Home›Guides›Comparisons

Comparisons

European alternatives to Microsoft 365: 2026 guide

In 2026, there is no European suite that reproduces Microsoft 365 in full. There are relevant tools for specific needs: email, files, online editing, CRM, telephony, qualified infrastructure. This guide sets out the criteria, then the use case for each player, with what to check before signing and the main limitation of each. Klytic appears as one option among others, with what it covers and what it does not.

Updated October 202618 min readOfficial sources cited

October 2026. Offers and the law change. Check the contract, the EU–US adequacy decision and the ANSSI catalogue before any purchase.

Criteria before brands

Starting with brands means comparing brochures, then discovering during the migration that a service cannot keep up. The six questions below should be asked in this order, because each one eliminates options before the next. They also apply to a decision to stay.

  1. Which uses really sit in Microsoft 365 today? Mail, OneDrive, advanced Excel, Teams, Power BI, line-of-business applications. What lives in advanced Excel or Power Platform does not “migrate” to another brand. A workbook with macros or a Power Automate flow is rewritten, or stays where it is.
  2. Who should hold the data? A US company with European data residency, an EU company, a Swiss company, or you yourself on your own servers. These are four different legal frameworks, and the choice is a management decision, to be made before reading the offers.
  3. What exact geographic scope? European Union, EFTA, Switzerland, or a named country. The word “Europe” is not enough. It says nothing about backups, logs or the place from which support connects. The details are in what “data hosted in Europe” means.
  4. Which software, and which operator? Software developed by a US software vendor can be operated in France. Sovereignty is decided by the operator, the backups and the support. It is the operator, who holds the servers, copies and access, that an authority can compel. The distinction is developed in European cloud or American cloud.
  5. Is a SecNumCloud-qualified offer required? If so, only the name listed in the ANSSI catalogue counts. Qualification applies to an offer, not to a company, and it does not pass to an application installed on top of it. Since version 3.2 of its framework (2022), SecNumCloud has included requirements for protection against non-European laws: registered office, control of capital, location and personnel. Useful when a call for tenders requires it, it is disproportionate as the sole criterion for an SME’s email service.
  6. How do you get out? Formats, chat histories, automations. Mail and files come out well; chat, administration rules and automations come out badly. This is true when leaving Microsoft, and it will be true when leaving its replacement.

The common mistake is to let criterion 2 answer criterion 1. Management may want a European operator while the finance department lives in Excel. The answer is then often to separate the uses rather than pick a side.

Microsoft 365

US company. The most complete suite for Office, Teams, enterprise identity and integrations. It covers installed and online office applications, Exchange, OneDrive and SharePoint, Teams, Entra ID, Power BI, Power Platform and Copilot. For eligible tenants, Microsoft keeps customer data and pseudonymised personal data in the EU or EFTA (EU Data Boundary), with written exceptions: support, certain escalations, optional features.

The typical profile is an organisation whose information system is built around this suite: a subsidiary whose parent company imposes Teams, an engineering firm whose calculations run in Excel. For such an organisation, the question is mainly: what needs to be documented in order to stay?

What to check before signing or renewing.

  • Is the tenant within the scope of the EU Data Boundary? According to Microsoft’s documentation, a Multi-Geo customer is not, even if the country of registration is European.
  • Which transfer exceptions continue for your services: support access, escalated tickets, optional features enabled by an administrator.
  • What is the legal basis for residual transfers. As at 5 October 2026, adequacy decision (EU) 2023/1795 (Data Privacy Framework) is in force for certified US organisations. It is contested: according to a commentary by the law firm WilmerHale, the General Court of the European Union dismissed an action for annulment on 3 September 2025, and an appeal was lodged before the Court of Justice on 31 October 2025. The Privacy Shield was invalidated in 2020 (Schrems II judgment), with standard contractual clauses remaining usable subject to a case-by-case assessment. Record in the register what you would do if the current framework fell.

The main limitation. Data residency answers the question “where are the disks”. It does not change the nationality of the operator. Microsoft remains a US company, subject to US law for the data it holds or controls. The details are in protecting a business from the CLOUD Act.

