Migrate from Oso

Migrating off Oso?
Keep auth running with SpiceDB.

SpiceDB is an open-source, Google Zanzibar-inspired database system for real-time, security-critical application permissions.

Talk to our engineers

OsoSpiceDB

Polar policy: Schema
Facts: Relationships
authorize: CheckPermission
list: LookupResources
Context facts: Caveats

Full concept map

Running permissions in production at enterprise scale

How ChatGPT enforces permissions across 37 billion documents“We’re ingesting billions of documents from our customers, and every single document needs its own very fine-grained permission. The volume of data we are materializing is very, very high.”Read the case study →
How Zoom checks permissions in under 50ms for AI agentic search“Even after supporting permissions for two applications, it became clear that continuing to build and maintain the system ourselves would be difficult to scale.”Read the case study →
How Workday replaced hardcoded permissions and went live in five months“Once we identified the problem, we realized building authorization ourselves wasn’t practical.”Read the case study →
How Netflix solved permissions that depend on where you connectNetflix checks context like region and environment at request time, alongside relationships, in a single permission check with SpiceDB Caveats.Read the case study →

Migration path

Everything you need to migrate

Go from Polar to production on SpiceDB with the docs, a guide and a coding agent doing most of the work.

01
Learn the concepts
See how Oso’s policies, facts and APIs map to SpiceDB’s schema, relationships and checks.
SpiceDB for Oso users
02
Read the migration docs
A step-by-step walkthrough, from translating your first Polar policy to cutting over production traffic.
Coming soon
03
Let your coding agent do it
The migration skill converts your schema, moves your relationship data, updates your call sites and runs your tests.
Get the migration skill

Switching

We make it easy to switch

Every Oso migration comes with a dedicated engineer, a way to evaluate SpiceDB before signing anything, and security documentation your team can review on day one.

A dedicated migration engineer

Our team will work alongside you to make sure the migration is smooth.

Evaluate before any paperwork

SpiceDB is open source and runs locally in one command. Your team can test the translated model on its own schedule.

Security review, ready to hand over

AuthZed Cloud and Dedicated are SOC 2 compliant, and our security policies are published at security.authzed.com.

Transition incentives for Oso customers

We have incentives for teams moving from Oso to AuthZed. Ask about them when you book, or bring it up with your migration engineer.

Ask about incentives

Talk to a migration engineer

Book a migration call

Statements about SpiceDB and AuthZed reflect public documentation at authzed.com/docs. Migration timelines describe typical engagements and vary with policy complexity and data volume.

Migrating off Oso?Keep auth running with SpiceDB.