License & Deployment Mix: 15 tools – 6 OSS, 5 SaaS. (OSS and SaaS counts can overlap when an open-source tool also offers a vendor-hosted edition.)

What Are Records Management Systems?

Records Management Systems (RMS) – also called Records Information Management (RIM) platforms or Records and Information Governance solutions – are software platforms that provide systematic control of business records throughout their entire lifecycle for regulatory compliance, legal discovery, and organizational governance. These systems manage the creation, classification, retention, disposition, and destruction of records according to policy-based rules, retention schedules, and legal requirements.

Records management emerged from physical file room practices in government and regulated industries. Paper-based file plans, retention schedules, and disposition instructions were codified into software starting in the 1980s–1990s, with the US Department of Defense’s DoD 5015.2 standard (first issued 1997) establishing baseline requirements for electronic records management. The ISO 15489 international standard (first published 2001, revised 2016) provides a broader framework applicable across industries and jurisdictions.

The records management landscape spans from dedicated RM platforms (OpenText Content Manager, Gimmal) to RM modules within broader ECM/content platforms (Alfresco Governance Services, Laserfiche, Microsoft Purview) to specialized digital preservation systems (Archivematica, AtoM) for archival institutions. Key differentiators include compliance certification (DoD 5015.2, NARA), retention schedule complexity, legal hold capabilities, auto-classification features, and eDiscovery integration.

The information on these pages was researched by a combination of human review and large language models. To suggest an addition or correction, please contact us. Prepared by Rhodium Systems Inc., author of the ResorsIT platform — a unified IT operations management platform for IT teams and MSPs that integrates a curated suite of open-source, commercial, and SaaS applications into a single system with shared identity, single sign-on, access control, and a common audit trail. Use this catalogue only as a starting point for your own research, and review any tool carefully against your own requirements before relying on it. Catalogue data version 2026.197.

Comparison

Organisations in government, financial services, healthcare, and legal sectors operate records management systems that integrate via SSO, API, monitoring, and infrastructure management.

Key distinction: records management systems handle records lifecycle governance – retention schedules, legal holds, disposition, and compliance auditing. For document creation and collaboration, see Document Management & ECM. For digital asset management, see Digital Asset Management. For backup and recovery, see Backup & Disaster Recovery.

SSO / OIDC (Authentik)

SSO applies to the records management interface (classification, disposition, legal hold management) and administrative functions (retention schedule configuration, audit review).

Proxy* = achievable via reverse proxy (mod_auth_openidc, mod_auth_mellon) Yes* = via bundled or external identity service Ltd = limited; SAML preferred for user login

Best Authentik fit: Nuxeo (native OIDC), Alfresco GS (Keycloak-based, replaceable with Authentik), OpenText CM (native OIDC/SAML), Microsoft Purview (Azure AD federation with Authentik)

No SSO path: Mayan EDMS – no SSO integration; Django authentication only.

Deployment Model

LGPL* = Community Edition LGPL; Enterprise proprietary Yes* = container deployment supported but complex Hosted = vendor-hosted option (not multi-tenant SaaS) Community = community Docker images (not official)

Self-hosted options: Alfresco GS (most mature OSS RM), OpenKM (simpler), Mayan EDMS (lightweight), Archivematica (digital preservation), AtoM (archival description).

Core RM Features

Full = comprehensive implementation Basic = limited functionality Manual = manual process only Labels = Microsoft retention/sensitivity labels AIP = Archival Information Package (OAIS) ISAD(G) = archival description standard Policy = policy management only (no content) Ltd = limited; basic or partner integration No* = preservation-focused; no destruction Enterprise = Enterprise edition only

Best full-featured RM: OpenText CM (industry leader), Laserfiche (government), IBM FileNet (enterprise), Hyland OnBase (healthcare)

Best OSS RM: Alfresco Governance Services (Enterprise edition for full RM; Community for basic)

