Paperless-ngx vs Mattermost
Side-by-side trajectory, velocity, and editorial themes.
Paperless-ngx is rebuilding for v3 with AI, a plugin framework, and a Tantivy search rewrite.
Two release lines run in parallel. The v2.20.x stable branch is in aggressive security-patch mode — five GHSA-tagged security releases in roughly two months (v2.20.7, 2.20.8, 2.20.9, 2.20.12, 2.20.15) plus a stream of permission-scope and workflow bug fixes. Meanwhile, v3.0.0-beta.rc1 just dropped with the largest feature surface in the project's history: Paperless AI, Remote OCR via Azure AI, sharelink bundles, document file versions, a document parser plugin framework, and a swap of the Whoosh search backend for Tantivy. The v3 cut also lands eleven explicit breaking changes — old API versions removed, encryption support dropped, Python 3.10 support cut, OCR control decoupled from archive-file control.
The arc is a generational rewrite landing on top of a hardened v2 foundation. The team is using v2.20.x to absorb security disclosures (often credited to community researchers) while v3 takes on the architectural debt — fresh migrations from scratch, removed legacy paths, a search engine swap, and a plugin framework that opens the parser surface to extensions. The simultaneous Paperless AI and Azure AI Remote OCR features signal a deliberate move into AI-augmented document processing rather than a passive integration.
Expect more v2.20.x security and bugfix releases through the v3 beta period, then a coordinated migration push when v3 stabilizes — Tantivy reindexing and the API-version removals will both gate that upgrade. Watch the next v3 beta for what Paperless AI actually exposes (suggestion-only vs auto-classification) and whether the plugin framework gets a public extension point doc.
v11.7 ships rearchitected AI agents and granular ABAC as Mattermost leans hard into regulated buyers.
Mattermost is now openly positioning as a collaboration platform for defense, intelligence, and critical infrastructure rather than a general-purpose team-chat alternative. The v11.7 release pairs Attribute-Based Access Control for Team Admins with a rearchitected Agents v2.0 layer that supports custom AI prompts and user-created agents, signaling that the AI roadmap will run on top of strict access governance rather than alongside it. Editorial output in May is overwhelmingly about sovereignty, coalition operations, and AI governance — the company is telling regulated buyers what to ask vendors during procurement.
The product is bifurcating from horizontal team chat into a sovereignty-and-governance-first platform aimed at procurement evaluations in defense and regulated finance. Each major release now ships more granular control surfaces (ABAC, coordinated ESR security cadence) underneath user-facing features (AI agents, custom prompts), which is consistent with a market where features only matter if they can pass a compliance review. Expect future releases to keep coupling AI capability to governance primitives rather than shipping AI features on their own.
The next minor release likely extends ABAC scope beyond Team Admins (channel-level or integration-level enforcement) and tightens the audit trail around user-created agents, since both are the natural follow-ons for a customer base that procures on control granularity. A coalition or cross-domain feature announcement is also plausible given how heavily April-May messaging leaned on multi-nation operational use cases.
See more alternatives to Paperless-ngx →
See more alternatives to Mattermost →