Capture, organise, co-author, version, approve, search, and audit every document your project produces — from FRS and SRS to policies, CCNs, and design specs. Auto-synced project, milestone, and task folders sit alongside custom repositories and folders so docs always live where the work is. Includes built-in collaborative editing (TipTap, OnlyOffice, or Collabora).
- Rating
- 4.8
- Installs
- 12.6K
- Support
- Vendor Supported
- Trust
- Self-Hosted
412 reviews
Active deployments
Priority response
Your infra, your data
Screenshots
Key Features
Project Repository
Every project gets a structured repository auto-synced with its milestones and tasks — files always sit beside the work they relate to.
Custom Repositories & Folders
Create freeform repositories and nested folders of unlimited depth alongside the auto-synced project tree — for policies, templates, contracts, anything.
Real-Time Co-Authoring
Edit the same document together with live cursors and presence — powered by TipTap, OnlyOffice, or Collabora. Switchable per company.
Document Versioning
Major.minor semantic versioning (v1.0, v1.1, v2.0) with change notes, line-level diff, manual snapshots, and one-click restore.
Approval Workflows
Multi-level sequential or parallel approvals with email notifications. Status flows draft → pending → approved/rejected with auto-restart on new versions.
Reusable Workflow Templates
Save approval chains as templates per company and bind them to document types, projects, or folders — set once, reuse forever.
Document Types
FRS, SRS, CCN, Design Document, Report, Policy, plus custom types — typed templates surface the right metadata fields up front.
Granular RBAC
16 permission keys across Documents, Versions, Folders, Approvals, and Administration — give every role exactly the access they need.
Audit Log
Immutable activity feed of every upload, download, edit, approval, version, and folder action — exportable for ISO 27001, SOC 2, and GDPR audits.
Pluggable Storage
Files live on your local disk or any S3-compatible object store (AWS, MinIO, Wasabi, Backblaze) — bucket policies stay private.
Auto-Approve
Queue-driven scheduling auto-approves stalled workflows after a configurable window — no babysitting, no missed deadlines.
Import & Export
Import existing .docx, Markdown, or plain text. Export any document back to .docx, Markdown, or PDF on demand.
Per-Document Sharing
Grant or revoke per-document collaborator access with short-lived JWT tokens for browser sessions — no permission spaghetti.
Multi-Tab Workspace
Dashboard, Repository, All Files, My Files, Approvals, Activity Log, and Settings — every workflow has a home.
Compatibility Analyzer
.docx files are scanned at import; the UI knows whether each document supports rich-text editing or needs the OnlyOffice/Collabora engine.
Multi-Tenant Aware
Every folder, document, version, workflow, and audit row is company-scoped by default — safe for multi-tenant deployments.
About this plugin
Why Document Management for Orangescrum?
Most teams keep project docs scattered across Drive, Dropbox, SharePoint, email, and Slack. Versions go stale, approvals get missed, and audit prep becomes a quarter-long fire drill. Orangescrum's Document Management plugin puts every spec, policy, and change note inside the project itself — versioned, co-authored in real time, approved, and fully traceable.
Project repository, the way it should work
Every project gets a repository folder out of the box. Milestone and task folders are auto-created and kept in sync as the project evolves — so the FRS, SRS, design doc, and meeting notes always sit next to the milestone or task they belong to. Need a freeform space for contracts, policies, or onboarding material? Spin up custom repositories and nested folders alongside the auto-synced tree.
Real-time co-authoring built in
Open any compatible document and start editing together — live cursors, presence indicators, conflict-free edits via Yjs CRDT. Choose the rich-text engine (TipTap), or plug in OnlyOffice or Collabora for high-fidelity Office formats. Engine choice is per-company so different tenants can run different stacks on the same install.
Approvals that finish
Submit a draft and route it through any sequential or parallel chain you've defined. Approvers get email notifications, the audit log records every decision, and queue-driven auto-approval keeps stalled workflows from rotting. Workflow templates make compliance routines (ISO 9001 SOPs, SOC 2 control evidence) repeatable instead of artisanal.
Built for compliance teams
Every action — uploads, downloads, edits, approvals, version restores, folder renames — is captured with timestamp, user, and IP in an immutable audit log. Export it as CSV or JSON for ISO 27001, SOC 2, GDPR, or HIPAA evidence. Permissions inherit cleanly down the folder tree and resolve at request time, so your auditor sees exactly who could see what, when.
Storage on your terms
Self-hosted means your files never leave your infrastructure. Pick local disk for simple deployments, or any S3-compatible object store (AWS S3, MinIO, Wasabi, Backblaze B2) for scale. Buckets stay private — downloads stream through the application so authorisation is always enforced.
