Open-source workspace platform
Your workspace. Your infrastructure. Your rules.
Office Unbound is an open-source workspace platform in development, designed to bring email, calendars, files, documents, collaboration, and administration together without forcing businesses into a single cloud provider.
Planned as an alternative to Microsoft 365 and Google Workspace, with guided migration from both.
Proposed interface concept Not released · example data · subject to change
Good morning, Maya
Monday 16 November · four meetings today, the next in 8 minutes
Team stand-up
09:00 – 09:15 · Audit & Tax · 6 people
- 09:0009:15 Team stand-upMeet · Audit & Tax
- 08:52
- 10:3011:00 Harbor Street Dental — October closeCall with Grace Lin
- 13:0015:00 Focus: accrual reviewBlocked by you
- 15:3016:00 Payroll sign-offRoom 2 · Tom Haddad, Priya Nair
- AP Ana Petrov · Kestrel Logistics08:12 Invitation: Year-end planning, Thu 19 Nov Needs a response
- GL Grace Lin · Harbor Street DentalSun October statement — two deposits unmatched Flagged · before the 10:30 call
- TH Tom HaddadSun Payroll cut-off moved to Wednesday Flagged · due Wed 18 Nov
- DW Dana WhitlockFri Re: Engagement letter — Cobalt Ridge Unread · 1 attachment
- Trial balance Oct 2026.xlsxFinance › ClosePriya Nair edited · 08:40
- Data retention policy.docxOperations › PoliciesYou edited · Fri
- Cobalt Ridge — engagement.pdfClient files › Cobalt RidgeDana Whitlock shared · Fri
- Year-end close, four weeks.pptxFinance › CloseYou opened · Thu
- Tue17Brightwater Vet onboarding11:00 · Meet · 2 guestsJoin
- Thu19Year-end planning — Kestrel Logistics10:00 · Board room + MeetJoin
- PNPriya Nair mentioned you in #month-end-close“Can you review the accruals before 3?” · 08:41
- DWDana Whitlock replied to your comment in Data retention policyDocs · 08:20
- OPOwen Price accepted Quarterly review — MeadowlaneCalendar · Sun
- Northfield IT: maintenance Sat 21 Nov, 02:00–04:00Mail and Files briefly unavailable · Sun
Status: Phase 1, architecture and evaluation. Nothing on this site is released yet; screens are design concepts. How status is reported
See it as designed
One workspace, four ways to run it.
People work in the workspace. Organizations, managed service providers and infrastructure operators each get their own console, with separate access. These are proposed interface concepts, not released software.
-
For everyone
The workspace
Mail, calendar, files and documents from one start page.
Proposed concept · not released
-
For organization administrators
Organization admin center
Users, groups, domains, security policies and updates.
Proposed concept · not released
-
For managed service providers
MSP Control Center
Every customer organization, with access scoped per technician.
Proposed concept · not released
-
For infrastructure operators
Infrastructure Control Server
Hosts, services, alerts and capacity across the platform.
Proposed concept · not released
Why Office Unbound?
Your business. Your data. Your infrastructure. Your rules.
Modern collaboration shouldn’t require surrendering control of your business data, infrastructure decisions, update schedules or long-term technology strategy to a single provider. Office Unbound is being designed as a genuinely open-source, self-hosted or MSP-hosted alternative that puts businesses and service providers back in control.
For businesses: why switch?
- Data ownershipChoose where mail, files and records live: your servers, a private cloud or an MSP’s.
- Vendor independenceLess reliance on one cloud provider’s pricing, roadmap and terms.
- Hosting flexibilityRun it on your own infrastructure, or have an MSP run it for you.
- Open-source transparencyPlanned: public source code, dependency inventories and published security fixes that anyone can inspect. The repository is not published yet.
- Predictable operationsYou or your provider set maintenance windows and deployment policies.
- Privacy and governanceYou decide access, retention, backups and how data is handled.
- Business continuityBackup, restore testing, retention and disaster recovery under your control, run by your IT team or MSP.
- Familiar productivityMail, calendars, contacts, documents, files, chat, meetings and calling.
