nextcloud.com/page-gdpr.php at master · nextcloud/nextcloud.com

This repository was archived by the owner on Oct 19, 2022. It is now read-only.

History

427 lines (413 loc) · 32.4 KB

Raw

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

192

193

194

195

196

197

198

199

200

201

202

203

204

205

206

207

208

209

210

211

212

213

214

215

216

217

218

219

220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

235

236

237

238

239

240

241

242

243

244

245

246

247

248

249

250

251

252

253

254

255

256

257

258

259

260

261

262

263

264

265

266

267

268

269

270

271

272

273

274

275

276

277

278

279

280

281

282

283

284

285

286

287

288

289

290

291

292

293

294

295

296

297

298

299

300

301

302

303

304

305

306

307

308

309

310

311

312

313

314

315

316

317

318

319

320

321

322

323

324

325

326

327

328

329

330

331

332

333

334

335

336

337

338

339

340

341

342

343

344

345

346

347

348

349

350

351

352

353

354

355

356

357

358

359

360

361

362

363

364

365

366

367

368

369

370

371

372

373

374

375

376

377

378

379

380

381

382

383

384

385

386

387

388

389

390

391

392

393

394

395

396

397

398

399

400

401

402

403

404

405

406

407

408

409

410

411

412

413

414

415

416

417

418

419

420

421

422

423

424

425

426

427

<head>

</head>

<h1><?php echo $l->t('GDPR Compliance Kit');?></h1>

<h2><?php echo $l->t('Simplifying the complex requirements of privacy regulations.');?></h2>

</div>

<p class="section--paragraph text-center"><?php echo $l->t('The GDPR (General Data Protection Regulation) makes organizations liable for any violations of user privacy and deviations from a high data security standard.');?></p>

<p class="section--paragraph text-center"><?php echo $l->t('Legislation like the CCPA (California Consumer Privacy Act of 2018) brings similar regulation to other countries.');?></p>

<p class="section--paragraph text-center"><?php echo $l->t('The self-hosted Nextcloud solution simplifies compliance, decreasing business risk and costs.');?></p>

</div>

</section>

<h3 class="section--intro text-center"><?php echo $l->t('Making compliance easy');?></h3>

<h1 class="section--heading-1 text-center"><?php echo $l->t('Nextcloud Compliance Kit');?></h1>

<h3 class="section--intro text-center"><?php echo $l->t('Nextcloud offers everything you need for GDPR compliance.');?></h3>

</div>

<img class="img-responsive" src="<?php echo get_template_directory_uri(); ?>/assets/img/whitepapers/gdpr-overview-thubmnail-banner.png" alt="whitepaper"/>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('Clear documentation');?></h3>

<p class="section--paragraph"><?php echo $l->t('Compliance is a multi-step process and data can be in many locations. Our documentation helps administrators check if they have covered their bases and guides them through delivering on data access, modification and deletion requests.');?></p>

<p class="section--paragraph"><?php echo $l->t('We offer both a high level overview as well as hands-on, concrete documentation for administrators:');?>

<ul>

<li class="check"><?php echo $l->t('A 12-step compliance checklist');?></li>

<li class="check"><?php echo $l->t('An extensive, over-20-page Administrator manual');?></li>

</ul></p>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('All bases covered');?></h3>

<ul>

<li class="check"><?php echo $l->t('How the GDPR data processing allowances apply to Nextcloud and when, where and how to ask for permission');?></li>

<li class="check"><?php echo $l->t('How to deal with public, in-house and B2B Nextcloud servers');?></li>

<li class="check"><?php echo $l->t('An overview of where personal data can be stored in Nextcloud, covering user accounts, monitoring and logs, apps, file storage, database, backups and more');?></li>

<li class="check"><?php echo $l->t('How to handle consent, subject access requests, data deletion and more');?></li>

<li class="check"><?php echo $l->t('An addendum covering popular apps and their GDPR compliance consequences');?></li>

<li class="check"><?php echo $l->t('Personal rights and how to implement this in Nextcloud');?></li>

</ul>

</div>

<a href="<?php echo get_template_directory_uri(); ?>/assets/img/features/gdpr-apps-nw.png"><img class="img-responsive" src="<?php echo get_template_directory_uri(); ?>/assets/img/features/gdpr-apps-nw.png" alt=""/></a>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('GDPR Compliance Apps');?></h3>

