Nextcloud Talk: secure video conferencing beyond Teams and Zoom

Nextcloud Talk is an open-source, self-hostable video conferencing, voice calling and team messaging platform built directly into the Nextcloud collaboration suite. Unlike Microsoft Teams or Zoom, it runs on infrastructure you control, meaning no conversation data transits through US-jurisdiction servers unless you explicitly choose that.

What Nextcloud Talk actually does

Talk covers the full communication stack that most organisations currently split across two or three separate tools.

At its core, Nextcloud Talk provides persistent team chat organised by conversations or projects, one-on-one and group video calls, screen sharing, and file sharing backed by the Nextcloud Files layer. Calls are browser-based using WebRTC, so participants on Windows, macOS, Linux, Android or iOS can join without installing a dedicated client, though native mobile apps exist for iOS and Android.

For structured meetings, Talk supports lobby functionality (holding participants until the host admits them), call recordings stored directly in Nextcloud Files, and breakout rooms in recent releases. Moderation controls include muting participants, promoting co-hosts and removing attendees. Guest access via a shareable link lets external parties join a call in a browser without creating an account, which removes a common friction point in cross-organisation meetings.

The signalling and media architecture matters for scale. Out of the box, Talk handles small group calls well. For larger deployments, Nextcloud offers the High Performance Backend (HPB), a Spreed WebRTC-based component that takes over media routing and signalling offload, extending reliable video conferencing to significantly larger concurrent participant counts.

How Nextcloud Talk compares to Microsoft Teams and Zoom

The differences between these platforms fall into two distinct categories: feature parity and data sovereignty. The first is often overstated as a gap; the second is frequently underestimated as a risk.

Feature comparison

The sovereignty gap

Microsoft Teams reached 320 million monthly active users as of early 2023 (Microsoft, Q3 FY2023 earnings call), and Zoom reported approximately 192,600 enterprise customers at the end of fiscal year 2024 (Zoom Annual Report FY2024). Both are US-headquartered companies subject to FISA Section 702, which allows US intelligence agencies to compel data access regardless of where servers are physically located.

The European Data Protection Board confirmed in 2023 that personal data transfers to the United States remain subject to supplementary safeguards under Article 46 GDPR even after the EU-US Data Privacy Framework was adopted. Privacy lawyer Max Schrems, chair of noyb, has been direct on this point: “Storing data with a US cloud provider means it can be subject to FISA Section 702 orders, regardless of where the servers are physically located.”

For a DPO or CISO operating under GDPR, NIS2 or sector-specific regulation such as BaFin requirements in financial services, this is not a theoretical concern. It is a structural compliance liability that Teams and Zoom cannot resolve by contractual means alone.

What Qsentinel adds for performance and security

Running Nextcloud Talk in a managed enterprise context requires correct configuration of several components that are non-trivial to deploy and maintain in-house.

Qsentinel offers Nextcloud Talk as part of a managed Nextcloud Enterprise deployment hosted in Switzerland or on your own infrastructure. The relevant additions fall into three areas. First, the High Performance Backend is pre-configured and sized for the organisation’s user count, removing the most common cause of degraded video quality at scale. Second, Qsentinel integrates post-quantum encryption at the storage and transit layer, so recorded meetings and shared files are protected against harvest-now-decrypt-later attacks using algorithms aligned with NIST post-quantum standards. Third, the platform includes sovereign private AI features, meaning AI-assisted transcription or meeting summaries remain within the sovereign perimeter rather than being processed by a third-party US AI API.

From a compliance documentation perspective, Swiss hosting under the revised Federal Act on Data Protection (revFADP, in force since September 2023) provides a recognised adequacy basis for EU-to-Switzerland data transfers, which simplifies Article 46 GDPR documentation compared to US transfers. On-premise deployment removes the cloud transfer question entirely.

FAQ

Does Nextcloud Talk support end-to-end encryption?
Yes. Nextcloud Talk supports end-to-end encrypted calls for one-on-one conversations and, with appropriate server configuration, for small group calls. Encryption is implemented at the client level, meaning the server does not hold decryption keys.

Can Nextcloud Talk replace Microsoft Teams for large enterprises?
For organisations with standard conferencing needs, Talk covers the core use cases. Very large deployments with thousands of simultaneous video participants require the High Performance Backend and appropriate infrastructure sizing. The primary distinction from Teams is not capacity but data sovereignty: Talk keeps all data within your chosen jurisdiction.

Is Nextcloud Talk compliant with GDPR?
Self-hosted or Swiss-hosted Nextcloud Talk avoids the US-jurisdiction exposure that affects Microsoft Teams and Zoom under FISA Section 702 and Article 46 GDPR. Compliance still depends on your own configuration, access controls and data processing agreements, but the structural transfer risk is eliminated.

What infrastructure does Nextcloud Talk require for enterprise use?
Small deployments (up to roughly 10 concurrent video participants) can run on a standard VPS. Larger deployments require the High Performance Backend based on the Spreed WebRTC server, which offloads signalling and media routing. Managed providers pre-configure this infrastructure as part of their service.

How does Nextcloud Talk handle guest access for external meetings?
Talk supports shareable links for guest participants who join via a browser without creating an account. This makes it practical for external meetings without requiring the other party to install software or register, which is functionally comparable to the guest join experience in Zoom or Teams.