- Migration assistancePlanned discovery, readiness assessment, migration, validation and rollback.
- PortabilityOpen protocols and exportable data lower the cost of leaving, including leaving Office Unbound.
- Your organizationUsers, data, policies, retention, who has access
- Your IT team or your MSPServers or private cloud, backups and restore tests, retention, disaster recovery, monitoring, updates on your schedule
- The Office Unbound projectOpen-source code, with signed releases, SBOMs and security advisories planned
More control means more responsibility
Whoever hosts Office Unbound, your IT team or your MSP, takes on the patching, monitoring, capacity and support that a SaaS provider would otherwise carry, and is responsible for backups, restore testing, retention and disaster recovery. The Infrastructure Control Server is designed to reduce that work, not remove it.
For MSPs: why offer it?
Build a managed collaboration service you control, not only resell one. See the full MSP opportunity.
- A differentiated serviceA managed collaboration platform of your own, not a resold subscription.
- Recurring revenue opportunitiesHosting, management, migration and support as ongoing services.
- Infrastructure you controlCustomers run on hosting you choose, not entirely on another vendor’s cloud.
- Room to improve marginsEfficient use of shared infrastructure may help margins. No savings are promised.
- Multi-tenant administrationEvery customer an isolated tenant, managed from one console.
- APIs for provisioning and billingDesigned for automated provisioning, usage reporting and billing integration.
- Fits your MSP toolsPlanned integration with clientst0r and other PSA, RMM and documentation tools.
- Infrastructure Control ServerHealth, monitoring, alerting, updates and capacity planning in one place.
- Flexible customer environmentsServices, quotas and policies configured per customer.
- Guided customer migrationsAssessment and staged moves from Microsoft 365 and Google Workspace.
- Optional security servicesAdd services such as MailThreatZero for customers who want them.
- Closer customer relationshipsYou run the service your customers depend on, directly.
- Assess and migrateProject revenue to bring a customer over
- HostMonthly hosting on infrastructure you run
- Manage and secureAdministration, updates, monitoring, optional security services
- Support and reportHelp desk and regular customer reports
Renewed each term; customers add services as they grow.
Your own offering, around an open-source core
MSPs can build commercial services on the open-source core: hosting, management, migration and support. Those offerings are subject to the licenses of Office Unbound and of the components deployed, for example a commercial document-engine edition where a customer needs one.
From vendor dependency to customer control
Microsoft 365 and Google Workspace already offer regional data controls, integrations, strong security features and data export. This compares deployment models, not product quality: Office Unbound is a different approach, not a universally better one.
- Discover
- Assess
- Map and plan waves
- Transfer
- Verify
- Cut over, with rollback
- Signed release and advisory
- Review
- Schedule a window
- Pilot ring
- Broad rollout
- Roll back if needed
Common questions
Why would I switch from Microsoft 365?
You may not need to. Microsoft 365 is mature and capable. Office Unbound is for organizations that want their data on infrastructure they choose, updates on their schedule and software they can inspect, and that accept running it themselves or paying an MSP to. It is in development, so for now the realistic step is to follow the project or take part in testing. Compared workload by workload.
Can I keep using Outlook or other mail clients?
Standard IMAP, SMTP, CalDAV and CardDAV access is planned, so clients such as Thunderbird, Apple Mail and phone mail apps are intended to connect. Outlook for Windows and macOS is not claimed: that depends on which mail server is selected. No client has been tested yet. Mail clients and sign-in.
What will it cost?
Office Unbound’s own code is intended to be open source, with no license fee for it; its license has not been selected yet. Running it still costs hosting, administration and support, either in-house or within an MSP’s service price. Some deployments also choose commercial component editions or vendor support, such as a supported document engine. No pricing has been set, and no savings are promised. Costs and licensing.
Is the software actually open source?
That is a founding principle: the source code for Office Unbound’s own components is intended to be public, with signed releases and software bills of materials planned from the first release. None of these exist yet: the public repository has not been published. Some components it is designed to use also sell commercial editions alongside their open-source ones. Why open source.
Who maintains updates and security?