<p class="section--paragraph"><?php echo $l->t('To make compliance easier, Nextcloud offers a number of Compliance apps and capabilities.');?></p>

<li class="check"><?php echo $l->t('Configurable imprint and privacy links for your login page');?></li>

<li class="check"><?php echo $l->t('Data Request app to allow users to request data deletion or modification from their user settings');?></li>

<li class="check"><?php echo $l->t('Delete Account app to allow users to delete their account');?></li>

<li class="check"><?php echo $l->t('Terms of Service app that only gives access to Nextcloud after users read and agreed to terms (handles updated terms as well)');?></li>

</ul></p>

</div>

<p class="text-center"><?php echo $l->t('Reduce risk, improve collaboration and auditability and cut operational expenses with the leading content collaboration platform.');?></p>

<a href="<?php echo home_url('buy') ?>" class="button button--blue button--large button--arrow"><?php echo $l->t('Contact us now');?> <i class="icon-arrow-circle-o-right icon"></i></a>

</div>

</section>

<h1 class="section--heading-1 text-center"><?php echo $l->t('What our users say');?></h1>

<a><img style="margin-bottom: 50px;" class="img-responsive" src="<?php echo get_template_directory_uri(); ?>/assets/img/customers/gdpr-thanks.png" alt="Thank You from a customer"/></a>

</div>

<div>

<p class="section--paragraph"><blockquote>The GDPR Compliance Kit dealt with all our concerns. The global nature of the research community with frequent collaboration with European researchers and students requires global compliance awareness and an on-premises solution backed by the expertise of Nextcloud GmbH gives us the assurances we need.</blockquote></p>

-Hans Erasmus, Junior Infrastructure Architect at the North-West University in South Africa.

</div>

</section>

<a><img class="img-responsive" src="<?php echo get_template_directory_uri(); ?>/assets/img/icons/CSPcert.png" alt="in action"/></a>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('EU Cybersecurity Act');?></h3>

<p class="section--paragraph"><?php echo $l->t('Explicitly designed to build on existing certifications like ISO 27001a or BSI C5, under the guidance of CSPCert a recommendation has been presented to the ENISA to define a European Cybersecurity Certification Scheme for Cloud Service Providers. The upcoming <a class="hyperlink" href="https://ec.europa.eu/commission/news/cybersecurity-act-2018-dec-11_en">Cybersecurity Act</a> defines three levels of assurance (Basic, Substantial and High) and provides a comprehensive set of rules, technical requirements, standards and procedures for assesment and certification.');?></p>

<p class="section--paragraph"><?php echo $l->t('Nextcloud follows the strictest security protocols in the industry and anticipates to be ready for easy and quick certification of customer deployments once the Cybersecurity Act goes into effect.');?></p>

</div>

<a><img class="img-responsive" src="<?php echo get_template_directory_uri(); ?>/assets/img/icons/CFRPart11.png" alt="in action"/></a>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('CFR - Code of Federal Regulations Title 21');?></h3>

<p class="section--paragraph"><?php echo $l->t('Nextcloud is ready for use in a FDA Title 21 CFR Part 11 compliant environment, if set up and run properly on appropriate infrastructure. Nextcloud features the required retention, versioning and auditing features and can integrate with signature application and validation solutions.');?></p>

<p class="section--paragraph"><?php echo $l->t('As we do not operate Nextcloud for our customers nor control how they use it, as a on-premises hosted solution, Nextcloud itself can not be certified. However under a Nextcloud Subscription we can help review, validate and certify your compliance.');?></p>

</div>

</section>

<h2><?php echo $l->t('GDPR requirements');?></h2>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('Security and Encryption');?></h3>

<p class="section--paragraph"><?php echo $l->t('The GDPR requires organizations to ensure adequate protection for private data, from encryption to clear and well implemented security practices.');?></p>

</div>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('Availability and access');?></h3>

<p class="section--paragraph"><?php echo $l->t('Private users have a right to demand a full overview of what data is collected, including an export of what an organization has on them.');?></p>

</div>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('Transparency and auditability');?></h3>

<p class="section--paragraph"><?php echo $l->t('Upon request, an organization has to be able to show what they do with user data, who has (had) access and they must be able to modify or delete any data they have on private individuals.');?></p>

</div>

<img class="big-img" src="<?php echo get_template_directory_uri(); ?>/assets/img/headers/legal2.jpg">

<img class="small-img" src="<?php echo get_template_directory_uri(); ?>/assets/img/headers/legal2-small.jpg">

