Library management

Koha support services: what they include and how they work

Koha is free, but keeping it stable, secure and up to date is not. What a Koha support contract covers, what it leaves out and why most libraries need one.

BiblioLabTech · November 6, 2026 · 7 min read

Koha support services keep a production Koha instance secure, up to date and working after go-live. Koha is free software, so there is no license to pay, but a live instance is a living system: daily loans, cataloging questions, a public catalog exposed to the internet and a database that grows every day. No license cost does not mean it maintains itself. This guide explains what a Koha support contract includes, how it differs from the help the Koha community offers, what it normally leaves out and what to ask before you sign. It covers the stage that starts the day after your catalog goes live.

Want this in your library?
We implement it for you, end to end.
Get Koha support for your library

Why free Koha does not mean zero-cost Koha

The confusion is understandable: Koha has no license, so it seems reasonable to think that once it is implemented, spending stops. In practice, three things keep happening every month, whether or not anyone is paying for them explicitly:

  • Koha keeps releasing versions. The community publishes two major releases a year, in May and November, and monthly maintenance releases with bug fixes and security patches. It generally maintains two to three major versions at a time, each for an average of 18 months, so an instance that is not updated drops out of maintenance and becomes exposed.
  • The server needs maintenance. The operating system, the database, HTTPS certificates and backups do not administer themselves, whether they live on your own server or in the cloud.
  • Operational incidents happen. A report that stops returning the right result, a plugin that breaks, a misconfigured circulation rule, the OPAC down on the first Monday of the semester.

Koha support is therefore not a commercial whim layered on free software: it is the answer to something already happening in every production instance, under contract or not. If you have not implemented Koha yet, this is not the guide you need; start with our Koha implementation guide.

What Koha support services include

Contracts vary between providers, but serious Koha support covers at least these fronts:

  • Incident resolution. A channel to report failures (the OPAC will not load, a loan is not recorded, a report gives a wrong result) and a commitment to handle them within an agreed time, prioritized by whether the library has stopped operating or the issue is a minor adjustment.
  • Version upgrades. Applying maintenance releases with security patches and planning the move to major versions when appropriate, rather than the institution discovering it is out of date when that is already a problem. After a major upgrade, plan two weeks of reinforced support: most tickets in that period are not failures but questions about where an option moved. If your instance has not been touched in a while, read how to upgrade Koha without losing data first.
  • Infrastructure administration, when the provider also hosts the system: server monitoring, automatic backups that are verified rather than merely scheduled, and HTTPS certificate renewal. Hosting options are compared in our Koha hosting guide.
  • Configuration adjustments that arise from real use: new circulation rules, patron categories, notice templates, permissions by profile.
  • A defined support channel, not a generic mailbox nobody reads: the library knows exactly whom to write to and what response to expect.

What serious support does not promise is what cannot be sustained. BiblioLabTech does not promise response times in exact minutes or 100% availability, because those are figures most providers fail to meet in practice. What can be committed, and what we offer, is a clear channel, priority according to the severity of each incident and response times agreed in the contract.

Community support vs contracted support

Koha has an active global community: mailing lists, chat channels, an extensive wiki and developers who answer technical questions voluntarily. It is a real resource, and every Koha library should know it. But it has limits that a library in production cannot always afford:

Aspect Community support Contracted support
Response time No commitment: twenty minutes or four days, depending on who is available Agreed in the contract, by severity
Accountability Nobody is responsible if the advice does not work The provider answers for the result
Ongoing maintenance Nobody upgrades your instance, monitors your server or checks your backups Included, especially when the provider hosts the system
Language Mostly English Agreed with the provider; BiblioLabTech works in English, Spanish, Portuguese and French
Context Answers given without knowledge of your configuration A team that knows your instance and its history
Cost Free Annual contract

Contracted support does not replace the community. A good provider takes part in it and benefits from its technical discussions. What contracted support adds is what the community, by definition, cannot give: accountability, an agreed response time and continuity.

Why institutions pay for support when Koha is free

The question many libraries ask while budgeting is reasonable: if there is no license, why pay for support? The short answer is that you do not pay for the software; you pay for the software to keep working well over time. Three concrete reasons:

  1. The OPAC is a public service exposed to the internet. An unpatched vulnerability is not an abstract problem: it is an open door to a system that holds patron data.
  2. The cost of an unresolved incident far exceeds the cost of support. A catalog down during enrollment week, or a loan that cannot be recorded on the day textbooks are handed out, carries an operational and reputational cost that an annual support contract does not come close to.
  3. Library staff are not there to run servers. A librarian trained in cataloging and reference does not need, and usually does not want, to learn how to patch Debian or debug a MariaDB log. That time is worth more applied to their own role.

What Koha support usually does not cover

It is just as important to say what is excluded, because that is where most misunderstandings between library and provider arise. Unless contracted as a separate service, Koha support does not usually include:

  • Development of new features that do not exist in the base software.
  • Integrations with external systems the institution decides to add later, such as a remote-access proxy, an institutional ERP or a payment system.
  • The initial data migration from another platform, which is an implementation project, not maintenance; see how to migrate to Koha.
  • Extensive training for staff who join long after go-live, although many providers, BiblioLabTech included, offer refresher sessions within the relationship.