The project plans to publish releases and security advisories; none have been published yet. Whoever hosts a deployment, your IT team or your MSP, applies them on the schedule they set, with planned rollout rings and rollback. Critical security fixes are not meant to be deferred indefinitely. Security controls.
Can an MSP host and manage everything?
That is a primary design goal: multi-tenant administration, customer isolation, delegated technician access, and the Infrastructure Control Server for operations, while each customer keeps its own admin center and audit log. These capabilities are planned, not built. For managed service providers.
How will migrations work?
In planned stages: read-only discovery, an assessment of what moves directly, needs conversion or is not supported, identity mapping and waves, staged transfer, verification, then cutover with a rollback window. How long it takes depends on the organization; figures shown on this site are illustrative. Migration overview.
Is Office Unbound available today?
No. The project is in Phase 1, architecture and evaluation. Nothing has been released, and the screens on this site are design concepts. You can register interest, become an MSP design partner or contribute. Roadmap.
The workspace
One workspace. One sign-in. Complete control.
Everyday applications for people, and the administrative capabilities that sit across them: identity, administration and migration tools. Infrastructure management is separate, in the Infrastructure Control Server. All are Planned, built on open-source components that are Under evaluation. Control here means greater control over infrastructure, data location, maintenance and service delivery.
- MailPersonal and shared mailboxes, rules and signatures.
- CalendarShared calendars, scheduling and room booking.
- ContactsPersonal contacts and the company directory.
- FilesPersonal storage, team libraries and desktop sync.
- DocumentsWord-processing files edited together in the browser.
- SpreadsheetsWorkbooks with formulas, charts and co-editing.
- PresentationsSlide decks built and presented from the browser.
- ChatTeam channels, threads and direct messages.
- MeetingsVideo meetings scheduled from the calendar.
- VoiceSoftphone and business telephony.
- Identity and SSOAdministrative capabilityOne sign-in, MFA, groups and roles.
- AdministrationAdministrative capabilityUsers, policies, updates and audit in one console.
- Migration toolsAdministrative capabilityAssessment and staged moves from Microsoft 365 and Google Workspace.
- See them as designedInterface concepts for every application and administration console →
Workspace concepts
Designed to feel familiar on the first day.
Simple for users, powerful for administrators. People coming from Outlook and Microsoft 365 should find their way without training. Select an application to see its design concept.
Mail that works the way people already work.
Folders, a message list and a reading pane; shared mailboxes beside personal ones; the calendar and directory one click away. Standard IMAP, SMTP, CalDAV and CardDAV underneath, so phones and existing mail apps can connect, designed to use modern sign-in or per-device app passwords rather than password-only legacy authentication.
In place of Exchange Online, Outlook on the web, Gmail
Proposed interface concept Not released · example data · subject to change
Maya Okafor
Inbox12 Drafts2 Sent Scheduled1 Archive Junk3 Deleted Clients Harbor Street Dental Kestrel Logistics2accounts@ (shared)
Inbox7 Sent- Today
-
GL Grace Lin · Harbor Street Dental11:08October statement — two deposits unmatchedHi Maya, our October statement is attached. Two insurance deposits…
-
AP Ana Petrov · Kestrel Logistics10:42Invitation: Year-end planningThu 19 Nov, 10:00–11:00, Board room. Agenda: fuel surcharge accruals…
-
DW Dana Whitlock10:15Re: Engagement letter — Cobalt Ridge BuildersI’ve made the changes to section 4; the fee schedule now matches the…
-
TH Tom Haddad09:31Payroll cut-off moved to WednesdayBecause of the holiday on Thursday the provider needs approved hours…
- Yesterday
-
OP Owen Price · Meadowlane BakerySunQuarterly sales tax returnDo we still file for the quarter if the second shop only opened in…
-
PN Priya NairSunAccrual schedule — draft for reviewDraft attached. Kestrel fuel surcharge is the only estimate I’m unsure…
- Last week
-
JB Jonas Berg · Alder & Finch ArchitectsFriSigned: 2027 retainerSigned copy attached. Please send the first invoice to our new…
October statement — two deposits unmatched
External sender. Harbor Street Dental is in your contacts.
