About OpenCrowd

What is OpenCrowd?

OpenCrowd is an open-source Identity & Access Governance platform. It centralizes user management, permissions, access requests, and audit across open-source collaboration tools like xWiki, OpenProject, and Nextcloud.

Is OpenCrowd an Identity Provider?

No. OpenCrowd is a governance layer that sits above identity providers (Keycloak, LDAP, Active Directory). It handles "who should have access to what" — not authentication.

What applications does OpenCrowd connect to?

Currently: xWiki, OpenProject, and Nextcloud with full bidirectional sync. GitLab, Mattermost, and more are on the roadmap. A Connector SDK will allow custom integrations.

Is OpenCrowd really open source?

Yes. The core platform is licensed under AGPL-3.0. The Community Edition is free forever with no user limits. Source code is available on GitHub.

Editions and pricing

Is the Community Edition really free?

Yes. Unlimited users, 3 connectors, Access Matrix, Joiner/Leaver flows, audit logs, and governance dashboard. No time limit, no credit card required.

What does Professional add?

AI governance assistant (Kai), advanced reports, email notifications, multi-step approval workflows, custom form fields, data export, and priority support with 48h SLA.

What does Enterprise add?

SCIM 2.0 provisioning, access certification campaigns, compliance dashboards (ISO 27001, SOX), custom connectors, multi-tenant architecture, air-gapped deployment, and dedicated support.

Can I upgrade from Community to Professional?

Yes. Set the OPENCROWD_EDITION environment variable to "professional" and add your license key. Same database, same deployment. No data migration needed.

Is there a free trial?

Yes. Contact us for a 14-day Professional trial license key. Test all features on your own infrastructure, risk-free.

What counts as a user?

Active identities managed in OpenCrowd (employees, contractors, external collaborators). Disabled or offboarded users do not count toward the limit.

Hosting and deployment

Can I self-host OpenCrowd?

Yes. All editions are self-hosted by default. Deploy with Docker Compose in 5 minutes. Kubernetes and managed cloud options are planned.

What infrastructure do I need?

A Linux server with Docker. Minimum: 2 CPU cores, 4GB RAM, 20GB storage. Recommended for production: 4 cores, 8GB RAM. Runs on any cloud provider or on-premises.

Does OpenCrowd support HTTPS?

Yes. Production deployments use Let's Encrypt certificates with nginx reverse proxy. SSL configuration templates are included in the repository.

Can I run OpenCrowd air-gapped?

Yes (Enterprise edition). OpenCrowd has no mandatory external dependencies. The AI assistant requires network access to Mistral, but governance features work fully offline.

Security and data handling

Where is my data stored?

In your own PostgreSQL database, on your infrastructure. OpenCrowd never sends governance data to external services. AI queries go to Mistral only if you enable Kai.

Is OpenCrowd GDPR compliant?

Yes. Self-hosted, data stays under your control, includes GDPR data export functionality, and the AI provider (Mistral) is European and GDPR-compliant.

Does OpenCrowd help with ISO 27001?

Yes. Full audit trails, access reviews, permission history, and governance reports support ISO 27001 access control requirements. Compliance dashboards are available in Enterprise.

What AI does Kai use?

Mistral AI (Paris, France). European, GDPR-compliant. Kai queries your local database and only sends governance questions to the AI — never raw user data.