Sovereign Digital Government Suite.
One Platform for Ministries, Citizens and Businesses.
A complete, sovereign, open-source platform for ministries, citizens and businesses, with national digital identity included, and MOSIP and a national PKI as optional additions for countries that do not already have them. Delivered and managed by MassiveGRID with a 100% uptime SLA, or installed on government infrastructure and handed over with training and support.
Governments Do Not Need Complexity and Multiple Systems
They need one place where people complete their work, one place where mail lives, one place where websites are hosted, one login, and one platform underneath. Nextcloud Hub already contains files, office, chat, video, forms, tables, workflow automation, approvals, e-signature, knowledge bases, task boards, polls, retention, search and a sovereign AI assistant. Almost every government function is a combination of those parts.
The Sovereign Digital Government Suite shows how Nextcloud Hub can be the central platform for governments, delivering digital sovereignty for countries and for the people they serve. Prepared by MassiveGRID, Official Nextcloud Platinum Partner, a high-availability cloud provider since 2003, ISO 27001 and ISO 9001 certified, GDPR compliant, with sovereign in-country deployment available on all six inhabited continents and clients served in 208 countries and territories.
The Whole Base, and Nothing Else Until a Real Gap Appears
Delivered and managed by MassiveGRID, or self-managed by the government with MassiveGRID support.
Nextcloud Hub with Its Standard Apps
Documents, office suite, chat, video meetings, forms, case and register tables, workflow automation, approvals, digital signatures, knowledge bases, task boards, polls, records retention, full-text search and an AI assistant. One product covers the entire "work" layer, with one login, one interface and one audit log. Used by the German federal administration, French ministries and many EU public bodies. See Sovereign Workspaces for the managed enterprise edition.
Sovereign Mail and Groupware
Email, calendar, contacts and mobile sync for all staff, with a compliance archive. Exchange-compatible open-source groupware, so Outlook and phones keep working. Nextcloud Mail and Calendar connect to it, so users can stay inside Nextcloud if they prefer.
cPanel/WHM and WordPress
Every ministry, agency and municipal website, DNS and certificates, hosted centrally with delegated control. Standard hosting operations mean a small central team can run hundreds of sites; WordPress with a government theme and embedded Nextcloud forms is enough for public sites. Built on MassiveGRID's high-availability cPanel hosting.
Keycloak
Single sign-on and the national digital identity for staff, citizens and businesses. Keycloak is a complete identity provider: Nextcloud, the mail platform, cPanel and WordPress all log in through it. It federates with an existing national eID and PKI where they exist; where they do not, the optional identity modules provide them.
Proxmox VE, Ceph, Proxmox Backup Server, PostgreSQL
Virtualisation, storage, backup and the database under everything, in-country on government infrastructure or in MassiveGRID sovereign facilities. High availability and disaster recovery without VMware licences; PostgreSQL is the database for Nextcloud and Keycloak; MassiveGRID operates this platform in production for its own cloud and offers it as a VMware replacement.
Sovereign AI is built into Nextcloud. Nextcloud Assistant runs local models on government hardware through Nextcloud's own app framework (AppAPI), giving summarisation, drafting, translation, transcription and question-answering over documents inside the same interface.
Included in the Base, MOSIP and PKI Optional
Every service depends on knowing who is asking. Each ministry service simply states which assurance level it requires.