Making this clear in the contract avoids the most common conflict: a library that assumes "support" means "anything we need" and a provider that reads the contract more narrowly.

Time zone and language matter in support

When the OPAC fails on a Monday morning, the provider's time zone decides whether someone answers that morning or the next day. BiblioLabTech works from UTC−5, which overlaps the full working day across the Americas and the afternoon in Europe and Africa, and answers in English, Spanish, Portuguese and French. That matters for multilingual institutions and for libraries whose staff prefer to describe a circulation problem in their own language. It also matters that whoever answers understands what an academic term is, what pressure an enrollment calendar puts on a library and how urgent an incident really is. BiblioLabTech already supports institutions remotely in Colombia, Peru, Paraguay and El Salvador under the same service standard.

What Koha support costs

Koha support is priced by service level, not by number of users or records. As a reference, BiblioLabTech's university projects place an annual support contract at USD 500 to 2,000. Three variables move the figure: the response time committed for critical incidents, the hours of coverage and the bank of hours included for configuration changes and functional help. An SLA with response in hours and extended coverage costs more than one with response in business days, so match the level to how critical your OPAC really is. Hosting, when the provider also runs the server, is a separate line; the full breakdown is in our guide to Koha implementation cost.

Questions to ask before you sign a Koha support contract

  1. Does support include server administration, or only the Koha software?
  2. How is an incident reported, and who receives it?
  3. Does the provider apply version upgrades, or is that the institution's job?
  4. Are backups verified periodically, or only scheduled?
  5. In which language and during which hours does the support team respond?
  6. What happens if the institution wants to change provider later? Because Koha is open source, the data and the system must remain fully portable.

One more check: be wary of anyone presenting themselves as the "official" Koha provider. The community's paid-support directory at koha-community.org states that any organization claiming to be an official Koha support provider is misrepresenting its relationship with the project.

Koha support from BiblioLabTech

BiblioLabTech provides annual Koha support for libraries in any country: incident response with response times agreed by severity, functional help for library staff, maintenance of the server and backups when we host the system, and planned upgrades tested in a staging environment before they reach production. It applies whether your library implemented Koha with us or with another provider. Libraries that implement Koha with BiblioLabTech also receive BiblioScan AI, our AI-assisted MARC21 cataloging tool, at no extra cost. The Escuela Colombiana de Ingeniería Julio Garavito runs its Koha catalog with BiblioScan AI on a dedicated server administered by our team; see the case study.

If your library already runs Koha and has no clear support today, that is exactly the gap we close. Review our Koha service or tell us about your instance: your Koha version, where it is hosted and what is not working.

Frequently asked questions about Koha

Does Koha need paid support if the software is free?

A production Koha instance does need support, even though the software is free. Koha has no license cost, but keeping it secure, up to date and working requires continuous work: applying security patches, administering the server, resolving operational incidents and planning version upgrades. That work is what a Koha support contract covers, not the software itself.

What is the difference between Koha community support and contracted support?

The Koha community answers technical questions voluntarily, mostly in English, with no commitment on response time and no responsibility for the outcome. Contracted support adds a defined channel, priority by incident severity, continuous server maintenance and someone accountable if something goes wrong. The two are not exclusive: a good provider also takes part in the community.

What exactly does a Koha support contract include?

At minimum, a Koha support contract includes incident resolution through a defined channel, maintenance releases applied and major upgrades planned, and configuration adjustments as the library's real use evolves. When the provider also hosts the system, it adds server monitoring, verified backups and HTTPS certificate renewal. Support is usually contracted for renewable annual periods.

Does BiblioLabTech provide Koha support outside Latin America?

Yes. BiblioLabTech provides Koha support remotely to libraries in any country, in English, Spanish, Portuguese and French. The team works in UTC−5, which overlaps the full working day across the Americas and the afternoon in Europe and Africa, and it already supports institutions in Colombia, Peru, Paraguay and El Salvador under the same service standard.

How quickly does Koha support respond?

Koha support response times should be agreed in the contract by severity, not promised in exact minutes, because exact-minute promises are a figure most providers do not sustain in practice. What a serious contract fixes from the start is a clear reporting channel and a priority level for each type of incident, with a team that answers during its stated business hours.

Does Koha support include upgrading the system version?

Koha support should include version upgrades. Applying maintenance releases with security patches and planning the jump to new major versions is one of the core tasks of serious Koha support, because an instance that is not upgraded becomes exposed over time. If your instance has gone years without an upgrade, start by reviewing how to upgrade Koha without losing data.

Can we change Koha support provider without losing our data?

Yes. Changing Koha support provider without losing data is one of the real advantages of open source over a proprietary system: the data and the system belong to the institution, not to the provider. Before signing, ask explicitly how that portability is guaranteed, including database dumps and configuration files, so you are never tied to one provider by default.

Is there an official Koha support provider?

No. The Koha community states that any organization claiming to be an official Koha support provider is misrepresenting its relationship with the project, and that inclusion in its paid-support directory implies no official status. Libraries should judge providers on their track record, their capacity to respond to incidents and their contribution to the community.

Let's make it happen in your library

Tell us about your project and within 48 hours we will tell you exactly what it involves for your institution: scope, timeline and cost.

Or write to us directly: contacto@bibliolabtech.com · +57 302 364 8842