</div>

</section>

<h1 class="section--heading-1 text-center"><?php echo $l->t('How Nextcloud delivers');?></h1>

<div class="icon text-center"><img src="<?php bloginfo('template_directory'); ?>/assets/img/icons/permissions.svg" /></div>

<h3 class="section--paragraph__title text-center"><?php echo $l->t('Ultimate security');?></h3>

<p class="section--paragraph text-center"><?php echo $l->t('Choosing a self-hosted product means you can guarantee your customers that data never leaves your company and remains 100% confidential.');?> <?php echo $l->t('You can run Nextcloud in your own datacenter, on rented dedicated servers or a local, trusted cloud provider to ensure the right balance between control, costs and flexibility.');?></p>

<p class="section--paragraph text-center"><?php echo $l->t('Powerful server and client side encryption options provide ultimate protection for sensitive documents.');?></p>

</div>

<div class="icon text-center"><img src="<?php bloginfo('template_directory'); ?>/assets/img/icons/monitoring.svg" /></div>

<h3 class="section--paragraph__title text-center"><?php echo $l->t('Complete control');?></h3>

<p class="section--paragraph text-center"><?php echo $l->t('Nextcloud combines advanced data access controls with powerful monitoring and logging capabilities to ensure compliance and auditability.');?></p>

<p class="section--paragraph text-center"><?php echo $l->t('Our Compliance Kit gives administrators the tools they need to export, update and delete user data.');?></p>

</div>

</section>

<?php require get_template_directory().'/onpremises.php';?>

<a><img class="img-responsive" src="<?php echo get_template_directory_uri(); ?>/assets/img/customers/assicuro.png" alt="in action"/></a>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('Assicuro Private Insurance');?></h3>

<p class="section--paragraph"><blockquote><?php echo $l->t('Assicuro chose Nextcloud to ensure confidential data exchange with its over 3000 customers and partners, enabling customers to securily share confidential information e.g. insurance policies. Compared to other evaluated solutions, Nextcloud offered an easier user interface, and a professional and more secure, extensible platform.');?></blockquote></p>

</div>

</section>

<h2><?php echo $l->t('Get our whitepaper');?></h2>

<p class="section--paragraph"><label for="email"><?php echo $l->t('Our GDPR Overview document offers a basic 12 step process to GDPR compliance, as part of our GDPR Compliance Kit. Customers can download the complementing GDPR Admin Manual on our customer portal.');?><br>

<input type="checkbox" name="moreinfo" value="1"> <small><?php echo $l->t('Subscribe me to the monthly Nextcloud newsletter');?> <?php echo $l->t('See our');?> <a class="hyperlink" href="<?php echo home_url('privacy') ?>"><?php echo $l->t('privacy policy');?></a></small>

</div>

</form>

</div>

<img class="responsive" src="<?php bloginfo('template_directory'); ?>/assets/img/whitepapers/gdpr-overview-thubmnail-banner.png"/>

</div>

</section>

<h3 class="section--intro text-center"><?php echo $l->t('Data protection');?></h3>

<h1 class="section--heading-1 text-center"><?php echo $l->t('Secure your data');?></h1>

<h3 class="section--intro text-center"><?php echo $l->t('While data needs to be available for employees at all times, the IT department must be able to ensure policies around securing and sharing personal data are respected.');?></h3>

</div>

<p class="section--paragraph"><?php echo $l->t('Many customers care deeply about their privacy and keeping their data secure while regulators give heavy penalties for data leaks. Nextcloud offers you the tools to keep data compliant and safe.');?></p>

<li><strong><?php echo $l->t('Legal compliance');?></strong><br/>

<?php echo $l->t('Federal data protection and GDPR-compliant, protecting data sovereignty, keep the server location in your country.');?></li>

<li><strong><?php echo $l->t('Data security');?></strong><br />

<?php echo $l->t('Multiple levels of encryption (HTTPS/SSL/TLS, AES-256 or stronger, server-side and end-to-end encryption) ensure the highest level of data protection from hacking.');?></li>

<li><strong><?php echo $l->t('Fine-grained authorization');?></strong><br/>

<?php echo $l->t('A dedicated user and group management as well as a rights system allows the assignment of access rights according to your requirements.');?></li>

</ul>

<p class="section--paragraph"><?php echo $l->t('Nextcloud is a popular self-hosted solution in businesses dealing with private data for its ability to strictly control access to data and industry-leading security capabilities.');?></p>

