Nextcloud platform
Server, apps, background jobs and configuration are deployed reproducibly and kept upgradeable.
WZ-IT plans, installs and operates Nextcloud as managed hosting, in your cloud or on premises. Depending on the target design, we also provide migration, secure network and identity integration, monitoring, backups, updates, integrations and further development.
Companies worldwide trust WZ-IT
The following are trademarks of their respective owners: Nextcloud (Nextcloud GmbH). WZ-IT is an independent service provider and has no business, partnership, or contractual relationship with these companies. We offer independent migration, installation, hosting, and operations services.
Nextcloud is a self-hostable platform for files, sharing and collaboration. Organisations can design hosting location, storage, identities and connected services around their own data strategy.
Its scope includes files, calendars and contacts plus optional components for office work, communication and workflows. The appropriate apps and services depend on usage, security requirements and existing infrastructure.
We design, migrate and operate Nextcloud for your organisation - on European infrastructure, in your cloud account or on-premises in your own environment.
We provide technical monitoring, backups and maintenance for your Nextcloud instance. Human response times and support coverage follow the selected service level.
A production Nextcloud combines the application, database, cache, file storage, office components, identities and endpoints. We operate this system and integrate it into your existing infrastructure.
Server, apps, background jobs and configuration are deployed reproducibly and kept upgradeable.
Files, database, cache and optional object storage are designed around volume and access patterns.
Office, Talk, groupware, sharing, LDAP and SSO are integrated in a controlled way.
Monitoring, updates, backups and restore procedures protect the agreed components.
Technical operations, data organisation and business permissions are clearly separated.
| Area | Responsibility | Scope and boundaries |
|---|---|---|
| Architecture and platform | WZ-IT | Sizing and operation of Nextcloud, database, cache, proxy and agreed supporting services. |
| Updates and monitoring | WZ-IT | Controlled version changes, technical monitoring and incident handling according to service level. |
| Backups and restore | WZ-IT | Backup of agreed data and configuration plus scheduled recovery checks. |
| Migration and storage | Shared | WZ-IT designs migration and target structure; the customer evaluates content, retention and cleanup. |
| Identities and access | Shared | We integrate LDAP, SSO and groups; role models and sharing policies are defined together. |
| Data classification and shares | Customer | The customer owns business permissions, content, deletion periods and sharing decisions. |
| Custom apps and workflows | Optional WZ-IT service | Custom apps, portals, Flow automation and API integrations are available as development services. |
Hosting location, storage, access paths and connected services can be aligned with your data and security requirements.
The Nextcloud server is developed openly. This supports traceable deployments, integrations and operations without being tied to one hosting model.
With a suitable office component, teams can edit documents, presentations and spreadsheets together in the browser.
Desktop and mobile clients support synchronisation and, depending on client configuration, offline access to selected files.
Access controls, audit functions, multi-factor authentication and different encryption options can be aligned with the relevant threat model.
Files and folders can be shared with internal and external users. Permissions, password protection and expiration dates support controlled sharing.
Calendars and contacts can be synchronised with compatible devices and clients through CalDAV and CardDAV.
Apps and interfaces extend the platform with office functions, communication, workflows or external storage integrations, for example.
Monitoring, controlled updates, backups and defined response targets are agreed according to the selected WZ-IT service level.
A clearly defined operating scope instead of an opaque hosting flat fee.
We set up a test instance for you, usually on the next business day. No payment details required. After seven days it is deleted unless you continue.
Compute, applications, storage and response are shown separately. You can see what ongoing operations include and which requirements need a technical assessment.
We also design custom Nextcloud architectures, integrations and migrations. Contact us for a technical assessment.
One managed standard Nextcloud application is included in the Starter workload. Business and higher levels add a flexible operations allowance for planned work during regular service hours. Select compute, additional applications, storage and the appropriate service level.
A workload is one compute instance with the applications agreed for it.
One standard app per workload is already included. Additional dedicated servers count as separate workloads.
€79.90 per started TB and month, including daily encrypted offsite backup with 7-day retention.
Enquiry
Briefly describe the current state and objective for Nextcloud. We assess infrastructure, integration, and ongoing operations.
Professional installation on your infrastructure - on-premise, cloud or hybrid
In your data center
AWS, Azure, Hetzner & more
Advanced architecture after technical and licence assessment
Self-hostable alternative to cloud storage with controllable data paths, sharing and configurable encryption options
Online Office (Collabora/OnlyOffice), Calendar, Contacts and Video Conferencing (Nextcloud Talk) for distributed teams
For government, healthcare, law firms and other organisations with specific hosting-location and data-processing requirements
Centralized file management for enterprises with role-based access, versioning and audit logs
Exchange/Outlook alternative with calendar, contacts, email integration and task management
Controlled access to company data with multi-factor authentication and an access model designed for the environment
Secure access and access control for your installation
WireGuard, NetBird or Tailscale
Directly or through an upstream identity layer
Depends on application, edition and identity provider
Fail2Ban, Rate Limiting, IP Whitelisting
We set up secure VPN access to your installation - ideal for remote work and external employees.
