Everything a controlled document needs.

Projects, folders, upload, versions, metadata, viewer.

Always on.

Per-class custom fields with validation, pick-lists and cascading values.

Drag in hundreds of files; map metadata from a spreadsheet; AI fills the rest.

Lock a document while editing offline; others see who has it.

Reference, supersede and attach documents; build compound (virtual) documents.

Side-by-side redline of text and visual overlay of drawings between versions.

Dynamic user/date watermarks on download and status stamps on issued PDFs.

Schedule mandatory re-reviews of controlled documents.

Print numbered controlled copies ("Controlled copy 2 of 3 — issued to …") with a print register; copies are recalled automatically when a new revision is released.

Page-1 thumbnails of PDFs, drawings and images in document lists and search results, with a grid view.

Per-project inbound e-mail addresses and watched folders / S3 prefixes turn e-mails, attachments and dropped files into documents or vendor submissions, with a sender allow-list and data-loss checks.

Requires Bulk upload & import.

Split a scanned batch PDF into separate documents at barcode / patch-code sheets or blank pages; the barcode value can become the document number.

Requires Bulk upload & import.

Download for edit with automatic check-out and one-click check-in.

Requires Check-out / check-in.

Performer → Reviewer → Approver routing with optional extra stages.

Mandatory checklists at each stage before a task can be completed.

Requires Approval workflows.

Several reviewers work at the same time; stage completes when all respond.

Requires Approval workflows.

Visual editor for workflow templates, stages, roles and SLAs.

Requires Approval workflows.

Stage SLAs, reminder emails and automatic escalation to the HOD.

Requires Approval workflows.

Route tasks to a delegate while you are away.

Requires Approval workflows.

21 CFR Part 11 / EU Annex 11 style signatures with re-authentication and signature manifest.

Requires Approval workflows.

Invite other departments to contribute files or text before approval.

Merge the document, inputs and supporting files into one bookmarked PDF.

Highlight, draw, stamp and comment directly on pages in the browser.

Track every comment to closure with responses; export a CRS.

Requires Mark-up & annotations.

Threaded comments with mentions and notifications.

Expiring, password-protected, watermarked links with download limits.

Formally issue approved documents; access widens to recipients automatically.

Requires Approval workflows.

Numbered outgoing and incoming transmittals with purpose codes, cover sheets, acknowledgements and review-code responses; document controllers register vendor submissions against the register.

Requires Issue to departments.

Ask recipients for formal comments when issuing.

Requires Issue to departments.

Recipients must acknowledge issued documents (training / SOP compliance).

Requires Issue to departments.

Encrypt issued PDFs with an open password (sent separately) and restrict printing, copying and editing. Needs the server PDF encryption tool (qpdf).

Requires Issue to departments.

Administrators can recall an issued document with a reason; recipients are notified.

Requires Issue to departments.

Revision requests authorised by designated departments; automatic revision numbering.

Approvers set an “effective from” date; the new revision replaces the old one automatically on that day while readers keep the previous revision until then.

Requires Approval workflows.

Plan deliverables, forecast dates and track progress with S-curves.

Vendors and contractors submit documents through a restricted portal: AI reads title blocks, files each one against the VDR, starts the review and returns review codes.

Requires Transmittals.

Code 1–4 / A–D responses on returned documents feed the register.

Requires Transmittals.

View DXF drawings in the browser with pan, zoom, layer on/off and measure; IFC (BIM) models in 3D with element properties; SVG and large images with zoom.

Numbered RFIs, technical queries, site instructions and letters with from/to parties, due dates, reply-required tracking, responses with attachments and linked documents.

Search inside every file including scanned pages (OCR).

Always on.

Save searches and get notified when new documents match.

In-app assistant that explains screens and guides users step by step.

One-paragraph summary and key points for every document.

Suggests class, title, number, revision and metadata from file content on upload.

Ask questions about a document; answers cite page and passage.

Ask questions across every document you can access, with citations.

Requires Semantic search.

Find documents by meaning, not just keywords; hybrid ranking.

Explains what changed between revisions in plain language.

Requires Version compare.

Checks the document against the stage checklist and drafts review comments.

Groups duplicate comments and drafts responses for the comment resolution sheet.

Requires Comment resolution sheets.

Prioritised summary of your tasks, deadlines and what changed.

Extracts text from scanned PDFs and images so they become searchable.

Transcribes recordings with timestamps so meetings and site videos are searchable, and captions photos and drawings with a vision model (within your AI policy).

Translate documents and summaries between languages.

Detects personal and commercially sensitive content and suggests a classification.

Requires Data loss prevention.

Describe a report in plain words — Kosha builds it.

Requires Report builder.

Predicts delays, suggests assignees by workload and flags bottlenecks.

Finds related and duplicate documents automatically.

Use AI steps (extract, classify, summarise, check) inside automation rules.

Requires Automation rules.

Run AI on models hosted inside your own network (Ollama, vLLM or any OpenAI-compatible server), so nothing leaves your premises. Included in Sovereign; a licence add-on for other editions.

Automatic retention by document class with review/archive/delete disposition.

Freeze documents for litigation or investigation; overrides retention.

Declare final records — immutable, non-deletable.

Produce a PDF/A-2b archival copy when a document is declared a record (needs the LibreOffice or Gotenberg converter).

Requires Records declaration.

Hierarchical classification scheme (business classification / file plan) with a retention schedule per node; document classes map to nodes and documents inherit the node’s schedule. Records-by-node report.

Requires Retention schedules.

Declared records and documents on legal hold are locked in storage (S3 Object Lock retention / legal hold, read-only files on local disk) so not even an administrator can overwrite or delete them early.

E-mail auditors a weekly or monthly pack: the audit trail for the period as CSV plus the result of a full integrity check of the hash chain.

Every event is hash-chained; verify integrity on demand.

Always on.

Public / Internal / Confidential / Restricted with user clearance levels.

TOTP authenticator apps; can be mandatory for everyone.

Entra ID, Google, Okta, Keycloak or any OpenID Connect provider, and SAML 2.0 identity providers (ADFS, PingFederate, Shibboleth) directly.

Detect PAN, Aadhaar, card numbers and custom patterns on upload; flag, classify or block.

Turn redaction marks into a redacted copy where the hidden text is really removed; suggests redactions from sensitive-data findings. Share and issue the redacted copy instead of the original.

Requires Mark-up & annotations.

Deny rules between groups, departments, companies and projects or matters: people on one side can never see the other side’s documents, whatever lifecycle, sharing or issue rules would grant.

Restrict sign-in to corporate networks.

Throughput, overdue tasks, turnaround time, register progress.

Build, save, share and schedule custom reports with charts and CSV export.

Requires Standard reports & dashboards.

Full OpenAPI-documented REST API for every action in the product.

CMIS Browser Binding endpoint so CMIS clients and legacy integrations can browse projects, read documents and run CMIS-QL queries — always access-checked.

Requires REST API & API keys.

Stream the audit trail to Splunk, Sentinel, QRadar, Elastic or any SIEM: syslog (RFC 5424 over TCP/TLS), Splunk HEC or HTTPS JSON, with a delivery cursor and retries.

Signed event notifications to ERP, PLM, BIM, Teams or Slack.

When-this-then-that rules: route, tag, notify, classify — no code.