Organizations seeking complete data sovereignty over their documents, spreadsheets, and shared project folders can deploy OpenCloud as a self-hosted workspace for file sync, sharing, and real-time collaboration across web, desktop, iOS, and Android clients. Teams organize departmental assets inside dedicated Spaces where files belong to the project rather than individual user accounts, ensuring continuity when personnel change and enabling delegated space managers to assign granular read, edit, or upload permissions. Through built-in WOPI integration with Collabora Online, multiple colleagues can co-edit Microsoft Office and OpenDocument files simultaneously in the browser with automatic conflict locking and version history recovery. External partners and clients can access files via password-protected public links with custom expiration dates or upload deliverables into write-only File Drop folders without seeing existing directory contents. Cross-organization collaboration works seamlessly over the Open Cloud Mesh federation protocol, while full-text and tag-based search locates documents across personal and shared drives in seconds. Client devices synchronize changes in real time with support for virtual files on demand, resumable chunked uploads, and offline mobile access with camera document scanning. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

The project that proved organizations could have Dropbox-style convenience with complete data ownership: ownCloud is the original open-source file sync and share platform - the codebase Nextcloud later forked from. This deployment runs the classic ownCloud Server (PHP over PostgreSQL or MariaDB, with Redis caching), the battle-tested edition trusted across enterprises, universities, and public institutions worldwide. The core loop: store files on your server, sync them via desktop clients for Windows, macOS, and Linux plus iOS and Android apps, and access everything through the web interface or standard WebDAV. Sharing is granular - internal users and groups, external recipients via public links with passwords and expiration dates, and federated sharing that connects separate ownCloud instances into one network. Security controls include file firewall rules, multi-factor authentication, encryption, and detailed audit-friendly lifecycle management with versioning and trash-bin recovery. An app marketplace extends the platform, and Web Office integrations bring collaborative document editing through Collabora Online, OnlyOffice, or Microsoft Office Online directly into your files. LDAP and Active Directory integration slots it into existing identity infrastructure. For teams that need a proven, self-hosted alternative to Dropbox or Google Drive - where compliance demands knowing exactly which disk your data sits on - ownCloud remains a foundational choice.

Google Workspace and Microsoft 365, replaced by a platform you actually control: Nextcloud is the self-hosted digital workspace. Files is the core: file storage and sync across desktop, mobile, and web clients, with sharing, versioning, and collaboration built in. Around it, Talk provides private text chat, audio/video conferencing with screen sharing, SIP integration, and persistent voice rooms; Groupware bundles calendar, contacts, and mail with delegation support; and Office offers two collaborative suites - the Collabora-based option with deep ODF support, and Euro-Office, whose local-processing architecture delivers strong Microsoft Office compatibility and fast browser rendering with reduced server load. The Nextcloud Assistant threads AI through the platform via a context-aware sidebar, Whiteboard covers visual collaboration, Flow handles automation, and an app ecosystem of hundreds of extensions adds everything from Kanban boards to end-to-end encryption. Hub 26 brings a lighter UI with a unified app switcher and Nextcloud Governance for organizations under strict regulatory requirements. This is the flagship of data sovereignty: your files, chats, calendars, and documents live on your server, under your jurisdiction, with GDPR compliance by architecture rather than by contract.

With over 1,200 GitHub stars, 12,000+ commits, and more than a decade of active development distributed under the AGPL-3.0 license, Cozy Cloud operates as a comprehensive personal data hub that goes far beyond file storage by connecting your documents, contacts, calendars, banking transactions, energy bills, and productivity tools into a single self-hosted platform where no third party profiles you. The cozy-stack Go binary handles file storage, CouchDB document management, job scheduling, app serving, and the REST API in a single process consuming approximately 150MB of RAM idle. Sandboxed konnectors import data from 50+ external services — banks, utility providers, telecom operators, cloud drives — running as isolated jobs via nsjail to prevent untrusted code from accessing other user data. The built-in app store serves web applications in subdomain-isolated environments with Content Security Policy headers, each app communicating exclusively through the documented REST API. Real-time synchronization via PouchDB replication and WebSocket keeps files, contacts, and documents consistent across desktop clients, mobile apps for iOS and Android with automatic photo backup, and the web interface. Security features include automatic Let's Encrypt TLS certificates, Argon2id password hashing, optional TOTP two-factor authentication, and GDPR-compliant data export via the CLI. Each user receives their own isolated instance with independent storage, database, and application configuration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