Hi Maya,
Our October statement is attached. Two insurance deposits don’t match anything on our side:
- 14 Oct — $1,862.40 from Lakeside Benefits Plan
- 27 Oct — $640.00, reference HSD-4471
The remittance advice for the first one is in the spreadsheet. Could you check they were posted to the right patient accounts before you close the month?
Thanks,
Grace Lin
Office Manager, Harbor Street Dental
Documents, spreadsheets and presentations in the browser.
Word-processing, spreadsheet and presentation files opened from storage and edited together, with comments, version history and sharing that follows the same permissions as the file.
In place of Word, Excel, PowerPoint, Google Docs, Sheets, Slides
Proposed interface concept Not released · example data · subject to change
Northfield Accounting · Policy OPS-07
Data retention policy
1. Purpose
This policy sets how long Northfield Accounting keeps client and business records, where they are stored, and how they are disposed of when the retention period ends. It applies to records in mail, Files, team librariesPriya Nair and the practice management system.
2. Retention schedule
| Record | Kept for | Counted from | Disposal |
|---|---|---|---|
| Client tax workpapers | 7 years | End of engagement | Secure delete |
| Payroll records | 6 years | End of tax year | Secure delete |
| Engagement letters | 10 years | Date signed | Archive, then delete |
| General correspondence | 3 years | Date sent | Automatic |
| Unsuccessful applications | 1 year | Decision date | Automatic |
3. Where records are kept
Client records live in the Client files library, which is backed up nightly. Copies synced to laptops are not separate records: removing a file from the library removes it from every synced device.
Personal files and team libraries, synced to the desktop.
One place for a person’s own files and their teams’ shared storage, with sharing, permissions, version history and a desktop client that keeps chosen folders available offline.
In place of OneDrive, SharePoint document libraries, Google Drive
Proposed interface concept Not released · example data · subject to change
Team libraries
Finance Year-end 2026 Operations Client files HR| Name | Owner | Modified | Size | Sharing | ||
|---|---|---|---|---|---|---|
| Bank reconciliationsPriya Nair · 13 Nov | PNPriya Nair | 13 Nov | 14 items | Finance team | ||
| PayrollTom Haddad · 12 Nov | THTom Haddad | 12 Nov | 9 items | Payroll group | ||
| Trial balance FY2026.xlsxDana Whitlock · Today, 10:14 | DWDana Whitlock | Today, 10:14 | 1.8 MB | 4 people | ||
| Accrual schedule Oct.xlsxPriya Nair · Today, 09:40 | PNPriya Nair | Today, 09:40 | 412 KB | 3 people | ||
| Year-end timetable.docxMaya Okafor · Yesterday | MOMaya Okafor | Yesterday | 64 KB | Private | ||
| Partners’ meeting — 18 Nov.pptxMaya Okafor · Yesterday | MOMaya Okafor | Yesterday | 3.2 MB | View link | ||
| Audit request list — Cobalt Ridge.pdfDana Whitlock · 9 Nov | DWDana Whitlock | 9 Nov | 248 KB | Link · until 30 Nov | ||
| Fixed asset register.xlsxPriya Nair · 2 Nov | PNPriya Nair | 2 Nov | 920 KB | 3 people | ||
| Bank letter — signatories.jpgTom Haddad · 28 Oct | THTom Haddad | 28 Oct | 2.4 MB | Private |
Who has access Manage
- DWDana WhitlockOwner
- Finance team · 6Can edit
- MOMaya OkaforCan edit
- IBInes Brandt · external auditorCan view
Link sharing off for this file
Version history See all
- v12Today, 10:14Dana Whitlock · current
- v11Today, 09:02Priya NairRestore
- v1013 Nov, 16:47Dana Whitlock
Teams, channels and threads on an open standard.
Channels for each team, threaded replies, direct messages and files shared in the conversation, built on the Matrix protocol so the data model is documented and portable.