| Level | How the citizen gets it | What it unlocks |
|---|---|---|
| Level 1: Self-registered | Creates an account in Keycloak with phone and email, verified by one-time codes | Consultations, information requests, appointment booking, complaints, newsletters |
| Level 2: Verified | Submits a Nextcloud Form with ID document and selfie, joins a short Talk video check, or visits a municipal counter; a clerk approves the case and the citizen is written into the national register | Permits, licences, grants, tax filing, benefits, school and health services, most business filings |
| Level 3: Certificate | Receives a personal digital certificate from the national PKI, held in the state HSM for remote signing from a phone or on a smartcard, after Level 2 verification | Property transfers, company registration, contracts with the state, court filings, any act requiring a qualified signature |
What Each App Replaces
| Government need | Nextcloud app(s) | What it replaces |
|---|---|---|
| Documents, sharing, versioning, external sharing with expiry | Files, Group folders, Guests, File access control | File servers, USB sticks, email attachments |
| Word processing, spreadsheets, presentations | Nextcloud Office with Euro-Office | Microsoft Office licences |
| Chat, video calls, public hearings, remote appointments | Talk (SIP dial-in, recording, breakout rooms) | WhatsApp groups, Teams, Zoom |
| Online applications, complaints, surveys, registrations | Forms (public links, file uploads, results to Tables) | Paper forms, PDF forms, third-party form tools |
| Registers, case lists, inventories, licence databases | Tables (views, filters, permissions, API) | Excel files, Access databases, small bespoke systems |
| Routing, notifications, automatic tagging, retention rules | Flow, Automated tagging, Retention | Manual routing, missing archiving |
| Sign-off chains and decisions | Approval | Physical signature rounds |
| Legally binding signatures on contracts, decisions, certificates | LibreSign with the national PKI | Notaries, wet signatures, courier |
| Manuals, policies, procedures, legal texts | Collectives | Shared drives full of outdated PDFs |
| Project and task tracking | Deck | Project tools, spreadsheets |
| Internal and public consultations, votes | Polls, Forms | Separate consultation platforms |
| Meeting scheduling and staff calendars | Calendar (connected to the mail platform) | Exchange calendars |
| Finding anything across files, mail, chat, tables | Unified search, Full-text search | Nothing, currently |
| Drafting, summarising, translating, transcribing | Assistant with local models | Nothing, or foreign cloud AI |
| Announcements to all staff | Announcement center | Mass email |
| Auditing who did what | Activity, Audit log, Governance toolkit | Nothing |
| Compliance controls (retention, encryption, access policies) | Governance toolkit, server-side and end-to-end encryption | Bespoke compliance projects |
Related reading: Nextcloud Forms vs Google and Microsoft Forms, Flow vs Zapier and Power Automate, Nextcloud for government.
Every Government Function Is One of Five Things
Each is built once in Nextcloud and then copied. Once a ministry's staff learn the patterns, they digitise their own functions without a software project.
Pattern A: Case
A person or business applies, an officer reviews, a decision is made, the applicant is notified. Built with Forms to Tables to Flow to Approval to LibreSign, with status visible to the applicant.
Pattern B: Register
An authoritative list that other people need to consult or update. Built with Tables with role-based views, public read views where appropriate, and an API for other systems.
Pattern C: Decision Meeting
A group meets, discusses documents, decides, records. Built with Calendar, Talk (recorded), shared Files, Approval, Collectives for minutes and decisions, and Retention.
Pattern D: Consultation
Government asks the public or staff and publishes the result. Built with Forms or Polls on a public link on the ministry website, results to Tables, published summary in WordPress.
Pattern E: Publication
Information the public has a right to see. Built with Files public shares for documents, Tables public views for data, Collectives for knowledge and WordPress as the front door.
Templates and Training
MassiveGRID builds the five patterns as templates and trains a pattern team in each ministry. That is the real simplification: ministries configure, they do not integrate.
