Orneos

Hosting del servizio principale

Contabo (KKR)

Ubicazione

Germany (Contabo EU region, RIPE allocation DE); IP geolocation says Lauterbourg, France

Osservato

app.orneos.eu (Nextcloud 35.0.2), login, mail, signaling (Talk signalling and TURN on port 3478), office (ONLYOFFICE Docs Community Edition), search and status all resolve to the single IPv4 address 157.173.121.41 (PTR vmi2151755.contaboserver.net; RIPE 157.173.112.0/20, netname TT-20240614, Contabo GmbH, AS51167). Orneos names Contabo GmbH, Munich, as its only hosting sub-processor and says no hosted data leaves the EU. Contabo is majority-owned by KKR. DNS shows routing, not backup locations, which are not disclosed.

Prove

Legal notice and DPA: Contabo hosting, EU-only claim ↗Live app DNS ↗RIPE IP allocation: Contabo GmbH, DE ↗Nextcloud status: version 35.0.2 ↗Contabo: European region served from data centres in Germany ↗KKR majority acquisition of Contabo ↗

Sito web pubblico

Contabo (KKR)

Ubicazione

Germany (Contabo EU region)

Osservato

orneos.eu A 157.173.121.41, no AAAA; www is a CNAME to orneos.eu. Served by nginx on the same VPS as the cloud, mail and DNS. The pages load only first-party scripts, styles and fonts.

Prove

Live website DNS ↗RIPE network record ↗

DNS autoritativo

Contabo (KKR)

Ubicazione

Germany (Contabo EU region)

Osservato

NS ns1.orneos.eu and ns2.orneos.eu are run by the operator and both resolve to 157.173.121.41, the same Contabo server as the service, so the name servers have no network redundancy. No DS record (no DNSSEC). Registrar: OVH SAS.

Prove

Live NS records ↗Live name-server address ↗

Posta aziendale in entrata

Contabo (KKR)

Ubicazione

Germany (Contabo EU region)

Osservato

MX 0 mail.orneos.eu, which resolves to 157.173.121.41 (Contabo, AS51167). Operator-run mail on the same VPS, with IMAP on 993 and submission on 587/465. MTA-STS mode is enforce. Current MX: 0 mail.orneos.eu.

Prove

Live MX records ↗Live mail host address ↗IMAP and SMTP settings ↗Current daily MX lookup ↗

Email in uscita autorizzata

Contabo (KKR)

Ubicazione

Germany (Contabo EU region)

Osservato

SPF v=spf1 a mx ip4:157.173.121.41 -all authorises only the operator's own server, with no third-party sender. DKIM selector mail; DMARC p=quarantine pct=100. The SMTP greeting names vmi2151755.contaboserver.net. SPF lists authorised senders, not measured delivery.

Prove

Live SPF record ↗Live DMARC record ↗

Elaborazione dei pagamenti

Stripe Payments Europe (Stripe)

Ubicazione

Ireland (contracting entity)

Osservato

The legal notice, sales terms and DPA name Stripe Payments Europe, Ltd. for payment and billing of paid plans, through Stripe's hosted payment page. Orneos says it receives and keeps no card data. Stripe group control is distinct from the Irish entity.

Prove

Legal notice: processors, sales terms and DPA ↗

Servizi di supporto

Nextcloud GmbH STUN server

Ubicazione

Germany (Hetzner, AS24940)

Osservato

The app's Content-Security-Policy allows stun.nextcloud.com:443 next to Orneos's own TURN server, signaling.orneos.eu:3478, for Meet calls (Nextcloud Talk 25.0.6). A STUN server learns each participant's public IP address during call setup, not call content. stun.nextcloud.com resolves to 46.225.95.169 (Hetzner, DE).

Prove

App response headers (Content-Security-Policy) ↗Live STUN host address ↗RIPE IP allocation: Hetzner, DE ↗

Servizi di supporto

OpenStreetMap tile servers via Fastly

Funzione o canale opzionale

Osservato

The app's Content-Security-Policy allows images from *.tile.openstreetmap.org, which is served by Fastly (AS54113). Map views, such as photo places, would load tiles directly in the browser and expose the visitor's IP address. Actual requests were not observed without an account, so this is recorded as a map feature only.

Prove

App response headers (Content-Security-Policy) ↗Live tile host DNS ↗RIPE network record ↗

Servizi di supporto

Mistral AI (Ornis assistant)

Funzione o canale opzionale

Ubicazione

Orneos says only 'hosted in the EU'; Mistral lists Sweden, Norway, the Netherlands, Belgium, France and the EEA for its API

Osservato

The help page says Ornis sends what it reads from the user's apps (an email, an appointment) to Mistral for the time of the answer, and the legal notice calls it Orneos's AI, hosted in the EU, on a Mistral AI model. Mistral AI is not in the published sub-processor list, which names only Contabo and Stripe. Nextcloud reports the OpenAI-compatible connector with a non-OpenAI endpoint. Whether that is Mistral AI's API or a self-hosted Mistral model was not established. Ornis is opened by the user. The search AI overview is on by default for signed-in users and can be turned off. Mistral AI's ultimate control is unresolved in this catalogue.

Prove

Help: what Ornis sends to Mistral ↗Legal notice: processor list and AI wording ↗Mistral live sub-processor table ↗Mistral data location and transfers ↗

Fonte dei risultati di ricerca

Google, Microsoft Bing, DuckDuckGo, Brave, Startpage and Wikipedia

Funzione o canale opzionale

Osservato

Orneos Recherche (search.orneos.eu) is a metasearch page. The legal notice says search terms go to these engines without the user's identity or IP address, result images are proxied, and searches are not logged. It is used only when someone searches there; mail, files and calendar do not depend on it. The engines are not listed as processors.

Prove

Legal notice: search data handling ↗Orneos Recherche product page ↗

Distribuzione dell'app

Apple App Store (Nextcloud iOS app)

Funzione o canale opzionale

Osservato

iPhone users are sent to Nextcloud's own iOS app in the App Store and connect it with a code. Browser access and native IMAP, CalDAV and CardDAV setup through a configuration profile are alternatives. The store processes download and account data under Apple's policy, not file content. Android apps are direct APK downloads from orneos.eu, with no Google Play listing.

Prove

Apps and downloads ↗FAQ: mobile apps ↗

Distribuzione dell'app

Mozilla Add-ons

Funzione o canale opzionale

Osservato

Optional Orneos browser extension for bookmarks, passwords, notes and search, published on addons.mozilla.org on 15 October 2026. The legal notice says it sends data only to app.orneos.eu and search.orneos.eu. Chrome and Edge versions are claimed, but their store listings were not verified.

Prove

Firefox add-on listing ↗Legal notice: browser extension ↗