Which fits: Teams or openDesk for a Teams replacement
Choose Microsoft Teams if your organization keeps its work inside Microsoft 365 and accepts Microsoft-hosted data, with the operational and contractual trade-offs that come with it. Choose openDesk if you must run the whole digital workplace in your own infrastructure, under your own operators and change control. A renewal or licensing change alone rarely settles the question, because the cheaper path depends on what you already run, who will operate it and how much of the workplace you need to replace. Since Microsoft introduced Microsoft 365 and Office 365 suites without Teams effective April 1, 2024, you may also find that Teams is a separate purchase you can drop while keeping the rest of the suite.
The decision turns on four questions. First, do you have Kubernetes skills in-house? openDesk requires a CNCF-certified cluster at v1.33 or later, an ingress controller, cert-manager, an RWO volume provisioner, Helm and Helmfile, and it is tested on kubespray clusters, not on OpenShift. Second, will you staff an operating team for upgrades, backups and incident response? openDesk plans major releases annually, minor releases monthly and patches on demand, and only the latest minor version is supported. Third, do you need production support with service levels? ZenDiS recommends the Enterprise Edition for production, so confirm whether your procurement rules require it. Fourth, do you need the full suite or only chat and meetings? If you only need chat and calls, the single-purpose stacks on the sibling pages are far smaller to run than openDesk.
Before you request a quote, write down the scope and ask your candidates to confirm it in writing: which openDesk components you will use, which external services you must provide for production (PostgreSQL, Redis, object storage, SMTP, a TURN server and others), and which Enterprise-only features your policies require. Ask DeployOpen or any other implementer to price each piece separately, so you can see the cost of the platform, the production services and the staff time, instead of one bundled figure. A pilot on a small evaluation cluster will show whether your team can operate the stack before you commit.
Which option fits which scenario
This table matches common buyer situations to the option that fits best, with the condition that decides it. Read each row against your own constraints, since the right answer usually turns on operations capacity and support needs rather than features alone.
| Scenario | Better fit | Driving condition |
|---|---|---|
| Sovereignty-driven public body with an operations team | openDesk Enterprise Edition | Needs a full bundled suite under its own control, plus SLA-backed support for production |
| Public body without Kubernetes operations staff | Managed or supported openDesk, or a narrower stack | Operating a CNCF-certified cluster and external production services is a standing commitment |
| Microsoft 365-centered enterprise keeping Office apps | Mattermost or Matrix with Element, alongside Microsoft 365 | openDesk replaces the whole workplace, which is more change than chat and calls alone require |
| Organization wanting only chat and calls | Mattermost, Rocket.Chat or Element with Element Call | Files and groupware in openDesk add components to run that the need does not use |
| Regulated firm needing vendor support and assurance | openDesk Enterprise Edition or a commercial Mattermost or Element tier | Requires contracted second and third level support and patches for production |
| Team evaluating before committing | openDesk evaluation deployment, then a smaller stack for pilots | Evaluation needs at least 12 x64 CPU cores, 32 GB RAM and over 10 GB disk per the requirements docs |
| Air-gapped or disconnected network | openDesk with a verified offline update process | Confirm how images, Helm charts and bundled components reach the disconnected environment |
| Organization needing mobile push and broad client apps | Confirm per platform before choosing openDesk | Verify client coverage and push delivery with the vendor and your own test devices |
Where data lives and who controls the platform
Teams data sits in Microsoft's cloud under Microsoft's operational model, while openDesk runs wherever you deploy it. The cards below cover where the data physically lives, who operates it, how identity is handled, and which licenses govern each component you would take on.
Teams data residency in Microsoft's cloud
Teams chat, files and meeting artifacts are stored in Microsoft 365 services operated by Microsoft. Your control over location and administration is set by your Microsoft agreements and tenant configuration, not by your own infrastructure. Before comparing, ask your Microsoft account team to confirm the data location commitments that apply to your tenant, the retention settings in use, and which support roles Microsoft staff hold for your data.
Operator choices for openDesk
openDesk is deployed with Helmfile and Helm onto a Kubernetes cluster you provide, so the operator can be your own team, a cloud account you control, a data center, or an air-gapped network. Each choice changes who patches the cluster, holds backups and keys, and answers for uptime. Decide the operator model first, because it sets the scope of any written engagement.
