This site runs Nextcloud, an open-source file sync and share platform. If you're considering using it, you need to think about what you're getting into. The technical foundation is solid — the server uses up-to-date encryption, blocks clickjacking attacks, and has a content security policy in place. Those are signs of competence. But a file storage service also needs to show you what it will do with your data. This site doesn't have a privacy policy, no terms of service, and no legal disclosure. In Germany, where this domain is registered, that last one is actually a legal requirement for commercial sites. The domain is also brand new, with no history on the Wayback Machine, so you can't check if it's been around for years or just popped up last week. Contact info exists, but there's no About page or social media presence to round out the picture. When people come to us asking 'is nextcloud.osanonline.de safe to use?', we tell them: the security is fine, but the lack of transparency and legal paperwork means you're trusting a stranger. Most users would be better off with a Nextcloud provider that clearly shows who runs it and what rules apply to your data.
Not sure — double-check nextcloud.osanonline.de first
In plain English
This Nextcloud instance looks technically well-run, with solid security headers and a clean threat report. But it's missing the legal pages and ownership disclosure that a German commercial service needs by law. Without knowing who operates it or what they'll do with your data, I'd treat it like an unknown self-hosted server rather than a trusted business.
Where the score comes from
Strong security posture: valid TLS 1.3 certificate from Let's Encrypt, clickjacking protection, Content Security Policy, and multiple security headers. The site also publishes a security.txt for vulnerability disclosure, which shows real operational awareness.
WHOIS is hidden by default for .de domains, which is normal. But there's no legal-entity disclosure (Impressum) required for commercial sites in Germany, and the domain is very new with no archive history. Combined, this makes it hard to know who runs the site.
Clean DNS blacklists and Google Web Risk. No negative external flags. But the site has no Wayback Machine history and no Trustpilot presence, so there's no track record to judge it against.
Contact info is present and the site has custom branding. But there's no About page, no social media links, and no team information. For a service asking you to log in and trust it with your data, this is below what most people would expect.
No privacy policy, terms of service, or Impressum. In Germany, any commercial site must display a legal notice. Nextcloud is a data-storage product that handles personal files, so missing these pages is a real gap for a service in the EU.
Fast load times on a real CDN (Cloud.ru/Selectel) with openresty and TLS 1.3. DNSSEC is not enabled and there are no MX records, but DNS resolution is clean and the site is live. Fine for a small setup, though a production service might invest more in email and DNS security.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →