Email Archiving for Compliance and Security
Open Archiver Enterprise keeps a complete, tamper-proof record of your company's email on your own servers, built to meet GoBD and GDPR requirements.
30-day money-back guarantee. The first year of updates and support is included.
- Retention policies for GoBD storage periods
- Legal hold and eDiscovery search
- Tamper-proof audit log
- Real-time email journaling
- Single Sign-On (OIDC & SAML)
- AES-256 encryption at rest
Trusted by 2,000+ organizations worldwide
Retention policies
GoBD requires business email to be archived for six to ten years. The GDPR requires personal data to be deleted when there is nothing left to justify keeping it. Retention policies handle both: write the rule once and the archive applies it to every message, old and new. Deletion happens on schedule, and the log shows what was removed and under which rule.
- Policies by age, mailbox or label
- Retention labels with safeguards against accidental changes
- Automated labelling files incoming emails under the right rule
- Scheduled enforcement with a full deletion record
Immutable audit trail
Every login, search, export and settings change is written to an immutable, hash-chained audit log: each entry is linked to the previous one, so any alteration or removal is detectable. An integrity verification feature checks the log's hash chain and generates a report of the result.
- Hash-chained, append-only audit log
- One-click chain verification
- SHA-256 integrity checks on every stored file
- Integrity reports written for auditors
Legal hold and eDiscovery
When a dispute starts, the first job is making sure nothing disappears. Search for a person, a project or a date range, then place everything the search returns under hold in one action. Held emails stay put regardless of any retention policy, and the audit log records who set the hold and when.
- Hold single messages or entire search results
- Holds override every retention policy
- Timestamped and attributed in the audit log
- Export responsive emails as standard EML files
Real-time email journaling
Mailbox sync copies what is in the mailbox. Journaling records what actually went through the mail server: every message, unmodified, one copy per recipient — including emails somebody deletes seconds after reading them, and BCC recipients a mailbox copy would never show. It runs alongside Google Workspace, Microsoft 365 or any mail server that can journal.
- Real-time capture at the mail server
- Unmodified originals, admissible as records
- Per-recipient copies, BCC included
- Runs alongside your existing mailbox sync
Single Sign-On and access control
Connect Okta, Microsoft Entra ID, Keycloak or any OpenID Connect and SAML provider. Groups in your identity provider decide each person's role in the archive, and moving someone between groups changes their access at the next sign-in. Two-factor authentication can be required across the organization.
- Single Sign-On over OpenID Connect and SAML
- Roles mapped from identity provider groups
- Organization-wide two-factor policy with enforced enrollment
- Permissions down to a single mailbox
Migration and bulk import
Already on the open-source edition? Switch the Docker image, set your license key, and the archive, index, users and settings stay exactly where they are. Coming from another product? Import PST, EML and mbox files in bulk, then let continuous sync take over. Emails are stored as plain .eml files in an open format, so your data stays readable with or without us.
- Open-source users upgrade with one image swap
- Bulk import from PST, EML and mbox
- Continuous sync for Google Workspace, Microsoft 365 and IMAP
- Open .eml storage — your data stays portable
Read the code before you buy
The archiver is open source. Your security team can review on GitHub exactly what will be running next to your email.
Your servers, your keys
Everything runs on infrastructure you control, in the country you choose. That is the short answer to most GDPR questionnaires.
30 days, money back
If it does not fit, write us within 30 days of purchase and the payment comes back.
What it costs
Priced per archived mailbox, paid once. Larger seat counts get a lower per-seat rate.
Estimate your price
- Price per seat
- €65.00
- License
- €65.00
- Total
- €65.00
Estimate, excluding tax. One-time payment.
Compare the editions
Everything in the open-source edition is included in the Enterprise Edition. Enterprise adds compliance governance, legal preservation, real-time capture, encryption at rest and stronger authentication — the capabilities regulated organizations are asked to evidence.
| Feature | Open Source | Enterprise |
|---|---|---|
| Deployment | Self-hosted containers on your own infrastructure or cloud account. The deployment model is identical in both editions. | |
| Moving between editions | There is no need to reindex or re-import an existing archive: both editions share the same database schema, so switching between them is done by simply changing the Docker image. | |
| Connecting to email systems and capturing mail | ||
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Not included | Included | |
| Storage, data handling and portability | ||
| Local and network-attached storage | Included | Included |
| Included | Included | |
| Not included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Search, retrieval and review | ||
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Compliance, retention and legal preservation | ||
| Included | Included | |
| Not included | Included | |
| Not included | Included | |
| Not included | Included | |
| Not included | Included | |
| Not included | Included | |
| Not included | Included | |
| Not included | Included | |
| Not included | Included | |
| Not included | Included | |
| Not included | Included | |
| Email journaling | ||
| Not included | Included | |
| Not included | Included | |
| Not included | Included | |
| Not included | Included | |
| Not included | Included | |
| Security, authentication and access control | ||
| Included | Included | |
| Included | Included | |
| Not included | Included | |
| Included | Included | |
| Included | Included | |
| Not included | Included | |
| Not included | Included | |
| Not included | Included | |
| Not included | Included | |
| Not included | Included | |
| Administration and operations | ||
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
| Included | Included | |
Enterprise features are entitled individually by your license key, so a plan can include some and not others. Feature set described for Open Archiver 1.5.2.
How buying works
- 1
Pay once per seat
The license is perpetual. Buy it for the mailboxes you archive and run it for as long as you want.
- 2
A year of updates and support included
Extend the window at checkout or later. The software keeps working either way.
- 3
Your key arrives in minutes
The license key is issued and emailed the moment payment completes. Set one environment variable and restart.
- 4
Quotes and invoices for teams
For larger orders we prepare a formal quote and invoice, and VAT reverse charge applies with a valid tax ID. Contact us.
Questions companies ask
On your own infrastructure, exclusively. Open Archiver is self-hosted: emails, index and encryption keys stay on servers you control, in the country you choose. Nothing is sent to us — which is also the simplest possible answer to a GDPR data-residency question.
It is a one-time purchase. The license never expires. What does run out is the updates and support window — included for the first year and extendable — but the software keeps working either way.
Yes. Card and PayPal checkout works self-service, business buyers can enter a VAT ID at checkout for reverse-charge invoicing, and for larger seat counts we prepare a formal quote and invoice — Contact us.
Retention policies with enforcement, legal holds, a tamper-proof (hash-chained) audit log, integrity verification with reports, journaling that captures emails unmodified, and per-mailbox access control. The full comparison lists every capability.
Change the Docker image to logiclabshq/open-archiver:latest-enterprise and set OA_LICENSE_KEY to your key. Your archive, settings and users stay exactly where they are; downgrading is the same change in reverse.
Your license and every Enterprise feature keep working. You stop receiving new versions and technical support until you extend the window — extending later is always possible.
See it running before you spend anything
The public demo is a live Open Archiver instance with a real mailbox behind it. Run a search, open the audit log, click through the settings. When it fits, buying a license takes a few minutes.