--- title: "Document Management Plugin for Orangescrum Self-Hosted" description: "Versioned, approval-driven document management built into Orangescrum self-hosted. RBAC, audit log, workflow templates, and zero data leaving your servers." canonical: https://www.orangescrum.com/self-hosted/plugins/document-management --- # Document Management Plugin for Orangescrum Self-Hosted > For the complete documentation index, see [llms.txt](https://www.orangescrum.com/llms.txt). 1. [Home](/) 2. › 3. [Self-Hosted](/self-hosted) 4. › 5. [Plugins](/self-hosted/plugins) 6. › 7. Document Management # Document Management by [Orangescrum](/) · Productivity Self-HostedVerifiedEnterprise-ready Capture, organise, co-author, version, approve, search, and audit every document your project produces, from FRS and SRS to policies, CCNs, and design specs. Auto-synced project, milestone, and task folders sit alongside custom repositories and folders so docs always live where the work is. Includes built-in collaborative editing (TipTap, OnlyOffice, or Collabora). Installs Available Active deployments Support Vendor Supported Priority response Trust Self-Hosted Your infra, your data $499/year Per company • Add-on to any Self-Hosted plan [Buy & See All Plans](/self-hosted/pricing#addons)[Talk to Sales](/contact-sales) - Auto-synced project / milestone / task folders - Custom repositories + custom folder hierarchy - Real-time collaborative editing (TipTap, OnlyOffice, Collabora) - Multi-level sequential or parallel approvals - Semantic versioning with line-level diff & restore - Local disk or S3-compatible storage - 16 granular RBAC permission keys - Complete audit log for ISO / SOC 2 / GDPR Pairs with [Self-Hosted Core ($1,500/yr) or Business ($2,250/yr)](/self-hosted/pricing) [Overview](#overview)[Features](#features)[About](#about)[Install](#install)[FAQ](#faq) ## Screenshots Project repository with auto-synced milestone & task folders Real-time co-authoring with multi-user cursors Multi-level approval workflow with audit timeline ## Key Features ### Project Repository Every project gets a structured repository auto-synced with its milestones and tasks, files always sit beside the work they relate to. ### Custom Repositories & Folders Create freeform repositories and nested folders of unlimited depth alongside the auto-synced project tree, for policies, templates, contracts, anything. ### Real-Time Co-Authoring Edit the same document together with live cursors and presence, powered by TipTap, OnlyOffice, or Collabora. Switchable per company. ### Document Versioning Major.minor semantic versioning (v1.0, v1.1, v2.0) with change notes, line-level diff, manual snapshots, and one-click restore. ### Approval Workflows Multi-level sequential or parallel approvals with email notifications. Status flows draft → pending → approved/rejected with auto-restart on new versions. ### Reusable Workflow Templates Save approval chains as templates per company and bind them to document types, projects, or folders, set once, reuse forever. ### Document Types FRS, SRS, CCN, Design Document, Report, Policy, plus custom types, typed templates surface the right metadata fields up front. ### Granular RBAC 16 permission keys across Documents, Versions, Folders, Approvals, and Administration, give every role exactly the access they need. ### Audit Log Immutable activity feed of every upload, download, edit, approval, version, and folder action, exportable for ISO 27001, SOC 2, and GDPR audits. ### Pluggable Storage Files live on your local disk or any S3-compatible object store (AWS, MinIO, Wasabi, Backblaze), bucket policies stay private. ### Auto-Approve Queue-driven scheduling auto-approves stalled workflows after a configurable window, no babysitting, no missed deadlines. ### Import & Export Import existing .docx, Markdown, or plain text. Export any document back to .docx, Markdown, or PDF on demand. ### Per-Document Sharing Grant or revoke per-document collaborator access with short-lived JWT tokens for browser sessions, no permission spaghetti. ### Multi-Tab Workspace Dashboard, Repository, All Files, My Files, Approvals, Activity Log, and Settings, every workflow has a home. ### Compatibility Analyzer .docx