What's included
- Auto-synced project / milestone / task folder hierarchy with unlimited depth
- Custom repositories and user-created folders alongside auto-synced tree
- Real-time collaborative editing — TipTap, OnlyOffice, and Collabora engines
- Multi-user live cursors, presence, and conflict-free editing via Yjs CRDT
- Document import (.docx, .md, .txt) and export (.docx, .md, .pdf)
- Semantic versioning (major.minor) with change notes
- Manual and auto-snapshot version capture
- Line-level diff between any two versions
- One-click version restore
- Multi-level sequential and parallel approval workflows
- Reusable workflow templates configurable per company
- Auto-approve scheduling for stalled workflows
- Email notifications for approval steps
- Typed document templates (FRS, SRS, CCN, Design Doc, Report, Policy, custom)
- 16 granular RBAC permissions across Documents, Versions, Folders, Approvals, Admin
- Per-document collaborator grants with short-lived JWT browser tokens
- Pluggable storage — local disk or any S3-compatible object store
- Supported file types: PDF, DOCX/DOC, XLSX/XLS, PPTX/PPT, TXT, ZIP, JPG, PNG
- Document compatibility analyzer for rich-text editor
- Bi-directional linking to project tasks, milestones, and risks
- Multi-tab workspace: Dashboard, Repository, All Files, My Files, Approvals, Activity Log, Settings
- Complete audit log exportable as CSV / JSON for ISO 27001, SOC 2, GDPR, HIPAA
- Multi-tenant company-scoped data isolation
Compatibility
Compatible with Orangescrum Self-Hosted Core, Business, and Enterprise editions running PHP 8.2+, CakePHP 4.6+, and PostgreSQL 13+. Storage backends: local filesystem and any S3-compatible object store. Optional Hocuspocus sidecar (Node.js) for real-time co-authoring. Multi-tenant aware — every record is company-scoped.
Installation
A self-hosted install takes a few minutes. Buy the add-on, drop the plugin into your plugins/ directory, run the migrations, and you're live.
- 1
Buy the add-on
Purchase the Document Management add-on from /self-hosted/pricing — $499/year per company, payable annually.
- 2
Receive your activation token
After purchase, you'll receive a license token via email along with the plugin package and the CollabDocs sidecar artifact.
- 3
Drop the plugin into your install
Copy the Dms/ and CollabDocs/ folders into plugins/ on your self-hosted Orangescrum server.
- 4
Enable the feature flag
Add `define('DMS_ENABLED', true);` to config/constants.php and register the plugins in src/Application.php.
- 5
Run the database migrations
Run `bin/cake migrations migrate --plugin Dms` and `bin/cake migrations migrate -p CollabDocs` to create the document, version, workflow, and editor tables.
- 6
Configure storage and editor engine
Choose local disk or an S3-compatible object store. Pick your collaborative editor engine (TipTap, OnlyOffice, or Collabora) per company.
- 7
Start the queue worker and Hocuspocus sidecar
Bring up `bin/cake queue worker` for auto-approve scheduling and the Hocuspocus sidecar for real-time co-authoring.
- 8
Seed default permissions and start uploading
Optional: run `bin/cake migrations seed --plugin Dms` to seed the 16-key permission matrix. Open the Documents tab and upload your first file.
Reviews
Replaced our SharePoint + email approval chain. Approvals that used to take a week now finish in a day, and audit prep is genuinely painless.
The version diff view alone is worth it. We caught two regressions in spec documents that would have shipped otherwise.
Solid plugin, the audit export is exactly what our SOC 2 auditor asked for. Would love richer redlining in the next release.
Frequently Asked Questions
Where are my documents stored?
▾
On your own infrastructure. Choose local disk or any S3-compatible object store (AWS S3, MinIO, Wasabi, Backblaze B2). Bucket policies stay private — downloads stream through the application so authorisation is always enforced. Nothing ever leaves your network.
How do project folders relate to custom folders?
▾
Every project automatically gets a root folder with auto-synced milestone and task subfolders so docs sit beside the work. You can also create custom repositories and freeform folders of unlimited depth — useful for contracts, policies, onboarding kits, or anything that doesn't belong to a single task.
What does real-time co-authoring look like?
▾
Open a document and you'll see other editors' live cursors, names, and presence in real time. Edits are merged conflict-free via Yjs CRDT. Pick TipTap for clean rich-text, OnlyOffice or Collabora for high-fidelity .docx / .xlsx / .pptx editing. Engine is configurable per company.
Can I customise the approval workflow per document type?
▾
Yes. Create reusable workflow templates and bind them to any combination of document type, project, or folder. Sequential, parallel, and hybrid flows are supported. Status auto-restarts when a new version is uploaded — so approval is always against the latest.
How granular are the permissions?
▾
16 keys across 5 groups: Documents (view, upload, edit, delete, download, move), Versions (upload, rollback), Folders (create, rename, delete), Approvals (submit, review), and Administration (settings, roles, audit). Permissions are stored per role × company and resolve at request time.
Which file types are supported?
▾
PDF, Microsoft Office (.docx, .doc, .xlsx, .xls, .pptx, .ppt), plain text, ZIP, and common image formats (.jpg, .png). Co-authoring works on Office files via OnlyOffice/Collabora and on rich-text via TipTap after an automatic compatibility check.
Does it integrate with the rest of Orangescrum?
▾
Yes. Documents link bi-directionally to tasks, milestones, and risks, so context never gets lost. Email notifications flow through your existing notification settings, and the audit log integrates with the company-wide activity feed.
Is it audit-ready for ISO 27001, SOC 2, GDPR, and HIPAA?
▾
Yes. The audit log captures every action with timestamp, user, and IP and exports cleanly as CSV or JSON. Workflow templates make SOP and control-evidence collection a click instead of a quarter-long fire drill. Multi-tenant company scoping is enforced at the data layer, not the UI.
Ready to deploy Document Management on your own infrastructure?
Talk to our team about Orangescrum Self-Hosted Enterprise — your data, your servers, full control.