Zum Inhalt springen
Unabhängig verifiziert · Quartalsweises Re-Audit
EU VETTED

OnlyOffice

VERIFIZIERT
Docs & Wikis · Latvia
Founded 2009 · onlyoffice.com ↗

Riga-based Latvian office suite (Ascensio System SIA), AGPLv3 self-hostable + DocSpace cloud; complex post-2023 Singapore+UK+Russian-origin ownership chain.

Warum diese Bewertung?

ONLYOFFICE has a complex ownership chain procurement-grade buyers must understand: operating entity is Ascensio System SIA in Riga, Latvia (so Latvian + EU jurisdiction at the contracting layer); founder and CEO Lev Bannov is a Russian national with Russian + Turkish dual citizenship who has been residing in Istanbul since 2023; the company was originally a 2009 subsidiary of Russian-based New Communication Technologies until an August 2023 ownership restructure transferred control to Ascensio System Limited (UK), in turn owned by OnlyOffice Capital Group Pte. Ltd. (Singapore), with Bannov as the ultimate beneficial owner across the group. AGPLv3-licensed and self-hostable, so EU buyers can fully escape the ownership chain by running their own instance. Score 3/5 reflects the operating-entity EU jurisdiction plus the structural sovereignty complications; self-host on EU infrastructure (Hetzner / OVHcloud / Scaleway) yields effective 5/5 / none posture and is the procurement-grade recommended path.

SCORE
3.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
JUMP TO
OVERVIEW

About OnlyOffice

ONLYOFFICE is a Microsoft 365 / Google Docs alternative office suite — documents, spreadsheets, presentations, PDF editing, fillable forms, real-time co-authoring — operated by **Ascensio System SIA**, headquartered in Riga, Latvia and founded in 2009 by **Lev Bannov**. The product ships as a fully open-source AGPLv3 codebase plus a managed DocSpace cloud, with desktop apps (Windows, Linux, macOS), mobile apps (iOS, Android), and 40+ third-party connectors for embedding into platforms like Nextcloud, ownCloud, Confluence, and many others. Real-world EU adoption is significant — the city of **Lyon, France** publicly migrated to OnlyOffice in 2025 as part of its sovereign-IT strategy. For an EU-sovereignty audit ONLYOFFICE is the most structurally complex listing in the docs-and-wikis category. The operating-and-contracting entity is **Ascensio System SIA** in Riga, Latvia — an EU member state company. But the corporate ownership chain has multiple non-EU layers that procurement teams must understand before signing material multi-year deals: Ascensio System SIA was originally established in 2009 as a subsidiary of the **Russian-based New Communication Technologies**; in **August 2023 the ownership restructure** transferred control to **Ascensio System Limited (UK)**, which is in turn owned by **OnlyOffice Capital Group Pte. Ltd. (Singapore)**; the founder and **ultimate beneficial owner Lev Bannov** holds Russian and Turkish dual citizenship and has resided in **Istanbul, Turkey** since 2023. The August 2023 restructure was specifically designed to distance the operating entity from Russian ownership and align with EU procurement norms — but the structure is still non-trivial: EU-operating, UK-holding, Singapore-master-holding, Russian-Turkish UBO. AGPLv3 open-source means the entire codebase is auditable and self-hostable — this is the procurement-grade escape hatch. **Running the open-source ONLYOFFICE Community / Document Server on EU infrastructure (Hetzner, OVHcloud, Scaleway, IONOS, STACKIT)** keeps everything inside the customer's chosen jurisdiction and effectively neutralises the ownership-chain complexity for the deployment data flows. Pricing: open-source self-host free; DocSpace Cloud free Startup tier with paid Business / Enterprise tiers. Best fit: EU public-sector and government buyers (Lyon model) that self-host on EU infrastructure under AGPLv3, organisations needing Microsoft Office format compatibility with sovereign-deployment options, and any procurement-grade buyer comfortable with the complex but EU-operating ownership chain (or who self-hosts to neutralise it).
SUB-PROCESSORS

Unterauftragsverarbeiter-Karte · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Rahmenwerke & Zertifizierungen · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-11).
FEATURES

Funktionsmatrix

INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option Yes
PRICING

Preise & Tarife

FREEMIUM
Individuelle Preise

Kontaktieren Sie den Anbieter für Staffel- oder Mengenpreise.

Preisseite ansehen ↗
PUBLIC DOCUMENTS

Öffentliche Dokumente

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement — this caps the compliance score (see How we score).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    www.onlyoffice.com/legal…
    Open ↗
ALTERNATIVES

Alternativen in dieser Kategorie