Skip to main content
Open source · Self-hosted · End-to-end encrypted

An open source all-in-one communications platform.
Data sovereignty. Privacy first.

RapidMX is a complete communications platform you run yourself: email, calendar, contacts, tasks, video meetings and booking pages, with end-to-end encryption built in. Everything your team relies on from Google Workspace or Microsoft 365, without handing your conversations to someone else's cloud.

  • No per-user license fees
  • Works with existing apps (via ActiveSync)
  • Get up and running in an hour
mail.example.com
The RapidMX inbox in a web browser
MPL-2.0OSI certified license
$0Per-user fees
S/MIMEEnd-to-end encryption
Any DomainHost from multiple domains
Why RapidMX

Communication is the heart of your organization. Own it.

Every contract, every customer conversation and every internal decision passes through email. RapidMX puts that back under your control without asking anyone to give up the tools they're used to.

Nobody else reads your mail

Your data lives on hardware you own, in the country you choose. There's no ad profile, no AI training on your inbox and no provider with a master key. Administrators manage the platform, not everyone's mail.

Stop paying rent per person

Cloud suites charge every user, every month, forever, and raise prices without notice. RapidMX is free open-source software. You pay for the server it runs on, whether that is ten people or ten thousand.

No lock-in, in or out

Bring your data with you by importing mbox and Outlook PST files, and take it with you any time as mbox or JSON. Your team keeps using the same apps they already know.

Features

One platform for how your team communicates

Mail, calendar, contacts and tasks are core built-in features. Video meetings, booking pages, CRM and more are shipped as plugins so that you only use what your team needs.

Privacy and security

Private by design, not by policy

A privacy policy is a promise. Encryption and self-hosting are guarantees. RapidMX is the first open-source communications platform with turn-key federated S/MIME encryption — including automated X.509 certificate issuance, key discovery and rotation — that works with standard mail clients.

End-to-end encryption, built in

S/MIME signing and encryption happen in the browser, and every person gets their own keys, kept in a vault only they can unlock. Make encryption automatic, optional or off for each kind of recipient.

Modern sign-in

Passkeys and security keys, authenticator apps, one-time codes and recovery codes. App passwords keep existing mail apps working, even when two-step sign-in is turned on.

Spam and malware, fail-closed

Every message is scored by rspamd and scanned by ClamAV. If a scanner is down, mail is held in quarantine or sent to Junk, never waved through to the inbox. Your users reports teach the filter.

Trusted delivery

DKIM signing and verification, SPF and DMARC with a live DNS checklist per domain, and mandatory TLS between mail servers.

eDiscovery, scoped to the matter

Open a matter to place its custodians under legal hold, then search and export their mail, contacts and calendars across the matter’s date range. Every search, export and download is audited.

Recovery with dual control

Organizations that must be able to recover encrypted mail can enable key escrow: every request needs M-of-N approvals and lands in a tamper-evident, hash-chained audit log.

Administration

Everything an IT team needs, in one console

A guided setup wizard takes you from a fresh install to your first working mailbox. After that, one admin console covers the whole organization. Add a domain and it works within seconds, with nothing to restart.

  • Host as many mail domains as you like, each with a live DNS checklist for MX, SPF, DKIM and DMARC
  • Mailboxes, aliases, nested distribution lists, shared mailboxes with delegation, and bookable rooms
  • Transport rules, retention policies, legal hold and eDiscovery search and export
  • Data-subject export and erasure requests for GDPR and similar laws
  • A quarantine queue and a complete audit log
  • Customize with your own logo, name, colours, header and footer
  • Plugins you search, install, upgrade and remove from the console
Tour the admin console
mail.example.com/admin
The DNS checklist for a new domain
Deploy anywhere

Get up and running in an hour

A rented virtual server, the rack in your office or your existing cluster: pick a path and you'll be signing in to your own mail server today. Choose between MongoDB or PostgreSQL, disk or S3 storage, Postfix or Amazon SES.

