Migrating from Microsoft 365 to Nextcloud means moving files, folder structures, permissions and metadata from a US-hosted SaaS environment to a self-managed or European-hosted open-source platform. For IT managers and DPOs operating under GDPR, NIS2 Directive (EU) 2022/2555 or sector-specific regulations, this is not simply a technology swap: it is a data governance decision with direct implications for sovereignty, auditability and long-term vendor independence.
Why organisations are making this move
The legal and commercial pressure to leave Microsoft 365 has intensified significantly since the Schrems II ruling and the EDPB’s 2023 coordinated enforcement action on international data transfers.
The European Data Protection Board stated in its guidance on transfers:
“Organisations must ensure that any transfer of personal data to a third country is subject to appropriate safeguards under Article 46 GDPR, and that data subjects’ rights remain enforceable.”
Microsoft 365 stores and processes data subject to the US CLOUD Act, which allows US authorities to compel disclosure regardless of where data physically resides. For organisations handling sensitive personal data, this creates a structural conflict with GDPR Article 44 and beyond.
Migration steps: from Microsoft 365 to Nextcloud
A full-fidelity migration from Microsoft 365 to Nextcloud follows a sequence of distinct phases that each require preparation before execution.
Phase 1: Inventory and mapping
Before any data moves, you need a complete inventory of what you are migrating. Export a list of all OneDrive accounts, SharePoint site collections and document libraries using the Microsoft Graph API or the SharePoint admin centre. Document which groups, users and permission levels exist, because Nextcloud uses a different permission model and the mapping must be explicit before migration begins.
Phase 2: Nextcloud environment setup
Provision your Nextcloud instance, whether self-hosted or via a managed provider, and configure user accounts to match your source directory. If you use Azure Active Directory, you can synchronise users to Nextcloud via LDAP or SAML before the migration run. This ensures that permission assignments in the migration tool resolve to real accounts rather than orphaned entries.
Phase 3: Data transfer
The Nextcloud Migration Toolkit, combined with Microsoft’s Graph API, handles files, folder structures and basic permission mappings from OneDrive and SharePoint in a single pass. For SharePoint specifically, you map each document library to a corresponding Nextcloud folder or group share. Run a test migration on a non-production site collection first to validate the output before migrating production data.
Phase 4: Validation and cutover
After the migration run, compare file counts and folder structures against the source. Spot-check permissions on a representative sample of files. Communicate new Nextcloud share links to external parties who previously received OneDrive or SharePoint links, because those links break at cutover. Once validation passes, decommission the Microsoft 365 licences on a planned date rather than immediately, to allow a short rollback window.
What happens to permissions, shares and metadata
Permission fidelity is the most technically complex part of this migration, and it is where most projects encounter unexpected effort.
| Microsoft 365 element | Nextcloud equivalent | Migration fidelity |
|---|---|---|
| OneDrive user folders | Personal files per user account | High: files and folder hierarchy transfer cleanly |
| SharePoint document libraries | Nextcloud group folders or shared drives | Medium: folder structure transfers; custom columns do not |
| SharePoint permission levels (Full Control, Edit, Read) | Nextcloud share permissions (can edit, read-only, file drop) | Partial: broad roles map; item-level permissions require manual review |
| External sharing links (OneDrive anonymous links) | Nextcloud public share links | None: existing links break; must be recreated |
| File last-modified timestamps | Preserved by migration toolkit | High: timestamps carry over in full-fidelity migrations |
| Version history | Not portable from Microsoft backend | None: export separately before migration or accept loss |
Frank Karlitschek, Founder and CEO of Nextcloud GmbH, has noted: “Moving to a self-hosted or European-hosted solution is not just a technical decision; it is a governance decision that touches on data sovereignty, vendor lock-in and long-term cost control.” This framing matters for DPOs who need to justify the migration project internally as a compliance measure, not just a cost exercise.
How long does a typical migration take
Timeline depends primarily on data volume, permission complexity and organisational readiness, not on raw technical speed.
| Organisation size | Data volume | Typical duration |
|---|---|---|
| Up to 50 users | Under 2 TB | 4 to 6 weeks |
| 50 to 250 users | 2 to 10 TB | 6 to 10 weeks |
| 250+ users or complex SharePoint architectures | 10 TB and above | 10 to 16 weeks |
The inventory and mapping phase alone typically consumes one to two weeks in organisations that have never audited their SharePoint structure. Compliance requirements under GDPR or the NIS2 Directive (EU) 2022/2555, such as documenting all data flows and processing records, add further time to the pre-migration phase. For organisations that want to reduce internal project load, managed Nextcloud Enterprise providers such as Qsentinel handle migration planning, data transfer and post-migration validation as part of a structured onboarding process.
FAQ
Can I migrate SharePoint document libraries directly to Nextcloud?
Yes. The Nextcloud Migration Toolkit, combined with Microsoft’s Graph API, can pull SharePoint document libraries including folder hierarchy and basic permissions. Complex SharePoint site structures with custom columns or workflows require manual mapping before the migration run.
What happens to shared links when I move from OneDrive to Nextcloud?
Existing OneDrive shared links break after migration because they point to Microsoft infrastructure. You need to recreate share links in Nextcloud and communicate the new URLs to recipients before decommissioning the Microsoft 365 tenant.
Does Nextcloud preserve file modification dates and author metadata?
Full-fidelity migration tools can preserve last-modified timestamps and, where available, original author information stored in file metadata. Co-authorship history stored in Microsoft’s backend services is not portable and will be lost unless exported separately before migration.
How long does a Microsoft 365 to Nextcloud migration take?
For a 50-user organisation with up to 2 TB of data and standard permission structures, four to six weeks is realistic. Larger environments with complex SharePoint architectures or strict compliance requirements under GDPR or NIS2 Directive (EU) 2022/2555 typically need eight to twelve weeks.
Is a managed migration option available for Nextcloud?
Yes. Providers such as Qsentinel offer managed Nextcloud Enterprise deployments that include migration assistance, covering data transfer from Microsoft 365, permission mapping and post-migration validation, with hosting options in Switzerland or on-premise.
Hoe Qsentinel dit oplost
Qsentinel is the managed Nextcloud Enterprise workspace, enhanced by Qsentinel with post-quantum encryption and sovereign private AI, hosted in Switzerland or on-premise, out of reach of the CLOUD Act.