A statement from Nextcloud said the Federal Information Technology Centre (ITZBund), which takes care of IT services for the entire federal government, had been running a pilot of 5000 users with Nextcloud since October 2016.
Following a tender, which Nextcloud won, this will now be rolled out everywhere.
The company noted the following points about the service which ITZBund would run:
- There would be no public cloud. ITZBund will not be using a public cloud with data leaking out of Europe/Germany, but a private, on-premises cloud which is totally under its control.
- Open source. They have opted for an open source solution from a European company instead of foreign (US or otherwise) solutions. Plus no vendor lock-in and no access by any third party to the data.
- GDPR. The new Bundescloud is fully compliant with the forthcoming General Data Protection Regulation which takes effect on 25 May. This is very important in Germany as the DSGVO (the German implementation of GDPR) goes into effect the same month.
- Facebook leaks. Decentralising data away from the big cloud vendors is very sensible and relevant in light of the continuing string of revelations with regards to privacy violations and data leaks from the major US cloud vendors.
- The use of an open source solution has security consequences, as the provider of IT services to the German Government is highly motivated to avoid another "Bundestag-hack".
As the central IT service provider of the German federal government, ITZBund operates IT services for more than a million administrative and industrial users. It emerged from the merger of the Federal Agency for Information Technology (Division of the Federal Ministry of the Interior), the Federal Agency for IT Services (Division of the Federal Ministry of Transport and Digital Infrastructure) and the Centre for Information Processing and Information Technology (division of the Federal Ministry of Finance).
ITZBund employs about 2700 people, mostly IT specialists, engineers and network and security professionals.
The Nextcloud statement said strict security requirements were crucial for the choice of Nextcloud as the file sync and share solution. Another important concern was scalability both in terms of large numbers of users and extensibility with additional features, for which Nextcloud offers its powerful Apps concept (with over 100 apps available in its app store).
It claimed that "Nextcloud delivers some of the strongest security measures in the industry, making it the ideal solution for government agencies or companies dealing with data of private citizens".