Compliance Standards

Yes = certified or fully compliant Partial = partial compliance; not certified Partner = compliance achievable via partner/add-on OAIS = follows Open Archival Information System (ISO 14721) ICA = follows International Council on Archives standards

Best government compliance: OpenText CM (broadest certifications), Laserfiche (DoD 5015.2 + NARA), Gimmal (DoD 5015.2 + all major standards)

Best financial compliance: IBM FileNet, OpenText CM, Hyland OnBase (all SEC 17a-4 certified)

API Capabilities

Ltd = limited API surface Vendor = documentation available to customers only Self-hosted = rate limits depend on infrastructure M365 limits = subject to Microsoft Graph API throttling

Best API: IBM FileNet (REST + CMIS, extensive docs), Nuxeo (modern REST + CMIS), Alfresco GS (OpenAPI-documented REST + CMIS)

Monitoring Integration

All tools can be monitored via the monitoring stack (Telegraf + InfluxDB + Grafana + AlertManager).

API poll = Telegraf HTTP plugin polls SaaS API API dash = Grafana dashboard via API data source N/A = not applicable for SaaS platforms HTTP = HTTP response check for availability JMX = Java Management Extensions metrics

Best monitoring: IBM FileNet (JVM + DB metrics), Alfresco GS (Solr + PostgreSQL + container metrics), OpenKM (JMX + DB metrics)

SaaS monitoring: Purview, Gimmal, Collabware, RecordPoint, Iron Mountain require API polling for monitoring.

Pricing

Open Source / Self-Hosted

Commercial

$0* = basic records management included in Microsoft 365 E5 license $10/user/mo* = Microsoft 365 E5 Compliance add-on for E3 tenants

Cheapest RM: Alfresco GS Community (free, basic RM), Mayan EDMS (free, minimal RM), Microsoft Purview (included in M365 E5)

Enterprise tier: OpenText CM ($30K–$300K+/yr), IBM FileNet ($50K–$500K+/yr), Hyland OnBase ($25K–$250K+/yr)

Suitability Summary

Best for Customer Deployments (Self-Hosted)

• Alfresco Governance Services – primary recommendation for self-hosted RM; LGPL Community Edition provides basic RM; Enterprise adds full DoD 5015.2 compliance, legal holds, and auto- classification; Docker deployment; Keycloak/ Authentik SSO; PostgreSQL + Solr monitoring via monitoring; REST + CMIS API
• OpenKM – simpler alternative for basic records management; GPL; Docker deployment; LDAP auth via Authentik; JMX + database monitoring; limited RM features compared to Alfresco
• Nuxeo – strong alternative with native OIDC; modern REST API; Docker deployment; LGPL Community Edition; Enterprise via Hyland for advanced RM features

Good for Customer Integration (SaaS/Hosted)

• Microsoft Purview – dominant M365 records management; customers with M365 E5 already have it; Azure AD federation with Authentik; Graph API for integration; retention labels and disposition reviews
• Laserfiche – strong government sector presence; DoD 5015.2 certified; SAML SSO via Authentik; REST API for integration; common in county/municipal/state government
• OpenText Content Manager – enterprise leader in regulated industries; broadest compliance certifications; complex deployment but mature platform; OIDC/SAML SSO

Specialized / Limited Integration

• Archivematica – digital preservation (not records management per se); follows OAIS model; for archival institutions preserving digital materials long-term
• AtoM – archival description and access; follows ICA standards (ISAD(G), ISAAR); for archives and special collections, not enterprise RM
• IBM FileNet – enterprise ECM + RM; high cost and complexity; strong in financial services and large enterprise
• Hyland OnBase – enterprise content services; strong in healthcare and insurance; RM is one module of a larger platform
• Gimmal – records management middleware for M365/SharePoint; adds file plans and retention to existing Microsoft content
• Collabware – M365/SharePoint compliance lifecycle management; similar to Gimmal but focused on auto-classification
• RecordPoint – cloud information governance; connects to multiple content sources for unified records management
• Iron Mountain – retention policy management; does not manage content directly; manages retention schedules across repositories
• Mayan EDMS – lightweight EDMS with minimal RM features; not suitable for compliance-driven records management

Tools

15 tools.