What Every Ministry Gets on Day One
| Function | Built with | Benefit | Who gains |
|---|---|---|---|
| Staff mail, calendar, mobile | Sovereign groupware, Keycloak | Sovereign, archived, MFA-protected mail; Outlook keeps working | Civil servants; treasury (no cloud licences) |
| Documents and office | Nextcloud Files, Office | Co-editing, versioning, no attachments | Civil servants; contractors and NGOs |
| Chat and video | Nextcloud Talk | Replaces consumer messaging for state business | Everyone; auditors; security |
| One identity | Keycloak, citizen register, national PKI | One account for all services at three assurance levels | Citizens, businesses, staff |
| Any citizen or business service | Pattern A | Tracked cases with deadlines and visible status | Citizens and businesses; anti-corruption bodies (audit trail) |
| Records | Retention, Full-text search | Legal retention enforced; anything found in seconds | Citizens (FOI); courts; researchers |
| Signatures | LibreSign, national PKI | Decisions and certificates signed and verifiable online | Businesses; citizens; courts |
| Websites | cPanel, WordPress | Accessible, consistent, launched in days | Citizens; small municipalities |
| Transparency | Pattern E | Budgets, contracts, decisions public by default | Journalists; civil society; businesses |
| Sovereign AI | Assistant with local models | Summaries, drafts, translation, transcription on national hardware | Staff; minority language speakers; citizens |
Functions, Patterns and Beneficiaries by Ministry
Patterns: A Case, B Register, C Decision meeting, D Consultation, E Publication.
| Ministry | Key functions | Patterns | Benefit | Who gains |
|---|---|---|---|---|
| Interior / Digital Governance | Identity enrolment and citizen register; one-stop portal; civil status certificates; municipal programme; FOI | ABE | Everyone identified and served in one place; every municipality digital | All citizens; rural residents; journalists |
| Finance | Budget book and execution tracking; procurement with published tenders and contracts; grants and subsidies; audit trail | BCAE | Open tenders; grants paid to verified people; continuous audit | Taxpayers; SMEs bidding; auditors; parliament |
| Health | Facility register and reporting; licensing of professionals and clinics; telemedicine; appointment requests; supply requests | BATalk | Live view of facilities; specialists reach remote clinics | Patients, especially rural and elderly; clinicians |
| Education | School and teacher register; signed diplomas; scholarships; teacher training; school collaboration space | BAC | Verifiable diplomas; fair scholarships; sovereign tools for schools | Students; parents; teachers; employers |
| Justice | Case filing and tracking; remote hearings; legal texts library; legal aid; company register | ACEB | Faster cases; free access to law; register a company in a day | Litigants; lawyers; entrepreneurs; investors |
| Labour and Social Affairs | Benefit applications; beneficiary register tied to verified identity; job seeker and vacancy register; inspections; vocational training | ABC | Consistent decisions; no duplicate beneficiaries; job matching | Low-income households; unemployed youth; workers |
| Economy and Trade | Business registration and licences; permits single window; investor contact point; complaints | AB | Predictable timelines; one submission for many licences | SMEs; startups; exporters; investors |
| Agriculture | Farmer and parcel register; subsidy applications; extension advice via Talk and Assistant in local language; export certificates | BA | Direct support to real farmers; advice without travel | Smallholders; cooperatives; exporters |
| Environment and Energy | Permits with public consultation; monitoring data published; incident reports | ADE | Transparent, time-bound permitting | Communities; developers; NGOs |
| Infrastructure and Transport | Permits; public works register with progress and photos; citizen fault reports; vehicle and driver services | ABE | Every project public; faults tracked to repair | Homeowners; contractors; commuters |
| Foreign Affairs | Consular applications and appointments; embassy websites; encrypted diplomatic collaboration | AEC | Diaspora served online; sovereign secure channels | Diaspora; travellers; diplomats |
| Civil Protection | Incident coordination rooms in Talk; resource register; damage claims after disasters | CBA | One coordination space; fast compensation | Affected communities; responders |
| Culture and Tourism | Grants; event and venue permits; digitised archives with AI transcription and search | AE | Transparent funding; heritage searchable | Artists; event organisers; researchers |
| Local government | Website; resident requests; local permits; participatory budgeting; council meetings | ADCE | Same identity and tools as national services | Residents; micro-businesses |
| Parliament and oversight | Bill tracking and public comment; committee documents; audit access to registers | EDCB | Open legislative process; continuous oversight | Citizens; civil society; auditors |
