Open Source Notices and Source Code
GoOfficePH is a proprietary Kloud Solutions product. We design and own its customer experience, business rules, tenant controls, connected workflows, reporting, credit logic, and operational services. Like many enterprise software products, GoOfficePH also incorporates eligible open-source components under their respective licenses. This page records those license obligations and source-availability commitments.
Current review
Last reviewed: August 13, 2026.
The current website and native groupware apps use GoOfficePH-owned API facades for business workflows. Production routes use /api/portal, /api/mail, /api/chat, /api/v1/files, /api/v1/office, and /api/v1/mail. Beta routes use /api/beta/groupware, /api/beta/files, /api/beta/office, /api/beta/mail, and /api/beta/chat.
GoOfficePH applications use authenticated product interfaces. Internal service endpoints are restricted and are not part of the customer integration surface.
Machine-readable declaration
The Portal API publishes a matching machine-readable declaration for auditors and deployment reviewers.
View the machine-readable source and interface declaration.
Release fingerprint
Each deployment publishes a non-secret release fingerprint. Auditors can use it to match a running GoOfficePH by KloudPH deployment to a known release manifest, source bundle set, and build record.
View the current release fingerprint.
Platform logic releases
GoOfficePH-owned business logic, tenant policy, entitlements, credits, mail governance, reporting, migration, support, and API behavior now carry a separate platform release line.
View GoOfficePH Platform Releases or view the machine-readable platform release declaration.
Business logic and PHP scope
GoOfficePH business rules, tenant controls, identity workflows, mail controls, reporting, analytics, credit logic, beta-channel routing, and launch policies live in GoOfficePH-owned API services. PHP is kept to backend adapter code that must execute inside the Files workspace context.
| Component | License | Purpose |
|---|---|---|
| gooffice_login | AGPL-3.0-or-later | Workspace launcher, branded identity recovery links, session indicators, and entitlement guard. |
| gooffice_office | AGPL-3.0-or-later | Files and editor bridge for authenticated file, share, version, export, and document-session operations. |
| gooffice_mail | AGPL-3.0-or-later | Mail attachment save-to-Files bridge guarded by GoOfficePH service credentials. |
GoOfficePH-owned code
GoOfficePH-owned standalone API services, frontend applications, branding, website code, operations scripts, desktop/mobile app code, and product documentation are proprietary unless an individual file states otherwise.
Copyright (c) 2026 Arnold Bagabaldo. All rights reserved.
Published source bundles
Source bundles are generated from the deployment repository for license compliance, third-party review, and repeatable audit.
- GoOfficePH Files API source snapshot: Files facade and deployment material used for license review and deployment audit. Checksum.
Major open-source components
| Component | Role | License family |
|---|---|---|
| OpenCloud | Production Files provider behind the GoOfficePH Files API facade | Apache-2.0 |
| Euro Office Document Server | Document editor behind the GoOfficePH Office bridge; documents remain stored in OpenCloud and are returned there after editing | AGPL-3.0 |
| Stalwart Mail Server | Separate mail service for mailbox, JMAP, IMAP, SMTP, and filtering operations | AGPL-3.0-or-later or commercial license where applicable |
| OpenPGP.js | Browser OpenPGP support in Mail | LGPL-3.0+ |
| ical.js | Standards-based calendar invitation parsing in GoOfficePH Mail | MPL-2.0 |
| LiveKit client and server SDK | Approved realtime media service SDKs | Apache-2.0 |
| Keycloak | Identity and single sign-on | Apache-2.0 |
| Caddy | TLS edge and reverse proxy | Apache-2.0 |
| PostgreSQL | Portal and application data store | PostgreSQL License |
| Valkey | Cache and coordination service | BSD-3-Clause |
| Node.js service dependencies | GoOfficePH API runtime dependencies | Primarily MIT, Apache-2.0, PostgreSQL, Zlib, and compatible permissive licenses tracked in compliance reports. |
Retired components
Nextcloud-backed Legacy Mail and Legacy File/Suite support has been discontinued. Nextcloud is no longer an active GoOfficePH runtime component, and the retired compatibility clients no longer launch from GoOfficePH. Review the legacy-app retirement guidance and current replacements.
Realtime media exception
WebRTC media may connect directly to the approved realtime media service after GoOfficePH APIs issue the room token, meeting policy, and audit context. Token creation, room rules, recording/transcription policy, and entitlement checks remain GoOfficePH-owned API responsibilities.
Source review requests
Government, enterprise, or audit reviewers can request the exact source snapshot, component list, and build material that matches a GoOfficePH by KloudPH deployment through the GoOfficePH support channel.