Skip to content

Status and roadmap

Osiris is in closed beta. There is no public release date yet. This page states plainly what exists today and what does not, instead of leaving it implied.

  • First-run setup wizard: operating mode, public URL, first administrator (passkey-first, emergency password with mandatory TOTP as fallback), notification mail transport (SMTP or Microsoft Graph sendMail) with a test send.
  • Sign-in with passkeys once the installation is verifiably reachable over HTTPS, an emergency email-and-password path with a mandatory authenticator app, and per-user account management (passkeys, authenticator, sessions). Signing in with a Microsoft 365 account directly is built but not yet enabled for end users.
  • Multi-tenancy with PostgreSQL Row Level Security isolating every tenant’s data.
  • Microsoft 365 sources via the Entra admin-consent flow, with an explicit permission check.
  • IMAP sources (password-authenticated; one login per source, applied to every mailbox under it). OAuth2 sign-in for IMAP sources is in development.
  • Backup for Exchange Online (mail, calendar, contacts), OneDrive, and IMAP mailboxes, deduplicated and encrypted.
  • Restore, non-destructive by default (recovered items are written alongside what is already there); the beta’s separate “Replace” mode for mail and OneDrive is being removed. Automated weekly restore verification (a sampled read-back, not yet a full test restore).
  • Configurable storage targets.
  • A tamper-evident audit log (hash chain with daily anchors): changes are detected, not prevented.
  • The integration REST API.

Backup and restore have been tested against simulated Microsoft Graph and IMAP servers; testing against a live Microsoft 365 tenant is ongoing, not yet complete.

  • Archiving: journaling capture, immutability, retention, legal hold, search and evidence reporting. See Archiving for the full design. Nothing here is available yet.
  • Self-service archive search: end users searching their own long-term mail history (for example, everything older than 365 days, 2 years, or 10 years) and restoring or downloading what they find. Depends on archiving above; see Usage.
  • Microsoft sign-in for end users: end users signing in directly with their Microsoft 365 account, without an Osiris passkey or password. See Get started as an end user.

These are deliberate scope decisions, not oversights: Microsoft Teams and SharePoint, Google Workspace, Public Folders, PST import, e-discovery case management, a mobile app, and backup of infrastructure outside Microsoft 365/IMAP (Linux servers and clients). Some of these are planned for after v1; none of them are silently “coming soon” without a stated plan.

Every edition — Community, Business and Service Provider — ships the same feature set; restore is never limited by edition. See the pricing section on osirisbackup.com for current details, and join the waiting list there if you want to be contacted when an edition is ready to buy. There is no self-registration or purchase flow on this documentation site or on the landing page today.