Deployment automation and component licenses
The openDesk deployment automation is Apache-2.0, but each bundled component keeps its own license. Nextcloud and Nubus are AGPL-3.0, OpenProject is GPL-3.0 and Collabora is MPL-2.0. Obligations such as source disclosure for modified AGPL code apply to what you change and host, so have legal counsel review your planned modifications and any closed-source add-ons before go-live.
Nubus identity and portal
Nubus provides the portal and identity and access management for openDesk, so user accounts, roles and sign-on are managed inside the suite rather than in Entra ID. Map which users and groups must exist in Nubus, who administers them, and how joiners and leavers are processed. This is the control point that replaces the Microsoft 365 directory for these users.
Federation with an external identity provider
openDesk documents federation with an external identity provider, so an existing corporate directory can remain the source of truth for sign-on. Confirm which protocol your identity provider supports, how group attributes map into openDesk roles, and who owns that integration after handover. Federation reduces duplicate accounts but moves part of the access model to a system outside openDesk.
Compliance readiness, not certification
openDesk ships security documentation and deployment controls that help you prepare evidence for an assessment. Neither ZenDiS nor DeployOpen issues an audit report or certification for your environment. Ask an independent auditor which controls they will test, and identify which evidence (access logs, backup records, patch history) you must produce from your own systems.
What openDesk needs to run in your environment
openDesk is not a single application you install on a server. It is a set of Helm and Helmfile deployments that need a CNCF-certified Kubernetes cluster at v1.33 or later before anything else is possible. The cluster also needs an ingress controller (haproxy-ingress, or the deprecated Ingress nginx), cert-manager, an RWO volume provisioner, Helm 3.17.3 or later below v4, and Helmfile 1.0.0 or later. The project tests on kubespray-built clusters and does not test on OpenShift, so an OpenShift estate needs its own validation plan. Confirm each of these versions against the openDesk requirements page before you size the platform team's work, because the minimums move with each release.
For an evaluation deployment, the documented minimum is 12 x64 CPU cores, 32 GB of RAM and more than 10 GB of disk. ARM hardware is not supported yet, so Arm-based nodes are out of scope for now. Treat these figures as a floor for a trial on a single test cluster, not as a production sizing. Ask the vendor or ZenDiS for the current production sizing per component, including how Chat (Element with Nordeck widgets), Nextcloud and OX App Suite scale, and whether your cluster can host them alongside other workloads.
For production, openDesk expects you to supply several stateful services yourself: PostgreSQL 15, MariaDB 10, Redis 7, Memcached, Cassandra, an SMTP relay, ClamAV reachable over ICAP, object storage and a TURN server for calls. Each of these is a service your operations team must patch, back up and monitor, and the TURN server is directly required for Element and Jitsi calls to work through firewalls. Decide early whether these run as managed services in your own data center or as in-cluster deployments, because that choice drives your recurring operating cost and your backup scope. Confirm the exact versions and any new services on the current requirements page, since production expectations change between releases.
How chat and meetings differ inside openDesk
openDesk bundles Element for chat, extended with Nordeck widgets for chat and Notes. Chat in this stack runs on a Matrix homeserver, and the most widely documented one is Synapse, which is developed by Element and distributed under AGPL-3.0. Chat history, rooms and user identities live in the homeserver, so the server_name setting, which fixes how users and rooms are identified, must be decided before any user is created. Synapse also federates on port 8448 by default, and federation can be restricted with the federation_domain_whitelist setting, where an empty list disables federation.
- Authentication: Synapse supports single sign-on through OpenID Connect providers configured under oidc_providers, SAML2 through saml2_config using pysaml2, and CAS.
- Database: Synapse recommends PostgreSQL for production, with SQLite also supported. Versions 1.143.0 and later require PostgreSQL 14 or newer.
- Scaling: Synapse scales with worker processes that connect to Redis, which relays replication between the main process and workers.
- Upgrades: The upgrade notes warn that rolling back can be difficult because database schema changes occur between releases.
- Federation exposure: Firewall the federation listener if federation is not required.
Confirm with the openDesk team which Element and Synapse versions the chosen release bundles, and how the SSO connection to Nubus is configured.
