01
One login for everything
Files, documents, chat, apps — behind a single Keycloak identity. Create a user once. Disable a user once. No more SaaS sprawl, no more offboarding risk.
Built to Europe's GDPR standards · for companies worldwide
One login. Your files, your office, your apps — on your own server, under your control.
A browser-based workspace for small and mid-sized companies that want their data under their own control — whether you're in Berlin, Boston, or Bangalore. Built to Europe's GDPR standards: Keycloak single sign-on, Nextcloud files, Collabora office suite — self-hosted or managed in selected data centres.
The workspace is live today — try the demo, self-host the server. A free, open local app (run it on your own machine, no server) and managed hosting are in active development.
Three reasons to adopt
Why companies choose Sovereign Workspace.
02
GDPR-grade by architecture
Self-host on your own rack, or deploy to the region your rules require — an EU data centre, Hetzner's Singapore region, or another provider you trust. Data protection comes from architecture, not a promise: the workspace is built to GDPR standards, so wherever your company is based you meet one of the world's strictest privacy bars by default, with no dependence on US cloud providers. Data residency is your choice. When a customer, auditor, or regulator asks where your data lives, you have a one-sentence answer.
03
Built in the open
We intend to release the workspace client under an open source licence — the specific licence is not yet decided. The server that powers a team is commercial — source-available to customers for audit, not open. Final terms are set at incorporation with our partners.
What's in the box today
Everything a small or mid-sized company actually needs.
The full workspace — self-host the server, or have us host it. Every capability below is live today; we don't list anything we haven't shipped.
| Capability | What it means for your team |
|---|---|
| Single sign-on Keycloak | One identity for everything. An admin creates a user once — no second Nextcloud password, no "Connect Nextcloud" step, no OAuth dance. |
| Files Nextcloud | Every user's drive is auto-provisioned on first login. Upload, share, sync across devices through the standard Nextcloud clients. |
| Office suite Collabora Online | Real-time collaborative editing of Word, Excel, PowerPoint, and OpenDocument files. Double-click a doc, edit with colleagues live. |
| Chat, voice & video Element · Matrix · Jitsi | Encrypted group and direct messages, 1:1 voice and video calls, and Jitsi Meet group meetings — all behind the same single sign-on. No separate accounts, no third-party meeting links. |
| Mail, calendar, contacts & tasks native apps | A built-in email client on a sovereign mail server (Postfix + Dovecot, DKIM/SPF/DMARC), plus calendar, contacts, and tasks backed by Nextcloud CalDAV/CardDAV — native workspace apps behind the same login, not bolted-on webmail. |
| Built-in productivity apps | A word processor, a spreadsheet with formulas, charts, and pivot tables, and a presentation editor — plus Photos, Music, Paint, and a PDF viewer. First-party apps that open your workspace files, nothing extra to install. |
| Browser-based desktop | Works on any laptop or tablet with a modern browser. Nothing to install on the client. Below a phone-sized width it switches to a mobile layout — a home screen and app switcher — with the same apps inside. |
| App catalogue | Admin-curated catalogue of web apps — Element chat, Jitsi video, Forgejo (Git), CryptPad, Excalidraw, OpenProject, Zammad. Users install; admins decide what's available. |
| Build your own apps developer SDK | A published SDK and design-token package (on npm) let third-party developers build apps that run inside the workspace and match its light and dark theme. See the developer guide. |
| App bundles per group | Admins assign bundles to Keycloak groups. Marketing, Finance, HR each see the apps they actually need. |
| Self-hosted, Docker Compose | One docker compose up on a single server brings the whole stack up. Hetzner, OVH, IONOS, your own rack. |
| Open client, inspectable server Open-source client · source-available server | We intend to release the workspace client under an open source licence (not yet chosen); the server stays commercial but source-available to customers for audit, not open. Final terms are set at incorporation. Deployments live on European infrastructure — or any server you choose — and the running workspace contains no callback path back to us — if you ever decide to leave, your data is already on your machine. |
Built on open-source foundations
We don't reinvent identity, storage, or office. We integrate the open-source projects Europe already trusts.
See it in a browser — nothing to install or sign up for.
The workspace is running live. Try it, then self-host the server — or talk to us about hosting it for you.