files are scanned at import; the UI knows whether each document supports rich-text editing or needs the OnlyOffice/Collabora engine. ### Multi-Tenant Aware Every folder, document, version, workflow, and audit row is company-scoped by default, safe for multi-tenant deployments. ## About this plugin ### Why Document Management for Orangescrum? Most teams keep project docs scattered across Drive, Dropbox, SharePoint, email, and Slack. Versions go stale, approvals get missed, and audit prep becomes a quarter-long fire drill. Orangescrum's Document Management plugin puts every spec, policy, and change note inside the project itself, versioned, co-authored in real time, approved, and fully traceable. ### Project repository, the way it should work Every project gets a repository folder out of the box. Milestone and task folders are auto-created and kept in sync as the project evolves, so the FRS, SRS, design doc, and meeting notes always sit next to the milestone or task they belong to. Need a freeform space for contracts, policies, or onboarding material? Spin up custom repositories and nested folders alongside the auto-synced tree. ### Real-time co-authoring built in Open any compatible document and start editing together, live cursors, presence indicators, conflict-free edits via Yjs CRDT. Choose the rich-text engine (TipTap), or plug in OnlyOffice or Collabora for high-fidelity Office formats. Engine choice is per-company so different tenants can run different stacks on the same install. ### Approvals that finish Submit a draft and route it through any sequential or parallel chain you've defined. Approvers get email notifications, the audit log records every decision, and queue-driven auto-approval keeps stalled workflows from rotting. Workflow templates make compliance routines (ISO 9001 SOPs, SOC 2 control evidence) repeatable instead of artisanal. ### Built for compliance teams Every action, uploads, downloads, edits, approvals, version restores, folder renames, is captured with timestamp, user, and IP in an immutable audit log. Export it as CSV or JSON for ISO 27001, SOC 2, GDPR, or HIPAA evidence. Permissions inherit cleanly down the folder tree and resolve at request time, so your auditor sees exactly who could see what, when. ### Storage on your terms Self-hosted means your files never leave your infrastructure. Pick local disk for simple deployments, or any S3-compatible object store (AWS S3, MinIO, Wasabi, Backblaze B2) for scale. Buckets stay private, downloads stream through the application so authorisation is always enforced. ### What's included - Auto-synced project / milestone / task folder hierarchy with unlimited depth - Custom repositories and user-created folders alongside auto-synced tree - Real-time collaborative editing, TipTap, OnlyOffice, and Collabora engines - Multi-user live cursors, presence, and conflict-free editing via Yjs CRDT - Document import (.docx, .md, .txt) and export (.docx, .md, .pdf) - Semantic versioning (major.minor) with change notes - Manual and auto-snapshot version capture - Line-level diff between any two versions - One-click version restore - Multi-level sequential and parallel approval workflows - Reusable workflow templates configurable per company - Auto-approve scheduling for stalled workflows - Email notifications for approval steps - Typed document templates (FRS, SRS, CCN, Design Doc, Report, Policy, custom) - 16 granular RBAC permissions across Documents, Versions, Folders, Approvals, Admin - Per-document collaborator grants with short-lived JWT browser tokens - Pluggable storage, local disk or any S3-compatible object store - Supported file types: PDF, DOCX/DOC, XLSX/XLS, PPTX/PPT, TXT, ZIP, JPG, PNG - Document compatibility analyzer for rich-text editor - Bi-directional linking to project tasks, milestones, and risks - Multi-tab workspace: Dashboard, Repository, All Files, My Files, Approvals, Activity Log, Settings - Complete audit log exportable as CSV / JSON for ISO 27001, SOC 2, GDPR, HIPAA - Multi-tenant company-scoped data isolation ### Compatibility Compatible with Orangescrum Self-Hosted Core, Business, and Enterprise editions running PHP 8.2+, CakePHP 4.6+, and PostgreSQL 13+. Storage backends: local filesystem and any S3-compatible object store. Optional Hocuspocus sidecar (Node.js) for real-time co-authoring. Multi-tenant aware, every record is company-scoped. ## Installation A self-hosted install takes a few minutes. Buy the add-on, drop the plugin into your `plugins/` directory, run the migrations, and you're live. 1. 