People and Businesses
People
- Working adults and parents save hours per interaction
- The elderly get the same services through assisted counters running the same Nextcloud forms
- Students get verifiable diplomas and fair scholarships
- Rural residents get identity enrolment, services, advice and specialists without travel
- People with disabilities get accessible forms and remote hearings
- Low-income households get consistent, rules-based decisions with no gatekeepers
- Minority language speakers get translation built in
- The diaspora gets consular services online
- Civil servants get modern tools and less paper
- Journalists and researchers get budgets, contracts and decisions in the open
Businesses
- Micro and informal businesses formalise quickly with a verified company account
- SMEs get predictable permits and equal access to tenders
- Startups get open data and stable APIs from Tables and a national identity API for customer verification
- Farmers and cooperatives get direct support and export certificates
- Exporters get signed certificates recognised abroad
- Contractors see public works published and paid on time
- Banks and insurers verify customers against the national identity
- Investors get a single contact point and transparent procurement and courts
- The local ICT industry gets implementation, hosting and training work on a platform whose skills transfer to the private market
Add One Product Only When a Ministry Demonstrates a Gap
The base handles the majority of government work. MassiveGRID connects any addition through Keycloak and Nextcloud so the user experience stays the same.
| Gap that may appear | Add only then | Why not in the base |
|---|---|---|
| Biometric deduplication for a foundational national ID | MOSIP | The base identity covers verified accounts and signatures; biometrics are only needed where duplicate identities cause leakage or no registry exists |
| No national certificate authority for Level 3 signatures | EJBCA, SignServer and an HSM | Where a national PKI already exists, LibreSign and Keycloak use it; the module is only for countries that have none |
| Full accounting, payroll and treasury for the whole state | ERPNext | Tables tracks budgets and commitments well enough at first; a full ERP is a large project on its own |
| National tax administration at scale | Built on the Case pattern first; a dedicated engine later | No good open-source product exists; start simple |
| National health surveillance across thousands of facilities | DHIS2 | Only when facility count and epidemiology needs exceed what Tables can serve |
| Land cadastre with maps | PostGIS with QGIS | Only when parcels must be drawn, not just listed |
| Cross-ministry data exchange at national scale | X-Road | Tables APIs and Nextcloud federation cover early needs |
Three Steps, Visible Within Weeks
MassiveGRID delivers each step with its own engineering team and certified local partners, so the government builds in-house capability from the first quarter.
Platform, Keycloak, mail and groupware, and Nextcloud for the first ministries; cPanel with WordPress for their websites. Staff get sovereign mail, files, office, chat and video. Citizen Level 1 accounts open.
Build the five patterns as templates, starting with identity enrolment (Level 2) at municipal counters and online. Digitise the ten highest-volume citizen services. Train a pattern team in each ministry. Publish budgets and contracts. Connect the existing national PKI, or deploy the optional PKI module, and issue Level 3 certificates to business representatives and professionals.
Every ministry and municipality on the platform, operated by MassiveGRID or handed over to the government's own team. Assistant with local models enabled for all staff. Add products only where a gap is proven; if biometric uniqueness is required, add MOSIP here and federate it into Keycloak without touching any other service.
Five Products, One Login, One Interface for Daily Work
National digital identity included, with MOSIP and a national PKI as optional modules only for countries that lack them. Ministries configure, they do not integrate. Every function is one of five patterns, so training is short and reusable.
- No per-user or per-citizen licences: reaching every municipality and every citizen costs hardware and people, not permission
- Data, code and keys stay in-country, and the skills stay with the local teams and partners who run it
- Delivered and managed by MassiveGRID with a 100% uptime SLA, or self-managed by the government with MassiveGRID support
- Certified local partners deliver alongside MassiveGRID engineers, see the partner program
Sovereign Government Suite Questions
Where to Go Next
Request the Full Proposal
A discovery workshop with your digital governance team, followed by a written, costed rollout plan for your ministries, identity landscape and hosting model.