OwnPay ships when it’s ready, not on a calendar. Because OwnPay handles real money, every feature must meet a security and quality bar before it lands — that means PHPStan level 9, a full PHPUnit suite, and real-world validation on self-hosted deployments. This roadmap documents where the project stands and where it’s headed, shaped by community feedback rather than fixed dates.Documentation Index
Fetch the complete documentation index at: https://mintlify.com/own-pay/OwnPay-Documentation/llms.txt
Use this file to discover all available pages before exploring further.
This document reflects current intentions, not promises. Priorities shift as we learn from the community. Watch the GitHub repository for release notifications and follow blog.ownpay.org for release notes.
Legend
✅ Shipped — Live and self-hostable today🚧 In Progress — Active work during the beta stabilization period
🔭 Planned — Committed for the 1.0 milestone
🌅 Later — Post-1.0 directions subject to community demand
✅ Shipped — Public Beta v0.1.0
The foundation is live. These capabilities are available in every OwnPay installation today:Multi-Brand Architecture
Full tenant isolation via
merchant_id on all scoped tables. Unlimited brands on a single installation with zero data bleed between them.120+ Gateway Integrations
Plugin-based gateway adapters for global cards, wallets, mobile financial services, crypto, BNPL, and regional platforms.
Hosted Checkout
Payment intents, payment links, invoices, and token-based checkout URLs with auto-expiry and status polling.
Refunds
Atomic, balance-validated partial and full refunds with ledger reconciliation and gateway routing.
Double-Entry Ledger
GAAP-compliant ledger engine using bcmath string precision. Trial balance, multi-currency accounts, and a balance verification cron job.
White-Label Custom Domains
Per-brand custom-domain checkout with DNS TXT ownership verification — an industry first for self-hosted payment platforms.
Sandboxed Plugin System
Gateway, Theme, and Addon plugin types with static code auditing, manifest-based discovery, and a WordPress-style hook engine.
REST API & Webhooks
Merchant, Admin, and Mobile Companion API layers. HMAC-SHA256 signed webhooks with exponential backoff retry.
Mobile Companion Foundation
Device pairing via OTP and JWT, SMS forwarding, regex + heuristic SMS parsing, and automatic transaction matching.
Full Internationalization
Admin panel and customer checkout fully translatable. Dot-notation JSON catalogs, inline translation editor, and per-staff language preference.
Staff RBAC
Custom roles per brand with granular permission assignment and
PermissionMiddleware enforcement on every request.Self-Update Engine
Signed, atomic, rollback-safe updates. SHA-256 + RSA verification, zip-slip guards, automatic schema migrations, and maintenance mode.
Security Hardening
AES-256-GCM PII encryption, Argon2id password hashing, CSRF protection, CSP with per-request nonce, SSRF guards, and rate limiting.
Quality Gates
PHPStan level 9 and an automated PHPUnit test suite run on every pull request.
🚧 Now — Stabilizing the Beta
The current focus is making the v0.1.0 foundation production-solid before the 1.0 release:- Real-world feedback loop — triaging issues reported by beta self-hosters
- Public live demo at demo.ownpay.org
- Expanded API documentation at docs.ownpay.org
- Guides and tutorials at learn.ownpay.org
- Hardening and edge-case validation — stress testing payment flows, webhook delivery, and the cron pipeline
- Performance tuning — PHP-FPM, MariaDB, Redis, and OPcache configuration
- Broader gateway coverage — additional adapters and gateway-specific test coverage
🔭 Next — Toward 1.0 Stable
These items are committed for the 1.0 stable release:1.0 Stable Release
The 1.0 tag will be cut once the quality bar and community feedback goals are met — not before. Security issues and financial accuracy regressions are blocking.
Plugin Marketplace
A curated directory at plugin.ownpay.org for discovering and installing gateways and add-ons directly from the admin panel.
Mobile Companion App GA
General availability of the Android and iOS companion apps for SMS-based payment verification and push notifications.
One-Click Deployment Tooling
VPS provisioning scripts and official container images to reduce time-to-running-installation to minutes.
Enhanced Reporting and Reconciliation
Advanced analytics dashboards, revenue reports by brand and gateway, and automated reconciliation workflows.
🌅 Later — Beyond 1.0
Longer-term directions the project is excited about, subject to community demand and contributor availability:| Direction | Description |
|---|---|
| Marketplace ecosystem | Third-party plugin publishing with review and signing |
| Regional MFS expansion | Additional mobile financial services coverage for emerging markets |
| Advanced fraud and risk tooling | Configurable rule engine for flagging suspicious transactions |
| Governance | A distributed maintainer team with a formal RFC process |
How to Influence the Roadmap
The roadmap is shaped by the people who run OwnPay. To propose a feature or change a priority:- Open a GitHub Discussion for broad ideas or direction changes.
- Open a Feature Request Issue for concrete, scoped additions.
- Submit a Pull Request — working code moves faster than requests.