Relevant when these features are the working tool, or when the parent company, customers or sector impose this ecosystem. Data residency and the DPA allow many European companies to keep it while documenting the transfers. See GDPR and Microsoft 365 and Microsoft 365 or a sovereign solution.

Less relevant when the real need is email and files, and management wants a European operator. Paying for the breadth of the suite purely out of habit is a weak reason. The legal reason alone is also a weak reason if Excel runs the business.

Google Workspace

US company. The best comfort for in-browser editing and simple sharing. Data regions for covered content, depending on the edition. Some logs are not within this scope. Control over the location of support is an option (Assured Controls), not the default for every offer.

The typical profile is an organisation born in the browser, for example an agency whose teams write in Docs and share Drive folders with their clients.

What to check before signing.

  • Does the subscribed edition include data regions? An account whose edition does not include them is not covered, even if a policy has been set on the organisational unit.
  • Which data the region policy does not cover: Google states that it does not apply to data it does not list, including certain logs or cached content.
  • If your compliance file assumes support from within the Union only, have the Assured Controls option and Access Management been purchased and activated? Ask for a screenshot of the actual setting, not the brochure.

The main limitation. Google is not a European operator. A European region does not remove Google from US law for the data it holds or controls. The legal framework is of the same type as Microsoft’s.

Relevant for an organisation that lives in Docs and Drive, and whose subscribed edition covers the required residency. See GDPR and Google Workspace.

Less relevant as a “European alternative”: Google is not a European operator. It is a functional alternative to Microsoft, with a legal framework of the same type. To leave Google in turn, the page European alternatives to Google Workspace applies the same method.

OVHcloud

French company. Two separate subjects, often confused.

The SecNumCloud-qualified infrastructure offers (scopes named in the ANSSI catalogue, including private cloud offers, dedicated server offers and, in 2026, a public cloud offer) meet a need for qualified hosting. They are not an office suite. A LeMagIT article from September 2026 reports the qualification of a public cloud offer; the reference remains the ANSSI catalogue, which names each qualified offer and its scope.

The Zimbra email offers are hosted in France by OVHcloud. The software is developed by Synacor, a US company. OVHcloud is the operator of the mailboxes. They include mail, calendars, contacts and, depending on the plan, files and online editing. This is not the equivalent of Office or Teams.

On the email side, the typical profile is an SME that wants mailboxes hosted in France with a large operator. On the infrastructure side, it is an organisation that hosts its applications on a qualified offer, with the team to operate them.

What to check before signing.

  • For email: the exact plan, since files and online editing depend on it; Outlook, mobile devices, shared mailboxes and delegations.
  • For infrastructure: the exact name of the offer in the ANSSI catalogue and its scope.
  • In both cases: do not attribute to the email offer a qualification that belongs to an infrastructure offer from the same group.

The main limitation. These are building blocks: email on one side, infrastructure on the other. Assembling a complete digital workplace remains your responsibility.

Relevant for email hosted in France by a French industrial player, or for qualified infrastructure when the catalogue matches the need.

Less relevant if you are looking for a CRM, telephony and a single point of contact for the entire digital workplace. That is not what the email offer is for.

Nextcloud

Nextcloud GmbH is a German company. It develops software for files, co-editing, chat and calendars, which you host yourself or which a provider hosts. Nextcloud is not, on its own, a cloud: without an operator, there is no data location. With a European operator or an installation on your premises, the framework is that of the operator.

Co-editing relies on Collabora or OnlyOffice. Email is not the historical core of the product (email components exist; a complete business email service must be assessed separately).

An organisation with an operations team can install it in-house. An SME without IT staff will rather take it from a hosting provider, and it is then that hosting provider that needs to be assessed.

What to check before signing.

  • Who operates the instance: you, or a named provider, with its nationality, its hosting location and its list of processors.
  • Whether the instance is dedicated to your organisation or shared with other customers.
  • Who applies updates, who backs up, who restores, and the online editor tested on your own files.

The main limitation. The software does not run itself. An installation that nobody maintains becomes a risk, and the quality of the service depends entirely on the operator.

Relevant for regaining control over files, in-house or with a chosen hosting provider, including for large organisations that have the operations teams.

Less relevant if you want email, support and operations without an in-house team, and nobody is designated to maintain the server.