Alfresco Governance Services

Alfresco Governance Services (AGS) is the records management module for Alfresco Content Services (ACS). It provides DoD 5015.2-certified electronic records management capabilities on top of Alfresco’s ECM platform.

License: LGPL-3.0-or-later (OSS) · Kind: web · Deploy: native, docker · SSO: OIDC

Website · Source

Archivematica

Archivematica is an open-source digital preservation system that processes digital objects through a micro-services pipeline to produce trustworthy, authentic, and standards-compliant Archival Information Packages (AIPs) for long-term stora…

License: AGPL-3.0-only (OSS) · Kind: web · Deploy: native, docker · SSO: none

Website · Source

AtoM (Access to Memory)

AtoM (Access to Memory) is an open-source web-based archival description and access system designed for archives, libraries, museums, and cultural heritage institutions.

License: AGPL-3.0-only (OSS) · Kind: web · Deploy: native, docker · SSO: none

Website · Source

Collabware CLM

Collabware CLM (Compliance Lifecycle Management) is a records management and information governance platform designed specifically for Microsoft 365 and SharePoint environments.

License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC

Website

Gimmal

Gimmal is a records management middleware platform that adds file plan management, retention schedules, legal holds, and disposition processing on top of existing content repositories – primarily Microsoft 365, SharePoint, file shares, and…

License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC

Website

Hyland OnBase

Hyland OnBase is an enterprise content services platform with integrated records management, workflow automation, and case management capabilities.

License: Proprietary (proprietary) · Kind: web · Deploy: native · SSO: OIDC

Website

IBM FileNet / IBM Content Manager

IBM FileNet Content Manager is an enterprise content management platform with integrated records management capabilities.

License: Proprietary (proprietary) · Kind: web · Deploy: native · SSO: OIDC

Website

Iron Mountain Policy Center

Iron Mountain Policy Center is a cloud-based retention policy management platform from Iron Mountain, the world’s largest records and information management company.

License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC

Website

Laserfiche

Laserfiche is an enterprise content management and business process automation platform with strong records management capabilities, particularly popular in US government agencies, education, legal, and financial services sectors.

License: Proprietary (proprietary) · Kind: web · Deploy: native · SSO: none

Website

Mayan EDMS

Mayan EDMS is an open-source electronic document management system built with Python and Django, using PostgreSQL as its primary database. It focuses on document storage, metadata management, OCR, full-text search, and workflow automation.

License: Apache-2.0 (OSS) · Kind: web · Deploy: native, docker · SSO: none

Website · Source

Microsoft Purview Records Management

Microsoft Purview Records Management (formerly Microsoft 365 Records Management, previously Microsoft Information Governance) provides records lifecycle management within the Microsoft 365 ecosystem.

License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC

Website

Nuxeo (Hyland)

Nuxeo is a modern enterprise content platform built on a cloud-native, API-first architecture with native support for records management, digital asset management, and content services.

License: Apache-2.0 (OSS) · Kind: web · Deploy: native, docker, k8s · SSO: OIDC

Website · Source

OpenKM

OpenKM is an open-source document management system with basic records-management features, offering document capture, metadata, workflow, full-text search, and retention; Community and Professional editions.

License: GPL-2.0-only (OSS) · Kind: web · Deploy: native, docker · SSO: none

Website · Source

OpenText Content Manager

OpenText Content Manager (formerly HP TRIM, then Micro Focus Content Manager) is the industry- leading enterprise records management platform, widely deployed in government, defense, financial services, and regulated industries worldwide.

License: Proprietary (proprietary) · Kind: web · Deploy: native · SSO: OIDC

Website

RecordPoint

RecordPoint is a cloud-native information governance and records management platform that connects to multiple content sources – Microsoft 365, SharePoint, file shares, Box, Dropbox, Salesforce, and other enterprise systems – to provide u…

License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC

Website