In place of Microsoft Teams chat, Google Chat
Proposed interface concept Not released · example data · subject to change
Teams
NANorthfield Accounting general month-end-close client-onboarding4 tax-season-2027 KLKestrel LogisticsShared year-end-20261Direct messages
DWDana Whitlock THTom Haddad1 PNPriya Nair IBInes Brandt · externalToday
Priya Nair09:58
October trial balance is posted. I’ve flagged the two accounts that moved by more than 10% against September.
DWTHMO3 repliesLast reply 10:20
Tom Haddad10:31
@Maya Okafor can you approve the accrual for the Kestrel fuel surcharge? It’s $4,860, based on their October invoices.
24
Dana Whitlock10:45
Dana Whitlock is typing…
Priya Nair09:58
October trial balance is posted. I’ve flagged the two accounts that moved by more than 10%…
3 replies
Dana Whitlock10:05
6120 Fuel is the Kestrel surcharge — expected for October.
Tom Haddad10:12
6800 is the annual software renewal. I’ve added a note in the file.
Maya Okafor10:20
Thanks both. I’ll review them before 3.
Meetings scheduled from the calendar, joined from the browser.
Video and audio meetings with screen sharing, a participant list and in-meeting chat, scheduled from the same calendar as everything else.
In place of Teams meetings, Google Meet
Proposed interface concept Not released · example data · subject to change
Priya Nair is sharing a window
| Account | Name | Sep | Oct | Change |
|---|---|---|---|---|
| 4000 | Freight revenue | 412,300 | 438,950 | 6.5% |
| 5100 | Driver wages | 151,800 | 154,200 | 1.6% |
| 6120 | Fuel | 58,410 | 71,320 | 22.1% |
| 6400 | Depot rent | 18,500 | 18,500 | 0.0% |
| 6800 | Software | 1,140 | 2,910 | 155.3% |
| 7100 | Vehicle maintenance | 12,250 | 11,430 | (6.7%) |
| 7300 | Insurance | 9,200 | 9,200 | 0.0% |
| 8300 | Depreciation | 22,600 | 22,950 | 1.5% |
Flagged: change above 10% against September
Raised hands
- THTom Haddad1st
In this meeting Mute all
- PNPriya Nair · presenting
- DWDana Whitlock
- MOMaya Okafor · you
- IBInes Brandt · external
- Board room · room system
Meeting chat
One console for users, policies and updates.
Users, groups, roles and MFA in one directory; mail, storage and security policy in one place; service health and pending updates with maintenance windows the organization sets.
In place of Microsoft 365 admin center, Google Admin console
Proposed interface concept Not released · example data · subject to change
Office Unbound’s own code carries no per-user fee. Commercial component editions, such as a supported document engine, may be licensed per user. Capacity depends on your deployment.
| User | Role | MFA | Files storage | Last sign-in |
|---|---|---|---|---|
| MOMaya Okaformaya.okafor@northfield.example | Organization admin | Security key | 18.6 / 50 GB | Today, 08:12 |
| DWDana Whitlockdana.whitlock@northfield.example | User | Authenticator app | 31.2 / 50 GB | Today, 07:55 |
| PNPriya Nairpriya.nair@northfield.example | User | Authenticator app | 12.9 / 50 GB | Today, 08:40 |
| THTom Haddadtom.haddad@northfield.example | Helpdesk admin | Security key | 9.7 / 50 GB | Today, 09:02 |
| GLGrace Lingrace.lin@northfield.example | User admin | Security key | 14.2 / 50 GB | Today, 08:31 |
| OPOwen Priceowen.price@northfield.example | Security reader | Authenticator app | 2.4 / 50 GB | Today, 08:15 |
| SOSam Ortegasam.ortega@northfield.example | User | Authenticator app | 44.7 / 50 GB | Yesterday |
| JMJorge Medinajorge.medina@northfield.example | User | Not enrolled · 5 days left | 1.1 / 50 GB | 13 Nov |
| HCHannah Colehannah.cole@northfield.example | User | Invited · not set up | 0 / 50 GB | Never |
| LPLeah Parkleah.park@northfield.example | User | Suspended 2 Nov | 6.0 / 50 GB | 30 Oct |
- MailOperational
- Calendar and contactsOperational
- Files and syncOperational
- Document editingSlow to open since 09:40. Investigating.Degraded
- Chat and meetingsOperational
- Sign-in and MFAOperational
Mail service 1.14.3Security
Window: Sat 21 Nov, 02:00–04:00
ApproveDeferRelease notes
Document editor 2.9.0Feature
Needs approval · window Sat 28 Nov
ApproveDeferRelease notes
All workspace and administration concepts · Design principles
Infrastructure operations
More than a productivity suite. Operations designed in from the start.