ProjectSend gives every client a private, signed-in page on your own server where only the files you assigned to them appear, so contracts, photo shoots, and quarterly reports skip the third-party file-sharing service. You upload once, then share a file or a whole folder with one client, a group, or anyone holding a public link, with an optional expiry date or download limit. Clients search, preview, and download files one by one or as a zip, whole folders included, comment on a document so questions stay beside it, and send files back within the quota you set. Uploads of up to 2 GB travel in resumable pieces, so a dropped connection pauses a transfer instead of ruining it. Folders, categories, custom client fields, and linked file versions keep a growing library tidy, while roles with granular permissions let staff work without becoming administrators. The activity log and download history record who received what and when, and the log exports to CSV. Sign-in works with email and password, LDAP, or Google and Microsoft accounts, with optional two-factor authentication. Your logo, watermark, themes, and editable email templates carry your brand, and the interface is translated into 16 languages. Optional virus scanning quarantines suspicious uploads, and a REST API with scoped tokens automates uploads, sharing, and account management. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0-or-later licensed.

By routing file transfers directly between client browsers and S3-compatible object storage through time-limited presigned URLs, Safebucket enables organizations to share large files and folders without bottlenecking their application server. Teams organize documents into logical buckets with nested folder hierarchies, preview images, videos, audio tracks, and PDFs inside a sandboxed browser viewer, or bundle up to one hundred selected items into a single client-side ZIP download. Public Quick Share links let external recipients download files or entire folders from a browser or via command-line curl redirects, while Reverse Share turns any shared folder into a secure dropbox where guests can upload files back under size and count quotas. Every shared link supports optional password protection, expiration dates, and maximum view limits, complemented by per-file expiration timers and a soft-delete trash bin with configurable retention. Two-tier role-based access control pairs platform roles (Admin, User, and Guest) with bucket-level permissions (Owner, Contributor, and Viewer), allowing teams to invite external collaborators via challenge-verified email links. Authentication integrates with OpenID Connect identity providers and LDAP or Active Directory servers alongside TOTP multi-factor authentication. Administrators gain a four-view governance console covering platform storage metrics, user and bucket inventories, and searchable audit trails filtered by action, user, and date range. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

QuickDrop functions as an ephemeral, self-hosted file distribution node and pastebin that eliminates account requirements for rapid data transfers. Users can drag individual files, paste plain text code snippets, or drop entire folder structures while preserving complete directory hierarchies through automated client manifests. Resumable chunked transfers split multi-gigabyte payloads into resilient blocks, ensuring dependable uploads over unstable network connections. Senders can protect sensitive documents with optional AES encryption at rest, individual passphrase requirements, and automatic metadata stripping that removes GPS coordinates and camera EXIF markers. Granular share token policies restrict access by enforce maximum download quotas, burn-after-reading limits, or strict calendar expiration timestamps. In-browser viewers generate instant previews for code syntax, Markdown documentation, PDF reports, audio tracks, and high-resolution images without downloading files locally. Built-in QR code generators allow mobile devices to retrieve shared payloads instantly across local wireless networks. System operators can govern storage lifecycles through an administrative control panel with configurable retention windows, automated background garbage collection, and custom storage caps. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Upload a file, get a unique download link and a separate delete link - Jirafeau has done exactly this one thing since 2008. It is plain PHP with no database, no mail server, no JavaScript framework, and no external dependencies - files and metadata live on the filesystem, which is why it runs on nearly anything and why it has outlasted most of its imitators. Uploads use the HTML5 file API, so PHP's post_max_size ceiling does not constrain file size, with live progress showing speed, percentage, and time remaining. Every upload takes options: expiration from one minute to a year to unlimited, self-destruct after first download, and password protection with configurable policy - passwords can be optional, required, or server-generated with complexity rules. Server-side encryption (modern builds use XChaCha20-Poly1305) stores files encrypted at rest with the decrypt key embedded only in the download URL, never on the server, so a compromised host cannot read the contents. Unencrypted deployments get file-level deduplication - identical files stored once with multiple links. Upload access can be gated by password lists or IP allowlists, a small admin panel manages stored files, and a CLI cleanup script handles expired files via cron. Recipients can preview supported files in-browser.

