, CryptPad, and similar platforms require ongoing server administration. Without dedicated IT capacity or managed hosting arrangements, maintenance burden risks service degradation.

Organisations with established IT capacity

Primary recommendation: Nextcloud with Collabora Online or ONLYOFFICE Docs

Self-hosted deployment provides complete data control and eliminates per-user licensing for file storage. Document editing integration (Collabora or ONLYOFFICE) adds office suite capability. This combination supports thousands of users with appropriate infrastructure.

Evaluate Collabora Online for organisations prioritising:

LibreOffice format compatibility
European vendor preference
Long-term ODF format support

Evaluate ONLYOFFICE Docs for organisations prioritising:

Microsoft Office format exchange
Modern interface design
Lower memory footprint

Alternative: Microsoft 365 or Google Workspace

Commercial platforms reduce operational burden at the cost of per-user licensing and data sovereignty. Consider when IT capacity should focus on other priorities.

Organisations with data sovereignty requirements

Primary recommendation: Nextcloud (self-hosted or EU-hosted provider)

Self-hosted Nextcloud on organisation-controlled infrastructure provides complete data sovereignty. Alternatively, EU-based managed hosting partners provide Nextcloud with GDPR-appropriate data residency.

Integrate Collabora Online for document editing. Both Nextcloud and Collabora are European-developed with GDPR-focused design.

Alternative: CryptPad for highest-sensitivity data

CryptPad’s zero-knowledge encryption prevents even server operators from accessing content. Use for documents requiring protection from all parties except collaborators.

Organisations handling sensitive protection data

Primary recommendation: CryptPad for document collaboration

End-to-end encryption protects content from server compromise, hosting provider access, and jurisdictional requests. No account requirement enables anonymous collaboration when appropriate.

Supplement with: Self-hosted Nextcloud for file storage

CryptPad lacks traditional file sync. Nextcloud with server-side encryption (or E2EE app for selected folders) provides file storage with stronger protection than commercial alternatives.

Avoid: US-headquartered cloud platforms for sensitive data

Microsoft 365 and Google Workspace are subject to CLOUD Act jurisdiction. Data access requests from US authorities cannot be contested by users and may not be disclosed. Evaluate this risk for protection, safeguarding, and human rights data.

Migration paths

From	To	Complexity	Approach	Typical timeline
Google Workspace	Microsoft 365	Medium	Microsoft migration tools, staged mailbox migration	2-4 weeks
Microsoft 365	Google Workspace	Medium	Google data migration service, manual for complex data	2-4 weeks
Google Workspace	Nextcloud	Medium-High	Manual file export, third-party migration tools	4-8 weeks
Microsoft 365	Nextcloud	Medium-High	OneDrive export, mailbox migration to separate mail service	4-8 weeks
Nextcloud	Microsoft 365	Low-Medium	Upload files to OneDrive/SharePoint	2-4 weeks
Nextcloud	Google Workspace	Low-Medium	Upload files to Google Drive	2-4 weeks
File server	Nextcloud	Low	Sync client, bulk upload, or migration script	1-4 weeks

Resources and references

Official documentation

FOSS platforms

Platform	Documentation	API reference	Source repository
Nextcloud	https://docs.nextcloud.com/	https://docs.nextcloud.com/server/latest/developer_manual/	https://github.com/nextcloud/server
Collabora Online	https://sdk.collaboraonline.com/	https://sdk.collaboraonline.com/docs/api.html	https://github.com/CollaboraOnline/online
ONLYOFFICE Docs	https://helpcenter.onlyoffice.com/	https://api.onlyoffice.com/	https://github.com/ONLYOFFICE/DocumentServer
CryptPad	https://docs.cryptpad.org/	https://docs.cryptpad.org/en/dev_guide/	https://github.com/cryptpad/cryptpad

Commercial platforms

Platform	Documentation	API reference	Trust centre
Microsoft 365	https://learn.microsoft.com/en-us/microsoft-365/	https://learn.microsoft.com/en-us/graph/	https://www.microsoft.com/en-us/trust-center
Google Workspace	https://support.google.com/a/	https://developers.google.com/workspace	https://workspace.google.com/security/

Relevant standards

Standard	Description	URL
WOPI	Web Application Open Platform Interface for office integration	https://learn.microsoft.com/en-us/microsoft-365/cloud-storage-partner-program/online/
WebDAV	Web Distributed Authoring and Versioning protocol	https://tools.ietf.org/html/rfc4918
CalDAV	Calendar access protocol	https://tools.ietf.org/html/rfc4791
CardDAV	Contact access protocol	https://tools.ietf.org/html/rfc6352
ODF	Open Document Format	https://www.oasis-open.org/committees/office/
OOXML	Office Open XML	https://www.ecma-international.org/publications-and-standards/standards/ecma-376/

Collaboration Platforms

Requirements taxonomy

Functional requirements

File storage and synchronisation

Document editing

Organisation and search

Team collaboration

Technical requirements

Deployment and hosting

Scalability and performance

Integration architecture

Security requirements

Authentication and access control

Data protection

Compliance and audit

Operational requirements

Administration

Monitoring and reporting

Backup and recovery

Data management requirements

Data portability

Data lifecycle

Accessibility requirements

Comparison matrices

Functional capability matrix

File storage and synchronisation

Document editing

Technical capability matrix

Deployment options

Self-hosted infrastructure requirements

Integration architecture

Security capability matrix

Authentication methods

Data protection

Compliance certifications

Commercial comparison matrix

Pricing models

Nonprofit programmes

Accessibility matrix

Tool assessments

Nextcloud

Collabora Online

ONLYOFFICE Docs

CryptPad

Microsoft 365

Google Workspace

Selection guidance

Decision framework

Recommendations by context

Organisations with minimal IT capacity

Organisations with established IT capacity

Organisations with data sovereignty requirements

Organisations handling sensitive protection data

Migration paths

Resources and references

Official documentation

FOSS platforms

Commercial platforms

Relevant standards

See also