Self-hosted productivity usually means assembling separate tools to watch, patch, recover and grow the servers underneath it. Office Unbound is planned with its own operations layer, the Infrastructure Control Server, designed to monitor services, detect failures, carry out approved recovery actions, manage updates and forecast capacity for the infrastructure it runs on.
Planned, and built on established open-source components. It does not remove the need for administrators; it gives them one place to work.
- Infrastructure controlProxmox VE hosts, VMs, containers and services, with least-privilege credentials.
- Monitoring and alertingHealth checks, severity levels and escalation by email, SMS, Pushover, push or webhook.
- Recovery and maintenanceApproved recovery actions, and updates on your maintenance schedule.
- Capacity and scalingForecasts with stated assumptions, and controlled scaling through hypervisor APIs.
Proposed interface concept Not released · example data · subject to change
- CPU38%256 cores · 30-day peak 71%
- Memory67%1,370 of 2,048 GB allocated
- Storage · cluster A52%ceph-a · 31 of 60 TB
- Storage · cluster B71%ceph-b · 28.4 of 40 TB · alert at 85%
- Network12%25 GbE uplinks · busiest port, 30-day peak 34%
| Host | CPU | Memory | Note |
|---|---|---|---|
| pve-a1Cluster A | 44% | 78% | Rack 1 |
| pve-a2Cluster A | 39% | 76% | Rack 1 |
| pve-a3Cluster A | 31% | 77% | Rack 2 |
| pve-b1Cluster B | 27% | 38% | Rack 2 |
| pve-b2Cluster B | 34% | 36% | Disk latency |
- CriticalOutbound mail relay failing on mail-02INC-2047 · 02:14 · acknowledged by D. Okafor
- Warningceph-b write latency above 20 msINC-2046 · 01:52 · watching
- NoticeIdentity container restarted, recoveredINC-2043 · Thu · automated restart, verified
- Storage cluster B: projected to reach 85% in about 7–10 weeks at current growthEstimate from 90 days of metrics
- Cluster A cannot absorb the loss of one host’s memory1,180 GB in use · 1,024 GB on two hosts
- CPU headroom beyond 12 monthsSurvives loss of 1 host in both clusters
- Sun 1502:00Document engine 2.9.0 · canaryApproved · snapshot first
- Tue 1722:00Host packages, cluster ARolling · VMs live-migrated first
- Sat 2102:00Mail service 1.14.3 security fixNeeds approval
- MailRelay failing
- Identity / SSOHealthy
- Files and syncHealthy
- DocumentsHealthy
- Chat, meetingsHealthy
- TelephonyHealthy
- DatabasesReplica in sync
- DNS and proxyHealthy
- Storageceph-b latency
- Backups24 of 24 last night
Built for managed service providers
Many customer organizations, one console.
Many small and mid-sized businesses buy productivity services through an MSP. Office Unbound is being designed so a provider can deliver them from infrastructure it chooses: isolated customer tenants, delegated technician access with audit, migration projects run as a service, and updates scheduled per customer. A provisioning and management API is planned, including integration with clientst0r.