Upload files, get a share link, let it expire: PsiTransfer is a self-hosted WeTransfer with no accounts, no logins, and no third-party cloud with size caps and metadata harvesting. The engineering focus is large files over imperfect networks. Uploads use the tus.io resumable protocol, so a dropped connection on a multi-gigabyte video resumes exactly where it stopped once you're back online; downloads support HTTP range headers for the same resilience, and everything streams, so file size is bounded by your disk rather than memory. Files organize into upload buckets with retention you control: expire after a set time (up to weeks) or after a one-time download, with automatic cleanup when links lapse. Recipients need nothing installed - they open the link, preview files in modal views, and grab everything as a zip or tar.gz archive with one click. Buckets can be password-protected (AES-encrypted download lists), and security-through-obscurity is done properly: bucket URLs use hashed UUID tokens and stored filenames are replaced with UUIDs. An optional admin page (enabled by setting an admin password) lists bucket information and storage. The Vue.js frontend ships under 100 KB gzipped and is fully responsive. Honest caveat from the author: no end-to-end payload encryption yet. BSD-licensed, Docker-ready.

Somewhere between the shoebox and the inbox, Papra keeps receipts, warranties, and leases in a self-hosted archive you can actually search. Upload a photographed receipt and built-in OCR reads its text, so a search for the store name finds it later. Searches combine name:, content:, tag:, created:, and has: filters with AND, OR, NOT, and parentheses, and any query can be saved as a sidebar view. Tagging rules label uploads by name or content and can be applied to documents already stored. Optional AI auto-tagging works with a cloud provider or a local model such as Ollama. Custom properties add searchable typed fields such as text, number, date, yes or no, and select. Organizations keep a household's or a team's archive apart, with owner, admin, and member roles. Share links let outsiders open a document without an account, with optional passwords and expiry dates, and each link can be switched off. Forward an email to a generated address, or drop files into a watched folder, and documents arrive without opening the app; both are opt-in. Deleted files wait 30 days in the trash, and optional encryption protects stored files. Sign in with email, GitHub, Google, or a custom OAuth2 provider, and script the archive through the API, SDK, CLI, or webhooks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Puter delivers a complete cloud operating system that runs entirely in the browser — turning any device with internet access into a full-featured personal computer with desktop environment, file management, application hosting, and developer platform. The familiar desktop interface presents windows, taskbar, right-click menus, drag-and-drop, and multi-window management indistinguishable from native operating systems. The hierarchical filesystem supports file creation, uploads, sharing, permissions, and trash recovery with storage backends ranging from local SQLite for self-hosting to S3 and DynamoDB for production scale. Built-in AI integration provides access to GPT-4, Claude, and other models directly from the desktop for text generation, code assistance, and image creation. The developer platform offers a JavaScript SDK, REST APIs, cloud storage, key-value database, and serverless workers for building and hosting web applications without managing infrastructure. Sandboxed applications run in iframes with IPC communication and permission-based access to filesystem, AI, and system services. The app store enables publishing, discovering, and monetizing applications built on the Puter platform. Website hosting publishes static sites with custom domains directly from the file manager. Multi-user support provides individual accounts with authentication, resource isolation, and sharing capabilities. Deploy via Docker with a single command, Docker Compose for production, or npm for development — the one-line install script handles everything automatically on Linux, macOS, and Windows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Tools and applications that already speak S3 can use RustFS as their storage backend, so backup jobs, data pipelines, and services keep working while the data stays on infrastructure you control. A built-in web console on port 9001 manages buckets, object uploads and downloads, access keys, users, groups, and IAM policies, with a status page for cluster health, capacity, and scanner activity. Versioning, Object Lock retention, bucket quotas, and server-side encryption with Vault or AWS KMS backends protect objects once they land. Lifecycle rules expire or transition data, and tiering moves cold objects to remote targets such as Amazon S3 or Wasabi. Bucket replication and site replication keep clusters in sync, and event notifications call webhooks when objects change. Single-node mode suits a lab or small server, while distributed mode adds erasure coding, bitrot protection, background healing, and pool expansion or decommissioning as capacity grows. Sign-in works with local users, OIDC single sign-on, or OpenStack Keystone, and FTPS and WebDAV are available by default, with SFTP and the Swift API as opt-in builds. A preview of S3 Tables exposes an Iceberg REST catalog for tools such as DuckDB and PyIceberg, and a documented migration path moves existing MinIO deployments across. Typical uses include backups, container registries, logs and traces, data lakes, and AI training sets. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Engineers who have outgrown Duplicati or rsync scripts tend to appreciate Kopia's design: encrypted, compressed, content-deduplicated snapshots in Go, stored in a repository on any storage you control - S3, Google Cloud Storage, Azure Blob, Backblaze B2, SFTP, WebDAV, or a plain filesystem. Encryption is mandatory and end-to-end: every block is encrypted client-side with AES-256-GCM or ChaCha20-Poly1305 using keys derived from your repository password, and even file names never leave the machine in plaintext. Blocks are packed into 20-40 MB blobs with random names, so the storage provider learns nothing about content or structure. Deduplication is automatic and content-based - identical data across files, snapshots, and even multiple machines backing up to the same repository is stored once. Policies govern everything per-directory: compression choice, retention (hourly through annual), scheduling, and ignore rules. Incremental snapshots are point-in-time records you can mount and browse like a filesystem. This deployment runs the Kopia repository server with its web UI, centralizing backups from multiple client machines over an authenticated API - each client connects with the server URL and certificate fingerprint, and users only see their own snapshots. Error correction, high-latency-tolerant caching, and both CLI and GUI round it out.

