MinIO AIStor: Object Storage Ledger 2026 Scorecard

Part of the Object Storage Ledger (edition 2026-10-16). How the scores work: methodology.

Snapshot

Type: product
Owner: MinIO, Inc. (private, venture-backed, Redwood City, California); no acquisition on record
Licence: MinIO Software License (closed source). Free: single node, redistribution prohibited. Enterprise Lite: multi-node below 400 TiB. Enterprise: multi-node with 24/7 support. Priced per usable capacity, by quote only
Latest release: RELEASE.2026-07-24T16-43-31Z (2026-07-24); no later stable release was found by the research pass
Support lifecycle: Enterprise: 24 months per release with hotfix backports. Enterprise Lite: 12 months, no backports. A release is void when its term ends and you must move to a current one
Next milestone: MemKV (announced 2026-05-12) and AIStor Memory (announced 2026-07-29), no availability dates
Object lock: Governance and compliance modes, legal hold and bucket default retention (docs). The vendor cites a Cohasset assessment for SEC 17a-4(f) (claim, not re-verified for AIStor). Veeam Ready Object and Object with Immutability were announced for the MinIO line on 2020-07-27 (vendor announcement via StorageNewsletter); a current listing for AIStor was not verified
Tier: Commercial software
Archetype: Real innovator, portfolio-gated
Evidence grade: B. The 2026 release notes, the pricing page, the software lifecycle page and the object locking docs were read from min.io. Press releases are vendor claims and are marked as such. Capability steps from 2015 to 2022 follow the shared MinIO code base and are inferred (grade C); their years are approximate.

Scope of the scores: AIStor is the continuation of the MinIO line: the Enterprise Object Store of 2024-03-12 became AIStor on 2024-11-13, on the code base that MinIO has shipped since 2015. Scores before 2024 are those of that shared code base. The community edition's wind-down is scored in its own entry, MinIO Community Edition.

Scorecard

Dimension	Score	Direction
Capability today	78.6 / 100	higher is better
Momentum since end of 2022	+7.1 points (2015 to 2022: +45.3)	higher is better
Credibility	16.0 / 25	higher is better
Commercial risk	16.0 / 25	lower is better
Technical lock-in	4.0 / 25	lower is better
Integrator fit	12.5 / 20	higher is better
AI leverage	7.5 / 20	higher is better
Ledger Index	64.1 / 100	balanced weights; see the methodology

Capability by domain, 2015 to today

Scores 0 to 5 against fixed anchors; total is weighted to 100.

Domain (weight)	2015	2019	2022	Today
S3 API fidelity (15)	1.5	3	4	4.5
Immutability and compliance (12)	0	0	3.5	4
Durability and resilience (12)	1	3	4	4
Performance and scale (12)	2	3.5	4	4.5
Deployment freedom (10)	3	3.5	4	4
Security and multi-tenancy (10)	1	2.5	3.5	3.5
Operations (10)	1.5	2.5	3.5	4
Protocols beyond S3 (7)	0	0	0	3
Lifecycle and tiering (7)	0	1	3.5	3.5
Ecosystem and openness (5)	3.5	5	5	3
Total / 100	26.2	48.0	71.5	78.6

Year by year: 2015: 26.2 · 2016: 26.2 · 2017: 26.2 · 2018: 26.2 · 2019: 48.0 · 2020: 56.4 · 2021: 56.4 · 2022: 71.5 · 2023: 71.5 · 2024: 71.2 · 2025: 73.9 · 2026: 78.6

