Decentralization: The Stack That Does Not Extract

In this article:

• What Non-Extractive Infrastructure Stack Already Exists for Small Businesses
• Communication
• Productivity and Storage
• Development and Code
• Self-Hosted Application Layer
• What Does the Non-Extractive Stack Not Include
• Frequently Asked Questions
• What is a non-extractive SaaS stack and does it actually exist?
• Is Signal actually secure enough for business communication?
• How does Proton compare to Google Workspace for business use?
• References

Decentralization is not a direction toward something that does not exist yet. The alternative infrastructure is operational. Mastodon, Signal, Proton, Codeberg, and Cloudron are running in production for millions of users. Mapped together as a coherent stack, they cover every major function a small agency or independent business needs without a single extractive platform relationship.

Signal for team and client messaging. End-to-end encrypted, nonprofit governed, no advertising model, no behavioral data extraction. The protocol is open. The organization cannot read your messages because it does not have access to them. Mastodon for public presence and professional network. Federated, no algorithmic timeline manipulation, no advertising-driven content ranking.

Proton for email, calendar, and file storage. Swiss nonprofit, Swiss privacy law, zero-knowledge encryption on storage. The company cannot read your email or access your files because the encryption happens on your device before the data reaches their servers. The business model is subscription, not surveillance.

Codeberg for code repositories and project management. Nonprofit, running Forgejo, governed by a community rather than a corporate parent optimizing for enterprise revenue. Your repositories and version history on infrastructure that is not subject to acquisition by a company with a different agenda.

Cloudron for self-hosted applications. One-click installs for dozens of open-source applications on a VPS you control. CRM, project management, file sharing, analytics, and more, running on infrastructure you own. The data generated by these applications is in your database, on your server, governed by your decisions.

This stack does not include a Google Analytics replacement that sends behavioral data to Google. It does not include a Slack workspace where the conversation history is owned by Salesforce. It does not include a GitHub repository where Microsoft controls your code's availability.

The stack is not perfect and it is not for everyone. It is evidence that the alternative infrastructure exists and is coherent enough to run a business on.

A non-extractive stack is infrastructure where no platform taxes your usage to fund its own market intelligence or advertising operations. Mastodon, Signal, Proton, Codeberg, and Cloudron together cover communication, productivity, code management, and application hosting without behavioral data extraction. The stack exists and runs in production for millions of users.

Signal uses end-to-end encryption by default, the organization cannot read your messages, the protocol is open source and independently audited, and it is a nonprofit with no advertising revenue model. For business communication it provides stronger privacy guarantees than Slack or Microsoft Teams.

Proton provides email, calendar, and file storage under Swiss privacy law with zero-knowledge encryption. Google Workspace provides the same functions with broader integration. The trade-off is between capability and surveillance: Google Workspace processes your email and documents for advertising and product intelligence. Proton cannot read them. the full self-hosted stack mapped with what each component replaces.

Mastodon. joinmastodon.org.

Signal. signal.org.

Proton. proton.me.

Codeberg. codeberg.org.

Cloudron. cloudron.io.