ownCloud Server vs oCIS: two products under one brand
ownCloud Server (the PHP product) is in maintenance mode — the vendor pushes oCIS, a Go rewrite. They have different storage models, different deployment shapes, and different feature sets. When comparing to Cotton, oCIS is the relevant product for new deployments; ownCloud Server is for legacy estates.
Spaces vs free folder structure
oCIS introduces a Spaces abstraction — each user, project, and shared area is a separate Space with its own permissions and lifecycle. Useful for multi-tenant enterprise. Heavy for a small team that just wants a private folder tree. Cotton uses a free folder structure with sharing and permissions as normal product behavior, not a structural concept you organize around.
External IdP is mandatory in oCIS. Optional in Cotton.
oCIS requires an external OIDC identity provider for any non-trivial deployment — LDAP, Keycloak, Azure AD, etc. That is correct for enterprise rollouts. For a home server or 5-person team it is overkill - a passport check to get into your own kitchen. Cotton ships with built-in accounts + passkeys + TOTP + session revoke, and can integrate with external auth when that becomes a real requirement.
Where Cotton is sharper
Browser file UX for non-enterprise users: audio waveform, STL/OBJ/3MF viewer, mobile PDF text layer, video seek on encrypted storage, realtime SignalR sync, auto-restore DB from own backup, integrity signatures on sensitive database rows. oCIS focuses on the platform layer; Cotton focuses on what users actually click on every day.
Pick by lane, not by logo
If you are buying for an organization with enterprise requirements (mandatory IdP, multi-tenant Spaces, vendor support contracts), pick ownCloud / oCIS. If you are running a file cloud for yourself, your family, or a small team, and you want it to feel finished, pick Cotton.