Collabora Online compliance

Using self-hosted Collabora Online to meet GDPR, data sovereignty, accessibility, ISO 27001, NIS2, SOC 2, HIPAA and software supply chain requirements.

Collabora Online and GDPR

How self-hosting Collabora Online supports GDPR: in-memory processing, no document storage on the editor, where personal data does live in the WOPI host, processor roles, and records to keep.

Collabora Online in an ISO 27001 environment

Mapping ISO 27001 Annex A controls to a Collabora Online deployment: secure configuration, access control through the WOPI host, logging, patching and supplier management with Collabora's own certification.

Collabora Online security measures for NIS2

Applying NIS2 risk management measures to self-hosted document editing: patching from advisories, supply chain evidence, access control, incident logging and supported versions.

Collabora Online evidence for SOC 2 audits

The evidence a self-hosted Collabora Online deployment produces for SOC 2: configuration baselines, upgrade change records, access reviews in the WOPI host, monitoring and vulnerability management.

Collabora Online for HIPAA-regulated documents

Editing documents that contain protected health information with self-hosted Collabora Online: where PHI is stored, transmission security, audit trails in the host platform and access controls.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.
Book a callhello@deployopen.com