Infomaniak

Swiss company, independent, data hosted in Switzerland. Switzerland is outside the European Union and covered by an adequacy decision. The law applicable to a Swiss hosting provider is Swiss law, supplemented by the GDPR when it processes data of persons located in the Union for a customer established there.

kSuite brings together mail, kDrive, kChat and kMeet. Online editing is done with OnlyOffice or, on certain offers, with Microsoft online applications hosted in Switzerland, which require a Microsoft subscription.

What to check before signing.

  • Do your specifications accept Switzerland? A requirement for data within the Union rules it out.
  • The specific offer: OnlyOffice or Microsoft online applications. In the second case, a Microsoft subscription is still required.
  • The transfer of chat histories: Infomaniak itself states that Teams, Slack and Google Chat histories are not transferred automatically.

Relevant for an SME that wants an integrated suite, large storage and a European hosting provider in the geographic sense, and that accepts Swiss law.

Less relevant if the specifications require an operator and data within the European Union, or if advanced Excel remains indispensable. Infomaniak says so in its own way: offline, you need an office suite on the workstation.

Other players

These players meet a narrower need than the previous ones. They are often the right choice for one building block, rarely for the whole digital workplace. Email services are compared in more detail in choosing a European business email service.

BlueMind

BlueMind, a French company, is a collaborative email service designed for Outlook, the web and mobile devices. It is deployed on your premises or with a partner hosting provider. The software vendor is French; the operator depends on the deployment. To check: Outlook for Windows and, separately, Outlook for Mac.

Relevant for a sovereign email project, particularly in large organisations, and when Outlook is imposed on users.

Less relevant if you expect a files-CRM-telephony suite: BlueMind is not one on its own.

Proton

Proton, in Switzerland, is relevant for end-to-end encryption of email and storage, with the limitations that this encryption imposes on search and administration. Content remains unreadable to the operator; in return, server-side search, certain delegations and conventional anti-spam are limited.

Relevant for a strong confidentiality need: a legal department, a team that exchanges sensitive documents.

Less relevant as the general email service for a sales team. It is not a replacement for Office.

German email hosting providers

German email hosting providers (for example Mailbox.org) offer mailboxes with a German operator, accessible via IMAP.

Relevant for individual mailboxes or small teams that want a German operator and IMAP.

Less relevant for a company looking for the complete digital workplace: these offers do not aim to provide it.

Trusted cloud offers

Offers that pair Microsoft or Google technology with a qualified French operator (several such projects exist; the ANSSI catalogue is decisive) meet a need for infrastructure or trusted cloud. To check: the name of the offer in the catalogue, not the project announcement.

Relevant for an organisation whose data or calls for tenders require a qualification, and that wants to keep a familiar technology.

Less relevant for a twenty-person SME looking for a suite: it is not the same purchase.

A reading grid

Main needOption to examine first
Excel, Teams, enterprise integrationsStay on Microsoft 365
Docs and Drive on a daily basisStay on Google Workspace, after checking the edition; or Klytic Docs (dedicated Nextcloud instance, collaborative editing), after a trial on your documents
Email hosted in FranceOVHcloud; or Klytic, French operator, on your servers or in the chosen hosting zone
Files you want to keep on your premisesNextcloud, if you operate it yourself; or Klytic Docs, dedicated Nextcloud instance installed on your servers
Integrated suite, Swiss law acceptedInfomaniak
Email only, French software vendor, OutlookBlueMind, on your premises or with a hosting provider
Strong email confidentialityProton, accepting its search and administration limitations; or Klytic Mail, encrypted with the customer’s key, S/MIME certificate as an option
Mail, files and online editing, video conferencing, CRM and telephony, à la carte, French operatorKlytic
Infrastructure qualified SecNumCloud by nameThe service listed in the ANSSI catalogue

No row in this table is a quality ranking. A “first” option fails as soon as the neighbouring criterion is yours. The pages migrating from Microsoft 365 and checklist take over if the decision is to move at least the email.

How to make the choice in practice

A suite choice rarely fails on technical grounds. It fails because offers were compared before knowing what was being bought. Four steps are enough in most SMEs and mid-sized companies.

