Skip to main content
Sovereign Workspace Try the demo

Roadmap

What exists, what we're building, what's further out.

We say "in development" instead of "coming soon." Nothing on this page pretends to be live when it isn't. If you see it in the demo, it's live. If you don't, it's here.

Live

Available today

Running on every self-hosted deployment right now — and on the live demo.

  • Workspace (browser) The full server-backed workspace in any modern browser. Available on the live demo now.
  • Keycloak single sign-on One identity for everything. OIDC, SAML, WebAuthn, smart cards. lldap-backed user store; one place to manage everyone.
  • Nextcloud file integration Auto-provisioned user drives. WebDAV passthrough with OIDC bearer token.
  • Collabora office suite Real-time collaborative editing of Word, Excel, PowerPoint, ODF files.
  • Calendar, Contacts, Tasks Native workspace apps backed by Nextcloud CalDAV / CardDAV. Recurring events, attendees, iMIP scheduling, subscribed feeds, attachments.
  • Email Native IMAP client + sovereign mail server (Postfix + Dovecot + DKIM/SPF/DMARC). Compose, reply, tag, search, iMIP "Add to Calendar," drafts, drag-message-to-Calendar, keyboard shortcuts.
  • Chat via Element + Matrix Encrypted group + direct messages. Keycloak SSO; users auto-provisioned in Synapse.
  • Voice & video calls Element 1:1 calls and Jitsi Meet group calls — SSO-gated, over a coturn relay. Live in the workspace and on the demo.
  • App Store / catalogue Admin-curated catalogue of web apps — Element, Jitsi, CryptPad, Excalidraw, OpenProject, Zammad.
  • App bundles per group Assign app bundles to Keycloak groups. Marketing / Finance / HR see the apps they need.
  • Single-server Docker deployment One docker compose up brings the full stack up. Hetzner, OVH, IONOS, your own rack.
  • Single-command in-place updates update-demo.sh diffs what is deployed against the repo, reconciles env keys, re-runs flagged setup scripts, smoke-tests every vhost, and writes a deploy pin. Same script for the demo and any customer install.

In development

Building now

Actively in build. Early-access customers may see them before general release.

  • Zero-config customer deployments Replacing nginx + certbot with Caddy in the customer compose template — auto-issues + auto-renews HTTPS with no API tokens and no override files. Customer install becomes: edit one line, docker compose up.
  • Native desktop app — free, open local version A real desktop app (macOS, Windows, Linux) that runs the workspace with no server — free and local: local files, a real built-in browser, install-any web app, and Mail / Calendar / Contacts wired to your own IMAP / SMTP / CalDAV / CardDAV accounts. Installable builds run today on macOS, Linux and Windows x64 (Windows ARM in progress). Code-signing + notarization, auto-update, and a public download are the last steps before it ships; signed official builds and auto-update are commercial.
  • Fleet management & admin console Multi-device enrollment, health, policy, approval workflows, recovery-evidence export. Single-deployment variant free; multi-deployment commercial.
  • Governed AI gateway Centrally managed, policy-enforced, provider-agnostic AI access for workspace apps. DLP and multi-provider routing commercial.
  • App marketplace Federated registry of workspace-compatible apps. Publishing open; monetisation, verification, private namespaces commercial.
  • Managed hosting We run it on Hetzner or equivalent for organisations that want to buy, not self-host.
  • AGPL-3.0 dual-licensing on the core Stronger protection against uncompensated commercial forks. Decision pending partner review.

On the roadmap

Further out

Scheduled but not yet in active build. Dates set when commitments are real.

  • Linux distribution Bootable minimal Linux that launches directly into the workspace. Phase 7.
  • BSI C5 certification Germany. Required for federal procurement.
  • SecNumCloud qualification France. ANSSI cloud security.
  • Common Criteria evaluation International security certification.
  • EN 301 549 accessibility conformance European public-sector accessibility standard.
  • Air-gapped operations tooling Signed update bundles, local mirror, offline approval workflow.
  • German & French translations Full site and product translations. English at launch.

Something important missing?

If your organisation needs a capability we haven't listed — and you'd pay for it — tell us. Enterprise roadmap is shaped by paying customer commitments, not by guesses.

Email us a request Try the live demo