One platform, two products. CoreOffice is the full suite a company runs on — chat, meetings, documents, calendar, mail, tasks and an assistant that does the work. CoreCommunity is a free home for a community. Both are built in Europe, hosted in Europe, and yours to host if you want them that way.
No credit card. Nothing to install.
They share a codebase, an infrastructure and a security model. What separates them is who they are for, and what they cost.
The whole working day in one place: chat and channels, meetings, documents and spreadsheets, calendar, mail, tasks, forms, databases and dashboards — plus an assistant that opens your files and edits them, rather than talking about them.
Channels, voice, video and file sharing for a group of people who are not a company. Free, with the whole history — no message limit, no per-member charge, and nobody paying a monthly bill to keep the lights on.
The product you choose decides what you get. It does not decide where your data lives, who can read it, or whether you are free to leave.
Written here, run in EU data centres, and answerable to EU law — not to a parent company on another continent.
Messages and the files sent inside them are sealed in your browser before they leave it. We say plainly, below, what that does not cover.
One command on your own Ubuntu machine puts the entire stack behind your firewall, talking to no external service.
Export your files, messages and data whenever you like. Software you cannot walk away from is not really yours.
We opened every app on this list, signed in, and then left the machine alone for five minutes. Nobody typed, nobody scrolled. This is what each one was still holding when we came back.
Measured with Windows Task Manager on Windows 11 Pro, all four apps signed in and idle side by side on one machine. Your numbers will differ with your hardware and how much history you have loaded — so run it yourself: open Task Manager, sign in to each, wait five minutes, and compare the Memory column. Software should be a tool you open, not a tax on the machine you open it with.
Plenty of products say "secure" and stop there. Here is the specific answer, including the parts that are not encrypted and the parts we are still building.
Direct messages, group chats, server channels and the files sent inside them — encrypted in your browser before they are sent, so we cannot read them. Meeting media too, on supported browsers.
Every file in a CoreOffice workspace is encrypted with its own AES-256-GCM key. That key is itself sealed by a separate master key and stored apart from the file, so the file storage, the database and the master key are three separate things, and a copy of any one of them opens nothing on its own. Version history is encrypted the same way, everything travels over TLS, and who can open a file follows your workspace membership and team permissions. On a self-hosted server the keys are generated on your own machine and never leave it.
Because documents are previewed and co-edited in the browser by an editor that runs on the server, and it cannot do that with a file it is unable to open. So the service decrypts a file only to show or edit it for someone who has access, or when you ask the assistant to work on it — the same trade most online office suites make. Messages never need that, so they are sealed in your browser instead, and so is a file you send inside a conversation. On free CoreCommunity servers and on personal files there is no at-rest encryption, and calendar entries, tasks and form responses are ordinary database rows.
For one-to-one messages, yes — the same construction. Direct messages run over X3DH and the Double Ratchet: a session per device and a fresh key for every message, which gives forward secrecy and post-compromise security. Our own implementation of the published spec, not Signal's library, and not independently audited. Group chats and channels still share one group key and are not forward secret — that is the next piece.
In EU data centres. Our cloud runs on Hetzner servers, a German provider, inside the EU. Or on a server you own — one command on your own Ubuntu machine, talking to no external service. Self-hosting is on every plan, not an enterprise upsell.
Leave your email and we open a workspace for you. No card, and no sales call unless you ask for one. If it is a community you are bringing, CoreCommunity is free and always will be.