1 ### Buy the add-on Purchase the Document Management add-on from /self-hosted/pricing, $499/year per company, payable annually. 2. 2 ### Receive your activation token After purchase, you'll receive a license token via email along with the plugin package and the CollabDocs sidecar artifact. 3. 3 ### Drop the plugin into your install Copy the Dms/ and CollabDocs/ folders into plugins/ on your self-hosted Orangescrum server. 4. 4 ### Enable the feature flag Add \`define('DMS\_ENABLED', true);\` to config/constants.php and register the plugins in src/Application.php. 5. 5 ### Run the database migrations Run \`bin/cake migrations migrate --plugin Dms\` and \`bin/cake migrations migrate -p CollabDocs\` to create the document, version, workflow, and editor tables. 6. 6 ### Configure storage and editor engine Choose local disk or an S3-compatible object store. Pick your collaborative editor engine (TipTap, OnlyOffice, or Collabora) per company. 7. 7 ### Start the queue worker and Hocuspocus sidecar Bring up \`bin/cake queue worker\` for auto-approve scheduling and the Hocuspocus sidecar for real-time co-authoring. 8. 8 ### Seed default permissions and start uploading Optional: run \`bin/cake migrations seed --plugin Dms\` to seed the 16-key permission matrix. Open the Documents tab and upload your first file. ## Frequently Asked Questions ### Where are my documents stored? ▾ On your own infrastructure. Choose local disk or any S3-compatible object store (AWS S3, MinIO, Wasabi, Backblaze B2). Bucket policies stay private, downloads stream through the application so authorisation is always enforced. Nothing ever leaves your network. ### How do project folders relate to custom folders? ▾ Every project automatically gets a root folder with auto-synced milestone and task subfolders so docs sit beside the work. You can also create custom repositories and freeform folders of unlimited depth, useful for contracts, policies, onboarding kits, or anything that doesn't belong to a single task. ### What does real-time co-authoring look like? ▾ Open a document and you'll see other editors' live cursors, names, and presence in real time. Edits are merged conflict-free via Yjs CRDT. Pick TipTap for clean rich-text, OnlyOffice or Collabora for high-fidelity .docx / .xlsx / .pptx editing. Engine is configurable per company. ### Can I customise the approval workflow per document type? ▾ Yes. Create reusable workflow templates and bind them to any combination of document type, project, or folder. Sequential, parallel, and hybrid flows are supported. Status auto-restarts when a new version is uploaded, so approval is always against the latest. ### How granular are the permissions? ▾ 16 keys across 5 groups: Documents (view, upload, edit, delete, download, move), Versions (upload, rollback), Folders (create, rename, delete), Approvals (submit, review), and Administration (settings, roles, audit). Permissions are stored per role × company and resolve at request time. ### Which file types are supported? ▾ PDF, Microsoft Office (.docx, .doc, .xlsx, .xls, .pptx, .ppt), plain text, ZIP, and common image formats (.jpg, .png). Co-authoring works on Office files via OnlyOffice/Collabora and on rich-text via TipTap after an automatic compatibility check. ### Does it integrate with the rest of Orangescrum? ▾ Yes. Documents link bi-directionally to tasks, milestones, and risks, so context never gets lost. Email notifications flow through your existing notification settings, and the audit log integrates with the company-wide activity feed. ### Is it audit-ready for ISO 27001, SOC 2, GDPR, and HIPAA? ▾ Yes. The audit log captures every action with timestamp, user, and IP and exports cleanly as CSV or JSON. Workflow templates make SOP and control-evidence collection a click instead of a quarter-long fire drill. Multi-tenant company scoping is enforced at the data layer, not the UI.