Full-service installation with no hidden costs
Nextcloud is essentially a framework for apps. The strict separation between file access (WebDAV) and management (OCS API) gives us clean integration points for any requirement.
WebDAV for performant file operations (upload, download, sync), OCS API for managing users, groups, and shares. Ideal for using Nextcloud as a headless file server for your customer portal or intranet - without end users seeing the Nextcloud interface.
The Flow Engine captures events as they happen: file uploaded, tag set, share created. This allows us to forward documents directly after upload to third-party systems (OCR server, archive systems, DMS) - without touching the core code.
We develop custom apps based on PHP (backend) and Vue.js (frontend). These integrate seamlessly into the interface (Files, Talk, Groupware) and appear to end users as native components - update-safe through the official API.
How we implement Nextcloud development in practice.
Incoming documents (invoices, contracts, applications) must be manually sorted, converted, and forwarded to the right place.
Flow-based automation recognizes document types (via OCR/AI), converts to PDF/A, adds watermarks, and moves to the correct folder structure. Notifications automatically go to responsible persons.
Customers should be able to view documents stored in Nextcloud - but without direct access to the backend or Nextcloud UI.
We develop a lean React frontend that retrieves documents via OCS/WebDAV API and displays them in your customer's branding. Authentication runs through your existing SSO (Keycloak, Authentik). Secure, isolated, update-independent.
Standard LDAP integration maps groups 1:1. More complex requirements (nested groups, dynamic assignments, role-based permissions) are not covered.
A custom auth service (Python/Node.js) sits between LDAP and Nextcloud. It transforms group memberships according to your rules, synchronizes quota settings, and sets permissions automatically - on every login or via cronjob.
User count alone is insufficient. File count, change rate, previews, synchronisation, Office, Talk and external storage shape the workload.
| Usage scenario | Technical starting point | Key factors |
|---|---|---|
| Small team using Files and shares | S or M plus suitable storage | File count, clients and growth determine the actual storage requirement. |
| Collaboration with Office and groupware | M or L, cache and separate services | Concurrent editing, previews and background jobs increase CPU and memory needs. |
| Large datasets, Talk or many integrations | Custom architecture | Storage I/O, database, full-text search and supporting services are assessed separately. |
| Highly available or multi-site | Custom architecture | Load balancing, database, cache, storage and recovery must be designed consistently. |
The calculator models a standard workload. Storage, Office, Talk, migration and high availability are added when required.
Nextcloud can run as WZ-IT managed hosting, in your cloud account, on-premises or as a hybrid platform with existing storage.
Operations on European infrastructure with selectable compute, storage and service level.
We operate Nextcloud in your account and integrate existing network and security services.
Operations on your virtualisation, servers or in your data centre.
Integration of object storage, file servers, directory services and secure remote access.
We design not only the web application but also access, synchronisation, directory services, data paths and recovery.
Browsers, desktop and mobile clients plus internal and external shares.
Reverse proxy, TLS, protection rules and optional private access through NetBird or VPN.
Local accounts, LDAP/AD or SSO with agreed groups and permissions.
Files, groupware, apps and background jobs on a controlled runtime.
PostgreSQL or MariaDB plus Redis for locking, caching and reliable operations.
Primary storage, external storage, quotas and encrypted offsite backups.
Optional separate services and connections to DMS, mail, calendars or business applications.
Encryption is designed around the threat model. Server-side and end-to-end encryption protect against different risks and are not interchangeable.
Answers about migration, storage, security and operations.
Yes. We assess version, apps, database, storage, background jobs and existing integrations, then plan test migration, maintenance window, cutover and fallback.
Technical integration is available, but resources and licences depend on usage and the selected component. Office and Talk services are therefore scoped separately when they exceed the standard workload.
Block storage can be added in the configurator. Larger datasets, object storage, high file counts and special retention requirements need further assessment because I/O and backup volume matter as much as capacity.
Yes. We integrate existing directories or identity providers and agree groups, roles, login flows and emergency access with you.
No. Nextcloud provides different encryption methods with distinct prerequisites and limitations. We choose transport, disk, server-side or end-to-end encryption according to your threat model.
Yes. Application, database, cache, storage and supporting services must be designed together for redundancy and recovery. Scope follows load and availability objectives.
Depending on the agreed setup, we back up database, configuration, files and relevant keys. A consistent recovery process matters more than the mere presence of individual backup files.
As an alternative to managed hosting in the data centre, WZ-IT provides the hardware, configures Nextcloud, and handles hardening, monitoring, updates, backup and technical support. Access can be limited to the internal network or enabled through VPN and existing identities.
from EUR 349 excl. VAT / month · plus one-time provisioning and initial setup

These solutions are often used together with Nextcloud
These solutions offer similar functionalities and can be evaluated together
No risk: worst case, you leave with a clearer understanding of your project than before.


“WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.”
Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.