A single script installs a lightweight Kubernetes (k3s), HTTPS certificates from Let's Encrypt, Postfix and RapidMX on a Debian, Ubuntu or RHEL server.

curl -fsSLO https://raw.githubusercontent.com/rapidmx/server/main/single_node_install.sh
chmod +x single_node_install.sh
./single_node_install.sh --domain example.com --email [email protected]
Full instructions
Compare

How RapidMX stacks up

RapidMX focuses on communication: mail, scheduling and meetings. If that's what you rely on Google Workspace or Microsoft 365 for, here's what changes when switch to RapidMX.

RapidMXGoogle WorkspaceMicrosoft 365
Runs on servers you controlYesNoProvider cloud onlyNoProvider cloud only
Source code you can read and auditYesMPL-2.0NoNo
LicensingYesFree, any number of usersNoPer user, per monthNoPer user, per month
You choose where data is storedYesAny country, any hostPartlyData regions on some plansPartlyData residency on some plans
End-to-end encryption for every userYesS/MIME, built inPartlyClient-side encryption on top tiersPartlyS/MIME with your own PKI
Mail, calendar, contacts and tasksYesYesYes
Video meetingsYesvia PluginYesYes
Booking pagesYesvia PluginYesYes
Works with existing appsYesExchange ActiveSyncYesYes
Retention, legal hold and eDiscoveryYesIncludedPartlyHigher tiersPartlyHigher tiers
Extend with your own pluginsYesnpm packagesPartlyMarketplace add-onsPartlyAdd-ins
Documents, spreadsheets and file storageNoComing soonYesYes

Based on publicly available plan information as of 2026. Features and plans of other providers change; check with them for current details. Google Workspace and Microsoft 365 are trademarks of their respective owners.

Open source

Built in the open, made to be extended

RapidMX is written in TypeScript using the RapidREST framework, with a React-based web client and Tauri-based desktop/mobile app. The plugin system lets you expand the server's capabilities. Exchange ActiveSync, booking pages and video meetings are all plugins themselves.

PluginsAdd custom routes, models, background jobs, pages and settings, installed from the admin console
REST APIOpenAPI compatible. Everything the web app does, available to your own tools
Open protocolsS/MIME, ActiveSync, Autodiscover, ACME
MPL-2.0Use it, change it, and share improvements to the files you change
FAQ

Questions, answered

Is RapidMX really free?

Yes. RapidMX is open-source software under the Mozilla Public License 2.0, with no per-user fees and no paid tiers or subscriptions. Your costs are the server, storage and bandwidth you run it on.

What do I need to run it?

A domain name and a Linux server with a public IP address and about 8 GiB of memory is enough for the one-command installer. You'll need port 25 open for mail, which some hosting providers block by default. See Before you deploy.

Do I need to know Kubernetes?

No. The single-server installer sets up and manages a small single-node Kubernetes (k3s) cluster for you. If you already run a cluster, the Helm chart fits right in.

Can I move my existing mail over from Gmail or Outlook?

Yes. RapidMX imports mailboxes from mbox files (what Google Takeout exports) and Outlook PST files. See Import and export.

Will my team have to change apps?

For most people, no. The built-in mail apps on Android, iOS, and Windows connect through Exchange ActiveSync. Support for Outlook for Windows, over MAPI over HTTP, is still being finished. The built-in web app works in any modern browser. RapidMX does not support IMAP or POP3.

Can my administrator read my email?

Administrators manage the platform: domains, policies, plugins and branding. They don't see other people's mail in the app. Getting into someone else's mailbox takes a deliberate action that is recorded in the audit log, and encrypted messages stay unreadable without the owner's key unless your organization has set up key escrow, which itself requires multiple approvers.

What happens if I forget my encryption password?

When you set up encryption you're given recovery codes, Keep the codes somewhere safe: they're the way back in. See Encryption.

Does RapidMX replace Google Docs or OneDrive?

No. RapidMX focuses on communication: mail, calendar, contacts, tasks, meetings, booking and CRM. It pairs well with any self-hosted or cloud document and file service you prefer.

Is it ready for production?

RapidMX is in public beta on its way to 1.0. It runs real mail for real domains today, and releases ship frequently. As with any mail server, keep backups and read the upgrade notes before each update.

Take back your inbox.

Set up your own RapidMX server and send your first message today.