What moved the score

Year	Domain	Change	Points	Trigger
2019	Deployment freedom	3 → 3.5	+1.0	Helm chart and first Kubernetes Operator; year approximate (grade C)
2019	Durability and resilience	1 → 3	+4.8	Distributed erasure coding, bitrot verification and healing; year approximate (grade C)
2019	Ecosystem and openness	3.5 → 5	+1.5	The default S3-compatible target for backup tools, SDK test suites and Kubernetes charts; large outside contributor base
2019	Lifecycle and tiering	0 → 1	+1.4	Bucket lifecycle expiration; year approximate (grade C)
2019	Operations	1.5 → 2.5	+2.0	mc admin, Prometheus metrics, rolling upgrades; year approximate (grade C)
2019	Performance and scale	2 → 3.5	+3.6	Distributed mode across dozens of nodes; vendor NVMe benchmarks; year approximate (grade C)
2019	S3 API fidelity	1.5 → 3	+4.5	Bucket policies, event notifications, presigned URLs, SSE and STS federation; year approximate (grade C)
2019	Security and multi-tenancy	1 → 2.5	+3.0	STS, OIDC and LDAP federation, external KMS through KES; year approximate (grade C)
2020	Immutability and compliance	0 → 3.5	+8.4	Object Lock in governance and compliance modes with legal hold, tied to versioning; Veeam Ready Object with Immutability (vendor announcement 2020-07-27)
2022	Deployment freedom	3.5 → 4	+1.0	Operator with tenant management, Arm builds; year approximate (grade C)
2022	Durability and resilience	3 → 4	+2.4	Bucket replication and multi-site site replication; year approximate (grade C)
2022	Lifecycle and tiering	1 → 3.5	+3.5	Transition to other S3 and cloud tiers, tag and size filters, batch jobs; year approximate (grade C)
2022	Operations	2.5 → 3.5	+2.0	Embedded console, SUBNET diagnostics, server pool expansion and decommission; year approximate (grade C)
2022	Performance and scale	3.5 → 4	+1.2	Server pools for expansion; billions of objects in vendor references; year approximate (grade C)
2022	S3 API fidelity	3 → 4	+3.0	Versioning, lifecycle, tagging, replication and S3 Select; year approximate (grade C)
2022	Security and multi-tenancy	2.5 → 3.5	+2.0	Audit logging, policy conditions, console single sign-on; year approximate (grade C)
2024	Ecosystem and openness	5 → 3.5	-1.5	Enterprise Object Store under the MinIO Software License: closed source, no outside contributors; integrations unchanged
2024	Immutability and compliance	3.5 → 4	+1.2	Enterprise Object Store; Cohasset assessment for SEC 17a-4(f) cited by the vendor (claim, assessment date not verified)
2025	Ecosystem and openness	3.5 → 3	-0.5	AIStor Free prohibits redistribution (2025-12-23); the community repository stops accepting contributions
2025	Operations	3.5 → 4	+1.0	Published software lifecycle (2025-12-23): Enterprise 24 months with hotfix backports, Lite 12 months; 24/7 support with under 4 hour SLA
2025	Protocols beyond S3	0 → 0.5	+0.7	Iceberg Tables technical preview 2025-09-30 (half step)
2025	S3 API fidelity	4 → 4.5	+1.5	AWS S3 Express API support (2025-05-29, vendor claim)
2026	Performance and scale	4 → 4.5	+1.2	GPUDirect RDMA for S3 technical preview (half step); ExaPOD reference architecture 2025-11-13 (vendor)
2026	Protocols beyond S3	0.5 → 3	+3.5	AIStor Tables GA 2026-02-03: Iceberg REST catalog and Delta Sharing; Tables in the stable line 2026-07-24; SFTP in the docs

Direction, 2023 to 2026

Each release item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).

Date	Item	Theme	Driver
2024-03	Enterprise Object Store introduced	Packaging	P
2024-05	MinIO certification programme announced	Ecosystem	P
2024-11	AIStor launched as the successor of the Enterprise Object Store	AI	V
2025-03	NVIDIA ecosystem support announced, no GA date	AI	V
2025-05	Community edition loses console, external IDP logins and FIPS builds; AIStor recommended	Licensing	P
2025-05	AWS S3 Express API support (vendor claim)	S3 API	M
2025-06	Partner programme expansion; government arm	Ecosystem	P
2025-09	AIStor Pods packaging	Packaging	P
2025-09	Iceberg Tables technical preview	Protocols	V
2025-11	ExaPOD reference architecture	Deployment	V
2025-12	AIStor Free (single node, no redistribution) and Enterprise Lite (below 400 TiB) tiers	Licensing	P
2026-02	AIStor Tables GA: Iceberg V3 catalog API, Catalog Views API, Delta Sharing	Protocols	V
2026-03	RELEASE.2026-03-26: replication header and Iceberg validation vulnerabilities, O_DIRECT read integrity bug fixed	Security	C
2026-04	RELEASE.2026-04-11: authentication bypass with unsigned trailing headers fixed	Security	C
2026-05	MemKV context memory store announced; AIStor on NVIDIA Vera BlueField-4 STX	AI	V
2026-06	RELEASE.2026-06-06: tag-based policy bypass (MSA-2026-012) and SourceIp spoofing (MSA-2026-011) fixed	Security	C
2026-07	GPUDirect RDMA for S3 technical preview	Performance	V
2026-07	RELEASE.2026-07-24: Tables in the stable line, SPIFFE SVID certificates, AssumeRole RoleARN, STS and CopyObject fixes	Security	C
2026-07	AIStor Memory announced, no GA date	AI	V
2026-08	HUMAIN partnership	Ecosystem	M

Centre of gravity: AI (4), Security (4), Ecosystem (3)
Blind spots (no items): Immutability, Durability, Operations, Lifecycle
Driver mix: Vision 40%, Customer need 20%, Market window 10%, Upstream 0%, Portfolio 30%
Idea-to-need index: 0.57 (0 = demand-pulled, 1 = thesis-pushed)

Credibility: 16.0 / 25

Criterion	Score	Basis
Cadence	4	Dated stable and edge releases every few weeks; no published rhythm
Roadmap transparency	3	Public release notes and docs; direction only in press releases and blogs; no roadmap
Say-do	3	Tables went from preview (2025-09-30) to GA (2026-02-03) in four months; MemKV, AIStor Memory, the NVIDIA designs and RDMA for S3 have no stated GA
Velocity	4	Tables, S3 Express, SPIFFE and Free tier within a year; the 2026 stable releases were led by security fixes
Lifecycle stability	2	Free path moved from AGPL to a restricted closed licence in 2025; Lite releases expire after 12 months without backports