</div>

<a><img class="img-responsive" src="<?php echo get_template_directory_uri(); ?>/assets/img/features/file-access-control-nw.png" alt="in action"/></a>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('File Access Control');?></h3>

<p class="section--paragraph"><?php echo $l->t('The File Access Control feature of Nextcloud enables IT to codify legal and policy requirements, blocking unauthorized users uploading or downloading data following defined rules. Criteria include IP address ranges, group membership, file type and size, time and more. Data retention can be controlled as well, enabling administrators to limit the lifetime of certain files.');?></p>

<a href="/workflow" class="button button--blue button--arrow button--large"><?php echo $l->t('File Access Control');?></a>

</div>

<a><img class="img-responsive" src="<?php echo get_template_directory_uri(); ?>/assets/img/features/monitoring-nw.png" alt="in action"/></a>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('Monitoring and auditing logs');?></h3>

<p class="section--paragraph"><?php echo $l->t('Nextcloud offers built-in powerful monitoring capabilities, enabling organizations to ensure smooth performance. Systems can be monitored using the web interface or through monitoring and systems intelligence tools like OpenNMS, Splunk, Nagios or others. A full auditing system logs all user actions, enabling fully compliant usage of file sync and share.');?></p>

<a href="<?php echo home_url('monitoring') ?>" class="button button--blue button--arrow button--large"><?php echo $l->t('Monitoring and auditing');?></a>

</div>

<a href="<?php bloginfo('template_directory'); ?>/assets/img/features/endtoend-server-nw.png"><img class="img-responsive screenshot" src="<?php echo get_template_directory_uri(); ?>/assets/img/features/endtoend-server-nw.png" alt="in action" /></a>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('Encryption');?></h3>

<?php echo $l->t('Nextcloud uses industry-standard SSL/TLS encryption for data in transfer. Data at rest in storage can be encrypted using a default military grade AES-256 encryption with server-based or custom key management. Optionally and on a per-folder base data can be <a class="hyperlink" href="/endtoend">end-to-end encrypted</a> on the client with the server assisting in sharing and key management using a Zero-Knowledge model.');?>

</p>

<?php echo $l->t('Seamless integration and ease of use with key features like offline recovery keys, auditing and HSM support make Nextcloud Encryption capabilities leading in the industry.');?>

</p>

</div>

<blockquote class="ncc--paragraph">Nextcloud understands the necessity to provide core principle baseline security requirements, as such Nextcloud is built on these security principles to ultimately deliver a secure solution to their customers</blockquote>

<a class="hyperlink" href="https://nextcloud.com/blog/nextcloud-11-delivers-verified-security-improvements/"><?php echo $l->t('NCC Group');?></a>

</p>

</div>

<p class="section--paragraph"><?php echo $l->t('Nextcloud offers first-in-class, third-party verified security backed by a USD 10000 Security Bug Bounty program protecting against unauthorized access.');?></p>

<a href="<?php echo home_url('secure') ?>" class="button button--blue button--arrow button--large"><?php echo $l->t('Security in Nextcloud');?></a>

</div>

</section>

<h3 class="section--intro text-center"><?php echo $l->t('Compliance and security without losing productivity');?></h3>

<a><img class="img-responsive" src="<?php echo get_template_directory_uri(); ?>/assets/img/features/web-ui-nw.png" alt="in action"/></a>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('Easy access');?></h3>

<p class="section--paragraph"><?php echo $l->t('A first requirement for any secure solution to share data is that it does not force complexity on the user. Complexity leads to mistakes and mistakes are costly in many ways!');?></p>

<p class="section--paragraph"><?php echo $l->t('Nextcloud makes accessing and sharing data a breeze, providing users a comfortable, familiar workspace.');?></p>

</div>

<a><img class="img-responsive" src="<?php echo get_template_directory_uri(); ?>/assets/img/features/mobileDesktop.png" alt="in action"/></a>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('Multi-platform productivity');?></h3>

<p class="section--paragraph"><?php echo $l->t('Data needs to be available where your employees are. Tablets, mobile devices, laptops and desktops all have access to the same files at a moments notice thanks to the first-class Nextcloud clients.');?></p>

<p class="section--paragraph"><?php echo $l->t('Users can tag and comment on files for easy collaboration, roll back files to earlier versions or find deleted files in the trash. Real time collaborative editing and secure audio/video calls and chat complement the array of features aimed at enhancing productivity.');?></p>