Video in openDesk comes from Jitsi, which is licensed under Apache 2.0. A Jitsi Meet deployment has four core parts: a web server serving the app, the Prosody XMPP server, Jicofo (the conference focus) and one or more Jitsi Videobridge (JVB) media routers. The JVB media path is what makes the network plan demanding, since media flows over 10000/UDP, with 5349/TCP as TCP fallback and 3478/UDP for STUN optional. Ports 80/TCP and 443/TCP must also be open.
- HTTPS: The Jitsi handbook says HTTPS with a proper domain certificate is necessary for working audio and video, and self-signed certificates cause problems, especially on mobile clients.
- Authentication: Options include internal XMPP accounts, JWT tokens, LDAP, Matrix user verification and a hybrid Matrix plus JWT mode, configured in the .env file in Docker setups. The handbook marks the older secure domain method as deprecated for new installations and recommends JWT tokens, with a separate anonymous domain for guests.
- Scaling: Videobridges scale horizontally by adding more, and the default install is already configured for horizontal scaling.
- Containers: The Docker setup separates web, prosody, jicofo, jvb, jigasi and jibri, and runs rootless with read-only filesystems since stable-11146.
Confirm with ZenDiS how the openDesk Jitsi chart exposes these ports on Kubernetes and how the certificate is issued.
Chat and meetings are separate services with separate identity and network paths. A Matrix room does not carry a call by itself, so the link between the two is a design decision made during deployment. Users see a single workplace, but operators maintain two sets of certificates, ingress rules and authentication settings. Decide which identity provider is authoritative for both services so that a user removed from the directory loses access to chat and meetings at the same time.
- Identity: Both services can take authentication from the same provider, but the settings are configured in different files and must be kept consistent.
- Certificates: Jitsi needs a valid domain certificate, and Synapse federation depends on correct delegation, so certificate ownership must be assigned.
- Ingress: openDesk requires an ingress controller such as haproxy-ingress, so Jitsi UDP ports need a path that the controller and cluster network permit.
- Access review: Map which group can join meetings, create rooms and reach federated servers.
- Test: Run a call across two browsers and a mobile client before user onboarding.
Ask ZenDiS and your integrator to document the chat and meeting ingress paths in the target network.
What the cost of openDesk is made of
What do we still pay for Microsoft Teams if we move to openDesk?
Teams licensing is a recurring per-user subscription, so it continues until the licenses are removed from your contracts. Whether you keep Microsoft 365 suites with Teams, buy standalone Teams, or drop Teams entirely depends on your current agreement, and the April 2024 change in what Microsoft sells makes the terms worth re-reading. No prices are published here, so ask your Microsoft reseller or licensing contact for your own contract figures, notice periods and any true-down rules. Your saving from openDesk is the difference between those per-user costs and the recurring costs of running the stack, not the license line alone.
What does the Kubernetes infrastructure for openDesk cost to run?
The Kubernetes cluster is the largest recurring infrastructure line, and it is paid for through your data center or cloud account. openDesk requires a CNCF-certified cluster at v1.33 or later, an ingress controller, cert-manager and an RWO volume provisioner. The minimum for an evaluation deployment is 12 x64 CPU cores, 32 GB of RAM and more than 10 GB of disk, but production sizing depends on the components you enable and the number of users. Ask your infrastructure team to size nodes, storage and backup targets against the openDesk requirements for your expected concurrency.
Which external production services add cost to an openDesk deployment?
For production, openDesk expects services that run outside the cluster in the same production grade: PostgreSQL 15, MariaDB 10, Redis 7, Memcached, Cassandra, an SMTP relay, ClamAV over ICAP, object storage and a TURN server. Each one is either an existing service you already operate, a managed offering, or a new component you must license, host, back up and patch. Many organizations find that they already run some of these, so the one-time and recurring cost depends largely on what is missing. Confirm the list and versions against the requirements documentation before you request a quote.
Who pays for the staff time to deploy, upgrade and monitor openDesk?
Your own platform team, an implementation partner, or a mix of both pays for this effort, and it is the cost most often underestimated. Initial deployment, integration with your identity provider, migration of chat and files, and hardening are one-time work. Upgrades, monitoring, backup testing and on-call response recur. openDesk plans annual major releases, monthly minor releases and on-demand patches, and only the latest minor version is supported, so the upgrade cadence sets the recurring effort. DeployOpen plans, implements, integrates, hardens, backs up, upgrades and supports self-hosted platforms in the client's own infrastructure, and most engagements are fixed-scope with scope and timelines agreed in writing before work starts. Ongoing support and upgrades are available as retainers.