- Separate, isolated customer tenants
- Role-based technician access, every action audited
- Migration assessments as a service
- Rollout rings and maintenance windows per customer
- Monitoring, patching and alerting for every customer environment
- Planned clientst0r integration and management API
Proposed interface concept Not released · example data · subject to change
| Organization | Users | Modules | Status | Storage | Migration | Alerts | Updates |
|---|---|---|---|---|---|---|---|
| NANorthfield Accountingnorthfield.example | 48 | MailFilesDocsChatMeet | Operational | 612 GB of 1 TB | Complete | 0 | Up to date |
| KLKestrel Logisticskestrel-logistics.example | 186 | MailFilesChatMeet | Operational | 1.4 TB of 3 TB | Wave 2 of 4 | 1 | 2 pending |
| HSHarbor Street Dentalharborstreetdental.example | 22 | MailFilesDocs | Operational | 140 GB of 250 GB | — | 0 | Sat 02:00 |
| AFAlder & Finch Architectsalderfinch.example | 31 | MailFilesDocsChat | Degraded | 1.7 TB of 2 TB | — | 1 | Up to date |
| BVBrightwater Veterinarybrightwatervet.example | 17 | MailFiles | Operational | 88 GB of 250 GB | Assessment | 0 | Up to date |
| CRCobalt Ridge Builderscobaltridge.example | 64 | MailFilesDocsChatMeet | Maintenance | 420 GB of 1 TB | — | 0 | Updating |
| PPPinecrest Property Mgmtpinecrestpm.example | 40 | MailFilesDocs | Operational | 305 GB of 500 GB | — | 2 | 1 pending |
| MBMeadowlane Bakerymeadowlane.example | 9 | MailFiles | Operational | 21 GB of 100 GB | — | 0 | Up to date |
- Reset passwords and MFA
- Manage mailboxes and groups
- Approve scheduled updates
- Read customer mail or files
- Export data or delete tenants
- Nowuntil 12:00Cobalt Ridge BuildersDocument editor 2.9.0 · users notified
- Sat 2102:00Harbor Street Dental, KestrelMail service 1.14.3 security fix
- Sat 5 Dec22:00Kestrel LogisticsMigration cutover · MX change
- Compute3 hosts · 30-day average 38%, busiest 71%
- Memory410 of 768 GB in use
- Storage, all tenants4.7 of 12 TB · Alder & Finch largest
Plan another host when the 30-day average passes 75%.
- Pinecrest: 5 failed sign-ins, new countrySecurity · 11:12 · account locked
- Pinecrest: admin role grantedSecurity · 10:58 · confirm with customer
- Alder & Finch: storage at 85%Capacity · raise quota or archive
- Kestrel: 3 items over size limitMigration · wave 2
Migration from Microsoft 365 and Google Workspace
Migration without guesswork.
Migration starts with a read-only assessment that inventories the source and states what will transfer, what needs conversion and what will not, before a single mailbox moves. Each stage has a validation step and an operator approval before the next.
What can be moved depends on the source platform’s APIs, the customer’s licenses and the workloads in use. The assessment reports this per tenant.
- DiscoverConnect read-only and inventory the tenant.
- AssessCompatibility, volumes, blockers.
- PlanMap users and groups; set batches.
- PilotDry run with a small group.
- TransferStaged batches, then delta sync.
- VerifyCompare counts and content.
- Cut overApprove, change DNS, keep a rollback point.
Proposed interface concept Not released · example data · subject to change
Read access to directory, mail, calendars, files and Teams metadata. The assessment changes nothing in the source.
| Workload | Found | Status | Complexity |
|---|---|---|---|
| MailStandard mailboxes; 2 over 50 GB go in their own batch | 412 GB | Ready | Low |
| Calendars and contactsRoom mailboxes map to bookable rooms | 48 · 6,214 | Ready | Low |
| OneDrive1,140 paths over 400 characters to shorten first | 286 GB | Ready | Medium |
| SharePoint sitesLists and custom pages become tables and wiki pages | 640 GB | Needs conversion | High |
| Teams channelsChannel history export to be verified | 41 | Needs validation | Medium |
| AutomationPower Automate flows must be rebuilt by hand | 7 flows | Not supported | High |
Complexity reflects how much needs converting, rebuilding or checking by hand. It is not a duration: timing depends on bandwidth, source throttling and the waves you choose.