</div>

<a><img class="img-responsive" src="<?php echo get_template_directory_uri(); ?>/assets/img/features/securedrop-email-nw.png" alt="in action"/></a>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('Secure file exchange');?></h3>

<p class="section--paragraph"><?php echo $l->t('Sharing files across the borders of your organization can be done easily and securely with our file-drop feature.');?></p>

<p class="section--paragraph"><?php echo $l->t('IT stays in control at all times, enforcing security policy with the File Access Control capabilities.');?></p>

<a href="<?php echo home_url('file-drop') ?>" class="button button--blue button--arrow button--large"><?php echo $l->t('File Drop');?></a>

</div>

</div>

<h3 class="section--paragraph__title"><?php echo $l->t('Integrated in email');?></h3>

<p class="section--paragraph"><?php echo $l->t('To quickly and securely get data to your customers or receive documents from them, use the Nextcloud Secure Sharing Outlook Add-in. This avoids insecure and big attachments and instead provides a secure, trust-worthy file exchange that does not direct your customers to a third party but runs on your server and your domain.');?></p>

<a href="<?php echo home_url('outlook') ?>" class="button button--blue button--arrow button--large"><?php echo $l->t('Email integration');?></a>

</div>

</section>

<h2 class="text-center"><?php echo $l->t('We provide trust');?></h2>

<p class="section--paragraph section--text--center"><?php echo $l->t('You are entrusted with the private data of your users. Breaking that trust is a costly, career-ending mistake.');?></p>

<p class="section--paragraph section--text--center"><?php echo $l->t('Nextcloud enables you to focus on your work, taking care that your data stays private and completely under your control!');?></p>

</div>

<a href="<?php echo home_url('install') ?>" class="button button--arrow button--large"><?php echo $l->t('Try Nextcloud Files');?></a>

<a href="<?php echo home_url('buy') ?>" class="button button--arrow button--large"><?php echo $l->t('Contact sales');?></a>

</div>

</section>

<h3 class="section--intro text-center"><?php echo $l->t('Easy integration');?></h3>

<h1 class="section--heading-1 text-center"><?php echo $l->t('Efficient deployment and management');?></h1>

<h3 class="section--intro text-center"><?php echo $l->t('Complexity is the enemy of security and Nextcloud is designed to offer quick and easy integration in existing infrastructure, leaving policies and procedures in place. Its powerful LDAP and storage integration seamlessly fits with existing user directories, Windows Network Drive, NFS and Sharepoint storage solutions.');?></h3>

<h3 class="section--intro text-center"><?php echo $l->t('The result: a quick implementation at low cost, and easy maintenance making a self-hosted Nextcloud the cloud compliance solution with the lowest TCO.');?></h3>

</div>

<h3 class="section--heading-2 text-center"><?php echo $l->t('Deep integration');?></h3>

</div>

<?php echo file_get_contents(__DIR__."/assets/img/icons/kerberos.svg");?>

<p class="section--paragraph"><?php echo $l->t('Nextcloud integrates in hospital infrastructure with support for SAML and Shibboleth, LDAP, Kerberos, Oauth, and other often used authentication mechanisms and runs on all enterprise Linux systems offering support options to match their life cycle.');?></p>

</div>

<?php echo file_get_contents(__DIR__."/assets/img/icons/storage.svg");?>

<p class="section--paragraph"><?php echo $l->t('Data storage can be one or multiple NFS, Object Storage, Samba or a variety of other powerful storage mechanisms. This way Nextcloud provides seamless access to data on existing storage mechanisms, respecting existing access control policies and transparently handling changes on the underlying storage layer.');?></p>

</div>

<p>

<div class="row "><img class="responsive text-center" src="<?php bloginfo('template_directory'); ?>/assets/img/whitepapers/architecture-thumbnail-banner.png"/></div>

<p><label for="email"><?php echo $l->t('Download our Architecture whitepaper!');?><br>

<input type="checkbox" name="moreinfo" value="1"> <small><?php echo $l->t('Subscribe me to the monthly Nextcloud newsletter');?>. <?php echo $l->t('See our');?> <a class="hyperlink" href="<?php echo home_url('privacy') ?>"><?php echo $l->t('privacy policy');?></a></small>

</div>

</form>

</p>

</div>

</section>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

FilesExpand file tree

page-gdpr.php

Latest commit

History

page-gdpr.php

File metadata and controls