Is openDesk Enterprise Edition worth its cost for production?
ZenDiS recommends openDesk Enterprise Edition for production. It uses the same open-source core licenses but adds closed-source modules, an Enterprise-only registry and license file, and SLA-backed second and third level support and patches. It is sold as SaaS or for on-premises installation, so the fee depends on the delivery model and the quote you receive from ZenDiS. Enterprise-only features include Nextcloud Enterprise security patches, Element AdminBot and GroupSync, and OX advanced full-text search. Ask whether your compliance and support requirements can be met without these features before you decide.
What drives the recurring cost of openDesk up or down?
Four factors move the recurring cost most:
- User count, which drives compute, storage and support load.
- Availability needs, which determine how many nodes, replicas and backup targets you run.
- Number of components enabled, since each bundled application adds its own database, storage and patching work.
- Release cadence, because staying on the latest minor version keeps upgrades small, while falling behind may require intermediate steps.
Ask your vendor or partner to model these four factors separately in any quote, so you can see which decisions change the total.
What one-time costs should we budget before openDesk goes live?
One-time costs are the work that happens before users move over. They include the initial cluster build, provisioning the external production services, configuring single sign-on with your identity provider, integrating mail and directory services, migrating chat history and files, and running security testing before launch. Migration of Teams content requires admin-approved Microsoft Graph permissions and active Teams licenses on the exported users, which should be arranged early. Because these are project costs, ask any partner for a written scope with deliverables and timelines, and ask your own team which of these tasks it can carry out internally.
What should we ask for in an openDesk cost quote?
Request a quote that separates one-time and recurring items, so the comparison with Teams is like for like. Ask for the following:
- Infrastructure sizing for your user count and availability target, with the cluster and external services listed separately.
- Staff or partner effort for deployment, integration, migration, upgrades and monitoring, with the assumed release cadence.
- Whether Enterprise Edition is included, and what support level and patch scope apply.
- The Teams license reduction schedule from your Microsoft contract, to show when savings start.
Fixed-scope engagements agreed in writing make these assumptions easier to check.
How a move from Teams to openDesk is typically sequenced
The sequence turns a bundled Microsoft 365 chat and meetings setup into a tested openDesk stack, with a verified plan for what history moves and who runs the platform afterward.
Confirm scope and requirements
Start by listing which Teams features are in scope: chat, channels, meetings, recordings and the Files tab. Check them against the openDesk requirements: a CNCF-certified Kubernetes cluster at v1.33 or later, an ingress controller, cert-manager, an RWO volume provisioner, Helm 3.17.3 or later below v4 and Helmfile 1.0.0 or later. Confirm that your platform is one openDesk is tested on, since the project tests kubespray clusters and not OpenShift. Ask ZenDiS or your DeployOpen scope whether the production services (PostgreSQL 15, MariaDB 10, Redis 7, Memcached, Cassandra, SMTP relay, ClamAV over ICAP, object storage and TURN) are already available. The step is done when you have a signed scope document and a list of open requirement gaps.
Decide Community or Enterprise Edition
Decide whether the production deployment uses the open-source core or openDesk Enterprise Edition. ZenDiS recommends Enterprise Edition for production, which adds SLA-backed second and third level support and patches, and includes features such as Element AdminBot, GroupSync, the Nextcloud Guard app and OX S3 storage. Ask for a written list of which of these you need, and whether the support terms cover each bundled component. The step is done when the edition choice and its support boundaries are recorded in the scope document.
Build the cluster and external services
The platform team, with DeployOpen if engaged, builds the Kubernetes cluster and the external services in your own cloud account, data center or air-gapped network. Deploy with the Helmfile and Helm automation, configure the ingress, certificates and storage, and connect the data services. Keep the component licenses in view: Nextcloud and Nubus are AGPL-3.0, OpenProject is GPL-3.0 and Collabora is MPL-2.0. The step is done when the core openDesk components pass a health check in a staging environment and the backup and restore path has been tested once.
Run a pilot with identity federation
Connect openDesk's identity layer to your existing identity provider using the federation approach described in the openDesk documentation, and confirm which Entra ID or on-premises accounts map to which roles. Invite a small pilot group that uses chat in Element, meetings in Jitsi and files in Nextcloud. Record what breaks, such as login flows, notifications, mobile clients or certificate issues. The step is done when the pilot group has completed a set of agreed chat, call and file tasks and the open issues are logged with owners.