- Migrates directly24Mailboxes and folders · calendars · contacts · OneDrive files (current versions) · groups
- Needs conversion6Mail flow rules (review each) · SharePoint lists to tables · distribution lists to groups
- Needs validation5Teams chat history · archive mailboxes · file version history · OneNote notebooks
- Not supported3Power Automate flows (7) · Power Apps (2) · Forms surveys
- Mail flow rule “Client confidential” uses a sensitivity labelDecide on an equivalent before Wave 2
- 7 flows send client remindersRebuild or replace before cutover
- DNS is managed by a third partyAccess needed for MX, SPF and autodiscover
- 1Pilot: IT and partners6 users · 38 GB
- 2Finance14 users · 140 GB
- 3Audit and tax28 users · 520 GB
- 4Shared mailboxes, sites, Teams5 sites · 9 teams · 640 GB
- Mail and calendar4 vCPU · 16 GB RAM · 1 TB
- Files and documents8 vCPU · 32 GB RAM · 2 TB
- Chat, meetings, identity4 vCPU · 16 GB RAM · 200 GB
Proxmox VE · discovered volume plus 30% growth. Validate before ordering hardware.
Documents
Your choice of document engine.
Office Unbound is designed to work with two established open-source editing engines through one integration layer. Users see the same file browser, sharing, comments and version history whichever engine a deployment selects.
Collabora Online
Based on LibreOffice. Integrates through the WOPI protocol; ODF formats native, with OOXML support.
Under evaluationONLYOFFICE Docs
Built around Office Open XML (docx, xlsx, pptx). Integrates through its Document Server API, with WOPI support.
Under evaluationThe integration layer
Common handling of file access, permissions, sessions, locking, saving and versions, so an administrator can select the engine per deployment and change it later through a planned, controlled cutover.
PlannedNeither engine is recommended over the other: licensing, editions and format needs differ between organizations. Document engines: comparison and architecture
Open and transparent
Claims you can check.
Open source does not make software secure by itself. It makes the claims checkable. Office Unbound is designed to publish its source, sign every release, publish a software bill of materials with each one, and handle vulnerability reports through coordinated disclosure. The first four are planned and do not exist yet: no repository or release has been published.
- Public source
- Planned: the code that runs the platform, readable by anyone evaluating it.
- Signed releases
- Planned: release artifacts signed so administrators can verify what they install.
- Bills of materials
- Planned: an SBOM listing every component and version in each release.
- Advisories
- Planned: security advisories with affected versions and fixes.
- Disclosure
- Available now: a private route for reporting vulnerabilities. A formal disclosure policy is planned.
Current project status
Every capability carries one of seven labels.
A label moves forward only with evidence: public code for Implemented, published test results for Tested, a supported release for Production-ready. Today nothing is past In development.
- ConceptIdea or design direction
- Under evaluationBeing assessed
- PlannedOn the roadmap
- In developmentBeing worked on
- ImplementedCode in a public repository
- TestedPassed published tests
- Production-readySupported release
| Area | Detail | Status |
|---|---|---|
| Phase 1 | Architecture and component evaluation | In development |
| Components | Keycloak, grommunio or Stalwart, Nextcloud, Collabora Online or ONLYOFFICE, Matrix, LiveKit | Under evaluation |
| Applications | The workspace applications above, with identity and administration | Planned |
| Migration | Assessment and readiness engine, then execution | Planned |
| Infrastructure operations | Control server: monitoring, alerting, recovery, patching, capacity | Planned |
| Interface | Workspace and administration screens on this site | Concept |
Get involved
Help decide what gets built first.
The project is at the stage where outside input changes the design. Each route below reaches the project directly; you are contacted about what you asked for, and nothing else.
-
MSP design partners
Shape tenant management, delegated access and migration workflows around how you run customers today.
Become a design partner -
Early adopters
Name the workloads that matter most and test early builds when they match what you need.
Register for early testing -
Developers
Integration, interface, clients and migration connectors, once the source is published.
Developer interest -
Technical contributors
Security review, documentation, testing and packaging, at whatever depth suits you.
Ways to contribute -
Sponsors
Fund development, infrastructure or a specific workstream, such as migration tooling.
Sponsoring the project
Add chat channels to this list? Client discussions happen there too.
Should payroll be 6 or 7 years? Our engagement letters say we keep everything for 7.
7 — align it with the tax workpapers. @Tom Haddad can you confirm with the payroll provider?