The Problem We Set Out to Solve
Organizations are adopting sovereign digital workplaces — xWiki for documentation, OpenProject for project management, Nextcloud for file sharing. These are powerful, privacy-respecting tools. But they have one gap nobody talks about:
**Who has access to what, across all of them?**
Today, the answer lives in spreadsheets, tribal knowledge, and manual processes. When someone joins the team, IT creates accounts in 3 different tools. When someone leaves, maybe those accounts get disabled. Maybe not. When an auditor asks "who approved this access?" — nobody has a clear answer.
This is the problem we built OpenCrowd to solve.
---
What OpenCrowd Does
OpenCrowd is an open-source Identity & Access Governance platform. One dashboard, three connectors, full visibility.
**[IMAGE: Screenshot of the OpenCrowd Dashboard showing governance score, user count, connected apps, and risk alerts]**
Here's what it handles:
**Identity Governance** — Manage the full lifecycle of every user. Onboard with one click, provision to all apps automatically, and offboard cleanly when they leave.
**[IMAGE: Screenshot of the Identity page showing user list with lifecycle states]**
**Unified Access Matrix** — See every permission across xWiki, OpenProject, and Nextcloud in one table. Grant or revoke with a click.
**[IMAGE: Screenshot of the Access Matrix page with cross-application permission grid]**
**Access Requests & Approvals** — A public form where users request access. Admins approve. The system auto-creates accounts, assigns groups, and provisions permissions. Full audit trail.
**[IMAGE: Screenshot of the public access request form]**
**Governance Dashboard** — Live governance score, risk alerts (dormant admins, over-privileged users, duplicate accounts), and automatic health monitoring of all connected applications.
---
## Built for Sovereignty
OpenCrowd is self-hosted. Your identities, permissions, audit records, and governance data stay under your control. Deploy with `docker compose up` in 5 minutes.
The AI assistant (Kai) is powered by Mistral AI — European, GDPR-compliant, based in Paris. It answers governance questions in natural language: "Who has admin access to the Finance space?" or "Show me all users who haven't logged in for 90 days."
We chose Mistral specifically because data sovereignty matters. If you're running sovereign collaboration tools, your governance layer should be sovereign too.
---
## The Architecture
```
Frontend (React + TypeScript)
↓
REST API (Kotlin + Spring Boot)
↓
PostgreSQL (schema-per-tenant) + Valkey (cache)
↓
Connectors: xWiki | OpenProject | Nextcloud
↓
Keycloak (OIDC authentication — replaceable)
```
Everything runs in Docker. The whole stack starts with one command. No proprietary dependencies, no forced cloud, no vendor lock-in.
---
## Three Connectors, Bidirectional Sync
Each connector does full bidirectional synchronization:
| Connector | What Syncs |
|-----------|-----------|
| xWiki | Users, groups, spaces, wiki permissions |
| OpenProject | Users, groups, projects, memberships, roles |
| Nextcloud | Users, groups, shares, folder memberships |
Auto-sync runs every 30 minutes. Manual sync is one click from the Applications page. If a connector goes unhealthy, you see it immediately on the dashboard.
**[IMAGE: Screenshot of the Applications/Connectors page showing health status]**
---
## Who Is This For?
- **Government agencies** adopting sovereign collaboration stacks
- **Mid-size companies** (50-500 employees) running xWiki + OpenProject + Nextcloud
- **Universities** managing researcher and student access
- **Any organization** frustrated with spreadsheet-based access governance
If you've ever asked "who approved this access?" and nobody could answer — OpenCrowd is for you.
---
## Open Core Model
| | Community (Free) | Professional ($15/user/mo) | Enterprise (Custom) |
|---|:---:|:---:|:---:|
| Unlimited users | Yes | Yes | Yes |
| 3 Connectors | Yes | Yes | Yes |
| Access Matrix | Yes | Yes | Yes |
| JML Flows | Yes | Yes | Yes |
| AI Assistant (Kai) | — | Yes | Yes |
| Advanced Reports | — | Yes | Yes |
| SCIM 2.0 | — | — | Yes |
| Access Certifications | — | — | Yes |
The Community Edition is and will always be free. No user limits, no time limits.
---
## What's Next
We're actively looking for:
- **Early adopters** — Organizations willing to deploy OpenCrowd and give feedback
- **Integration partners** — xWiki SAS, OpenProject GmbH, Nextcloud GmbH
- **Contributors** — Developers who want to build connectors, improve the UI, or write docs
The code is on GitHub. The platform is live. The governance gap in open-source workplaces is real — and now there's a tool to close it.
---
## Try It
```bash
git clone https://github.com/opencrowd-io/opencrowd.git
cd opencrowd && cp .env.example .env
cd infrastructure/docker && docker compose up -d
```
Open http://localhost:3000. You're running OpenCrowd.
---
**Links:**
- Website: https://opencrowd.io
- GitHub: https://github.com/opencrowd-io/opencrowd
- Contact: info@opencrowd.io
---
## Images to Include
Use these screenshots from dev.opencrowd.io (logged in as Platform Admin):
1. **Hero/Dashboard** — Full dashboard screenshot showing governance score, metrics, risk alerts
2. **Access Matrix** — The cross-app permission table with checkmarks
3. **Identity page** — User list with status badges (Active, Disabled)
4. **Request form** — The public /request page
5. **Applications page** — Connector cards with health status indicators
6. **Orbit animation** — Use the opencrowd-orbit-animation.gif from the website assets
Take screenshots at 1440px width for consistency. Crop browser chrome.