  1. Take an inventory of uses. Fit the business onto one page: ten weekly tasks per department, and the tool that performs them today. Note separately anything that is neither mail nor files: macros, dashboards, automated flows, Teams channels shared with clients. Example: in a 25-person accounting firm, it is often found that twenty workstations handle mail, files and client follow-up, and that three people produce tax return packages in complex workbooks. These are not the same needs.
  2. Set the elimination criteria. Write down, before meeting any supplier, what disqualifies an offer: EU operator required or not, Switzerland accepted or not, SecNumCloud qualification required or not, Outlook imposed or not. Each criterion calls for evidence: a contract extract, a list of processors, an entry in the ANSSI catalogue. Without evidence, the criterion is not met.
  3. Test on your files and your workstations. Plan at least two weeks of trial with a few real users, on a report, a spreadsheet and a commercial proposal taken from your business. Test Outlook, mobile devices, a shared mailbox and a delegation. Ask the supplier to restore, in front of you, a message deleted the day before: the operational answer settles the matter better than a speech about sovereignty.
  4. Decide by use, not as a block. For each line of the inventory, note the chosen target. Many companies keep a Microsoft island for one business function and move general email out. Others keep the entire Microsoft suite and only add filtering placed in front of the mailboxes. An industrial SME with two sites can keep Microsoft 365 for its engineering department and move the email and files of its workshops.

The common mistake, at step 4, is to want a single answer for the sake of simplicity. A single answer is simpler to buy, not necessarily to live with.

Frequently asked questions

Is there a European suite that replaces Microsoft 365 in full?

No, in 2026. European and Swiss suites cover mail, files, online editing, video conferencing and sometimes chat. Advanced Excel, Power BI, the Teams ecosystem and line-of-business add-ins have no general equivalent among European operators. An offer that promises otherwise without reservation is overselling its product.

Is an application hosted on SecNumCloud infrastructure qualified?

No. Qualification applies to a specific offer, with a scope named in the ANSSI catalogue. It does not pass to an application installed on top of it, nor to another offer from the same group. If your call for tenders requires SecNumCloud, ask for the exact name of the offer and check it in the catalogue.

Does hosting in Switzerland count as European hosting?

Geographically, yes; legally, it depends on what your specifications require. Switzerland is outside the European Union and benefits from an adequacy decision by the Commission. If your requirement is “data within the European Union”, a Swiss hosting provider does not meet it. If it is “European operator outside US law”, it can meet it.

Is US software operated in France a European solution?

The operator is European, the software vendor is not. What matters for access to data is the company that holds the servers, the backups and the administration access. The software vendor’s country remains a piece of information worth noting, without confusing it with the former.

Klytic

Klytic is operated by Dedicace Software, a French company. The suite is à la carte: each service is purchased separately, you can take just one, and you can keep Microsoft 365 by adding only the filtering, placed in front of the mailboxes. The services are based on proven or open source solutions and on modules and services developed by Klytic; the isolation of services is ensured and managed by Klytic servers developed for this purpose.