Plan data extraction from Teams
Begin the history plan early because openDesk has no Teams importer. Work with the Microsoft 365 administrator to confirm that the Microsoft Graph Teams Export APIs can be used, which requires admin-approved application permissions and an active Teams license on each exported user. Confirm which record types the export covers for 1:1, group, meeting and channel messages, and recording and transcript links, and which content is no longer retrievable because of Teams retention. Ask the DeployOpen team or your conversion partner for a written statement of what history can be loaded into Element and in what format. The step is done when the legal and data owners have approved the export list and the import format is agreed.
Map teams and channels to Element rooms and spaces
Translate the Teams structure into Element spaces and rooms. Team sites usually become spaces, channels become rooms, and meeting links are reissued through Jitsi or Element Call. Agree naming, membership, visibility and retention rules for each room and document which Teams apps and bots must be replaced. Confirm that the single sign-on setup in Synapse covers the identity provider you use. The step is done when the mapping workbook is signed off by the owners of each Teams team.
Cut over and retire Teams chat
Set a cutover window with the business owners, load the agreed history, switch users to the new clients and point links and bookmarks to the new rooms. Keep Teams read-only for the agreed period so people can still find older content. Confirm that the exported history matches the source for a sample of rooms. The step is done when all pilot-approved teams are live on openDesk, users have signed in, and the rollback plan has been tested against the cutover runbook.
Hand over operations
Transfer operating responsibility to your platform, security and service desk teams. Agree the upgrade approach: openDesk plans major releases annually in Q3, minor releases monthly and patch releases on demand, supports only the latest minor version, and does not guarantee in-place upgrades between majors. Document backup, restore, monitoring and the support route for each bundled component. If a retainer for upgrades and continuous support is needed, get a written scope. The step is done when runbooks are accepted by the operations team and a first upgrade plan is in the calendar.
Questions buyers ask before choosing openDesk
How much effort does replacing Microsoft Teams with openDesk take?
The effort depends mostly on how much of the Teams estate you replace at once, not on the chat feature set alone. openDesk is a full workplace suite, so replacing Teams chat and meetings also means deciding what happens to Teams files, SharePoint-style sites, calendars and identity. The openDesk requirements expect a CNCF-certified Kubernetes cluster at v1.33 or later, an ingress controller, cert-manager, an RWO volume provisioner, Helm and Helmfile, plus external production-grade services such as PostgreSQL 15, MariaDB 10, Redis 7, an SMTP relay, ClamAV over ICAP, object storage and a TURN server. Each of these is a component your team or a partner must build, run and patch. Ask for a written inventory of components, integration points and user groups before estimating effort.
Can our internal team deploy openDesk without a partner?
A team with strong Kubernetes, identity and database skills can attempt the evaluation deployment on its own, but production readiness is a different matter. The requirements describe a 12-core, 32 GB evaluation footprint, and ZenDiS recommends the openDesk Enterprise Edition for production. That edition adds SLA-backed second and third level support and patches, along with Enterprise-only modules such as the Nextcloud Guard app and Element AdminBot. Whether you buy that support directly or through a partner, check who patches the bundled components, since each keeps its own license and release cycle. Review your skills against the component list before deciding what to do in-house.
How long does an openDesk migration from Teams take?
The duration depends on user count, the number of Teams teams and channels, how much history you need to carry over, identity integration and how many Teams features you rebuild. No researched duration applies to this migration, so do not plan against a generic figure. Request a written scope that lists the workloads, the cutover approach, the integrations to rebuild and the acceptance tests for each. Fixed-scope engagements are agreed in writing before work starts, which lets you compare timelines against a defined deliverable list rather than an estimate.
Does openDesk import Microsoft Teams chat history?
No supplied source describes a native importer from Microsoft Teams into openDesk, so do not assume one exists. History would have to be extracted with the Microsoft Graph Teams Export APIs, which return 1:1, group, meeting and channel messages and require admin-approved application permissions and an active Teams license on each exported user. Then it must be mapped into the chat component bundled in openDesk, which is Element with Nordeck widgets. Confirm the target format, the mapping of teams and channels, and whether file attachments and meeting recordings are in scope with ZenDiS and with your implementation partner before you commit to a history migration.
What do openDesk upgrades require given the release cadence?