With over 110,000 GitHub stars and one of the fastest-growing open-source communities in the self-hosted space, Immich delivers a Google Photos-grade experience entirely on your own hardware. The platform handles automatic background backup from Android and iOS devices, deduplication, and support for RAW formats, LivePhotos, and MotionPhotos. Its machine learning pipeline runs facial recognition and clustering locally on your server, enabling you to group photos by person without sending a single image to the cloud. CLIP-based semantic search lets you find images by describing their content in natural language, while metadata-driven search covers EXIF data, dates, and locations. The web interface built with SvelteKit provides a responsive timeline view, albums, shared albums with configurable permissions, public sharing links with optional passwords and expiry dates, partner sharing for family libraries, and a global map plotting photos by GPS coordinates. Administrative features include multi-user support with per-user storage quotas, OAuth integration, API key management, and a user-defined storage structure for organizing files on disk. The architecture uses PostgreSQL for metadata, Redis with BullMQ for background job queues handling thumbnail generation, video transcoding, and smart search indexing, and exposes over 400 REST API endpoints documented via OpenAPI with auto-generated SDKs for web, mobile, and CLI clients. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 3,800 GitHub stars and continuous development since 2002 spanning 24 years of active maintenance through version 16.4.0 released in May 2026, Piwigo has proven itself as one of the most battle-tested self-hosted photo gallery platforms available, trusted by professional photographers managing 150,000+ high-resolution images alongside small teams sharing event photos. The PHP backend with MySQL or MariaDB storage serves a responsive web interface that organizes photos into hierarchical albums with nested sub-albums, tag-based categorization, and smart albums generated dynamically from search criteria. Batch management tools handle bulk uploads, metadata editing, tag assignment, and album moves across thousands of images simultaneously. User permission controls define access at the album level with configurable public, private, and group-restricted visibility, while guest access allows public galleries without authentication. Image processing via ImageMagick or PHP GD generates multiple thumbnail sizes, watermarks, and responsive derivatives automatically. The plugin ecosystem with over 200 community-built extensions adds functionality from EXIF metadata display and GPS mapping to social sharing, download controls, and Lightroom synchronization for desktop workflow integration. The REST Web API with personal API key authentication enables programmatic album creation, photo uploads, and metadata queries from external applications. Mobile apps for iOS and Android provide on-the-go upload and browsing capability. Docker deployment via the official container or traditional LAMP installation on any hosting provider. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.