  • Email. Zimbra, developed by Synacor (United States). Hosted in Klytic’s email architecture, in a dedicated instance or on the client’s premises; Klytic operates it in every case. Web access, email clients, mobile devices, EAS and EWS.
  • Documents. One dedicated Nextcloud instance per customer, not a shared space. Nextcloud is developed in Germany. Sharing, online editing alone or with others and version history are available in the instance; the editor is neither Google’s nor Office.
  • Video conferencing. Included in Klytic Docs: encrypted video and audio meetings, one-to-one or in groups, screen sharing, instant messaging, documents shared and edited during the call, external guests via a simple link, waiting room and moderation. Also available are recording and transcription, subtitles, automatic translation and summaries, webinars, breakout rooms and dial-in access by phone. Video conferencing is also available depending on the phone line or email option chosen.
  • CRM. Electronic invoicing to an approved platform concerns France and certain platforms, not all countries.
  • Telephony. A telephony server dedicated to the customer, hosted in a European cloud, or in Mauritius at the customer’s request, with four types of lines. Applications and video conferencing depend on the type of line. They are not included in the entry-level offer.
  • Email filtering. Two levels. CEO fraud protection, time-of-click analysis and the DMARC console are in the advanced level. AI-based arbitration and the provision of an S/MIME certificate are options. The level included in the entry-level email offer is not the one that handles CEO fraud.
  • Location. Hosting in any geographic zone matching the applicable jurisdiction, subject to the availability of the required services, for example in Europe or in Mauritius, or on the customer’s servers. The telephony server is hosted in a European cloud, or in Mauritius at the customer’s request.
  • Data. Held entirely by the customer, or by Klytic on the customer’s behalf, in a geographic zone that falls under the applicable jurisdiction. It is encrypted natively, or according to the customer’s choice; the key is held by the customer or kept in the customer’s account, and Klytic has no access to it. The steps where encryption is managed by Klytic are detailed on the page protecting a business from the CLOUD Act. The contract must describe this holding and this encryption: that is the document to read.
  • Backups. Email, documents and CRM every hour; telephony every day; 30-day retention.
  • Tools already in place. Native connection, third-party tool, or development on quotation.
  • Email migration. Free advice and suggestions, no email lost (guaranteed). Migration performed by Klytic is on quotation, after an inventory. Subscription and migration are invoiced separately; subscription prices are on the Pricing page, in euros for Europe and in rupees for Mauritius.
  • Support. Support in French by phone and in all languages by email, through a ticket tracking tool.

Klytic is not SecNumCloud-qualified. It does not replace advanced Excel, Power BI or Teams. It does not offer general immunity: a French operator remains subject to French law, and a French judge can order the disclosure of data.

Before signing, ask Klytic the same questions as the others: exact location, holding and encryption described in the contract, filtering level subscribed, trial on your workstations and your files.

Relevant for an organisation that wants to build its own suite, a French operator, and hosting with that operator or on its own premises. Also relevant for an in-house team that wants to administer Nextcloud itself: the customer is also an administrator of its instance, and Klytic adds assistance, maintenance, backup and security.

Less relevant when the business runs on Office, or when a call for tenders requires SecNumCloud.

Sources

Accessed in October 2026. The ANSSI catalogue takes precedence over press articles for any qualified offer.

  • Microsoft, EU Data Boundary, scope, eligibility, exclusion of Multi-Geo. Microsoft Learn
  • Microsoft, completion of rollout announced in February 2025, and what it covers. Microsoft, 26 February 2025
  • Microsoft, remaining exceptions. Microsoft Learn
  • Google, data regions and types not covered. Google Help
  • Google, Access Management. Google Help
  • Decision (EU) 2023/1795 and list of adequacy decisions, including Switzerland. EUR-Lex and European Commission
  • Lawyers’ commentary on the Data Privacy Framework litigation: WilmerHale, “European Court of Justice to Review Challenge to EU-U.S. Data Privacy Framework”, 1 December 2025. wilmerhale.com
  • CJEU, 16 July 2020, C-311/18 (Schrems II). EUR-Lex
  • ANSSI, SecNumCloud FAQ, including the version 3.2 requirements regarding non-European laws. cyber.gouv.fr
  • Press article reporting the qualification of OVHcloud infrastructure offers, to be cross-checked against the ANSSI catalogue: LeMagIT, 1 September 2026. lemagit.fr
  • OVHcloud, Zimbra email hosted in France, software presented as developed by Synacor. ovhcloud.com/fr/emails
  • Zimbra, software vendor FAQ. zimbra.com/faqs
  • Nextcloud GmbH, registered office and self-hosting model. Legal notice and About
  • Infomaniak, kSuite hosted in Switzerland, OnlyOffice or Microsoft online depending on the offer, transfer of chat histories. infomaniak.com/fr/ksuite
  • BlueMind. bluemind.net
  • Proton, email. proton.me/fr/mail
  • Mailbox.org, German hosting provider. mailbox.org
  • Klytic, scope of services, telephony and filtering levels, hosting. klytic.com and Pricing
  • Klytic, backups and retention. Frequently asked questions

Compare on your real usage

Try Klytic for 30 days on your own email and files, with no commitment.

30-day free trial →

The comparison table

Welcome offer

30 days free trial, migration support included

No-commitment trial. An advisor calls you back to understand your needs and prepare your Klytic workspace.