Expect a recurring operational task rather than an occasional project. The openDesk release process plans major releases annually in Q3, minor releases monthly and patch releases on demand, and only the latest minor version is supported. In-place upgrades between majors are not guaranteed, and skipping several minor versions may require intermediate steps. The latest release at research time was v1.19.1, published on 2026-10-06. Budget for a staging environment, regression testing of the bundled components, and a rehearsed rollback path. Ask any provider how it will handle major upgrades, which are the most likely to need a planned migration window.
Which parts of openDesk need the Enterprise Edition?
The open-source core is free to deploy, but several capabilities in the production path are Enterprise-only. Per the Enterprise Edition documentation, these include Collabora branding and automatic load scaling, Element AdminBot, GroupSync and the Admin Console, Nextcloud Enterprise security patches and the Guard app, OX S3 storage and advanced full-text search, OpenProject Enterprise add-ons and XWiki Pro apps. The Enterprise Edition also adds closed-source modules and an Enterprise-only license file. Ask for a line-by-line list of which features your requirements depend on, and price the subscription against that list, including its SaaS or on-premises options.
What operational skills must we keep in-house after go-live?
Keep ownership of the Kubernetes platform, the external data services, identity and certificates. openDesk ties together many components, so routine work includes monitoring each service, rotating secrets and certificates, backing up stateful data, and watching for security advisories in each component's upstream project. The documentation also points to federation with an external identity provider, which needs its own review. Name a person or team for each of these areas before go-live, and agree in writing who handles incidents across the bundled services.
How DeployOpen helps teams evaluate and run openDesk
DeployOpen plans, implements, integrates, hardens, backs up, upgrades and documents self-hosted platforms inside the client's own cloud accounts, data centers or air-gapped networks. For openDesk, that work starts before any installation: the team needs a written scope that settles whether the evaluation deployment described in the requirements is enough, or whether production needs the external services, Kubernetes platform and ingress, cert-manager and storage that openDesk expects. Most engagements are fixed-scope, so scope, deliverables and timelines are agreed in writing before work begins, and a quote follows from that written scope rather than from a list price. Ongoing support, upgrades and continuous testing are available as retainers, which matters because openDesk releases move monthly and only the latest minor version is supported.
Because openDesk bundles many components, a decision about its Enterprise Edition belongs in the scope document, not in a later procurement step. Ask whether SLA-backed support and patches, and the Enterprise-only modules named in the Enterprise Edition documentation, are required for the organization's production obligations, and confirm the licensing and support terms directly with ZenDiS and the openDesk maintainers. Integration work usually covers identity federation with an existing identity provider, the chat, calls and files integrations, and the migration path from Teams. DeployOpen can also run security testing on the finished deployment, covering applications, APIs, infrastructure and the AI features that may be enabled, and can prepare systems, controls and evidence for a compliance assessment. DeployOpen does not issue audit reports, attestations or certifications; independent auditors and certification bodies do that work, and the scope should name them as the party responsible for that outcome.
How DeployOpen works with teams on this switch
DeployOpen plans, implements, integrates, hardens, backs up and documents self-hosted open-source platforms inside your own infrastructure, including openDesk where it fits your requirements. Engagements are fixed-scope, with scope, deliverables and timelines agreed in writing before work starts.
How we scope
- We confirm which Teams chat, meeting and file workloads move, and which stay in Microsoft 365.
- We check your Kubernetes version, ingress, storage and external service options against openDesk requirements.
- The written scope fixes deliverables, timelines and the Enterprise Edition decision before any build work starts.
How we build
- We deploy openDesk with Helmfile and Helm into your own cluster, in your cloud account or data center.
- We configure identity federation, SMTP, ClamAV, object storage and TURN to match your existing services.
- We test chat, meetings, file sharing and access controls, and record the results as part of the deliverables.
How we hand over
- You receive configuration documentation, runbooks and the evidence your compliance team needs for assessments.
- We walk your platform and security staff through upgrades, backups and the monthly minor release cycle.
- We prepare systems and evidence for compliance assessments, but independent auditors issue any audit report or certification.
How we support
- Ongoing support, upgrades and continuous security testing are available as retainers after handover.
- Retainers cover upgrade planning across annual major releases and monthly minor releases, which you confirm in your scope.
- Ask for a written quote that follows from the agreed scope, including which support tier matches your production needs.