Commercial risk: 16.0 / 25 (lower is better)

Criterion	Score	Basis
Price and licence volatility	4	Community features moved to paid on 2025-05-24; AIStor Free with single-node and no-redistribution limits replaced the AGPL free path on 2025-12-23; Lite capped below 400 TiB; no list price
Purchase constraints	3	Multi-node is subscription only, quote only, priced per usable capacity; a free single-node option exists
Channel and access	2.5	Free is an open download; Enterprise is by sales with a 60 day trial; hotfix backports only on Enterprise
Owner stability	3	Venture-backed private company; strategy reversal on the community edition in 2025
Cost of staying supported	3.5	A release is void when its term ends: 12 months on Lite with no backports, 24 months on Enterprise

Technical lock-in: 4.0 / 25 (lower is better)

Criterion	Score	Basis
Formats	1.5	Erasure-coded parts with xl.meta per object; Tables in open Iceberg format
Export path	0.5	S3 API, mc mirror, Iceberg REST catalog and Delta Sharing
Stack coupling	1	Own erasure sets on XFS; any network
Hardware / cloud coupling	0	Any server; ExaPOD and Pods are reference designs, no certified hardware required
Skills and tooling coupling	1	S3 and mc skills; wide pool

Integrator fit: 12.5 / 20

Criterion	Score	Basis
Partner programme openness	3	Programme expanded 2025-06-11; terms not published
Multi-tenancy and self-service	3	IAM, STS, OIDC and LDAP; per-tenant clusters through the Operator; no per-tenant QoS found
API and infrastructure-as-code	3.5	Admin API, Kubernetes Operator, Terraform provider; Ansible not re-verified
Skills and certification	3	Vendor certification since 2024-05-21; large S3 skills pool

AI leverage: 7.5 / 20

How the product uses AI, scored per year like capability. Only GA counts.

Criterion	2019	2022	Today	Latest step
AI workload support	1	1	3	2026: GPUDirect RDMA for S3 in technical preview (half step); NVIDIA STX and BlueField-4 designs announced without GA dates
AI platform stack	0	0	2	2026: AIStor Tables GA 2026-02-03 (Iceberg catalog); MemKV and AIStor Memory announced, availability not stated
AI-assisted operations	0	0	0	2015: None
Agent openness	2	2	2.5	2026: AIStor MCP server described in a vendor blog; GA status, identity and audit controls not verified

Year by year: 2015: 3 · 2016: 3 · 2017: 3 · 2018: 3 · 2019: 3 · 2020: 3 · 2021: 3 · 2022: 3 · 2023: 3 · 2024: 4.5 · 2025: 5 · 2026: 7.5

AI say-do, 2023 to 2026: 9 AI items announced; 2 GA, 1 still preview, 6 pending, 0 dropped. ExaPOD, STX and BlueField-4 are reference designs and partnership announcements with no GA date to check; MemKV and AIStor Memory have no stated availability.

AIStor's AI story is mostly announcements: Tables is the one AI-adjacent item that reached GA with a date, RDMA for S3 is a preview, and MemKV and AIStor Memory have no availability date. There is no AI in its own operations, and the MCP server exists in a blog post without a verified release status.

Reading

AIStor scores high on capability because the MinIO code base already covered the S3 surface, erasure coding and Object Lock by 2022, and Tables added an Iceberg catalog in 2026. Credibility is held back by the gap between what is announced and what is dated: MemKV, AIStor Memory, the NVIDIA designs and RDMA for S3 have no stated GA, while five stable releases in 2026 were led by security fixes, two of them authentication or policy bypasses. Commercial risk is high: a closed licence, quote-only pricing per usable capacity, a 400 TiB cap on Lite and a 12 month release term without backports. A buyer should read the MinIO Software License and the software lifecycle page, and ask for the current Cohasset and Veeam Ready documents for AIStor itself rather than for the old community edition.

Open questions and items to re-score

The text of the MinIO Software License was not read; the pricing page summary is the basis.
Whether the Cohasset SEC 17a-4(f) assessment the vendor cites covers AIStor releases, and whether a Veeam Ready listing exists for AIStor rather than for the 2020 MinIO line.
Arm builds for AIStor were not re-verified.
GA status of the AIStor MCP server, MemKV and AIStor Memory.
Stable releases after 2026-07-24, if any; the download index could not be browsed.
Whether a published S3 compatibility matrix exists; none was read.

	’19	’20	’22	’24	’25	’26
S3 API fidelity	2		2		1
Immutability and compliance		1		1
Durability and resilience	1		3
Performance and scale	3					2
Deployment freedom
Security and multi-tenancy
Operations					2
Protocols beyond S3					3	1
Lifecycle and tiering			1
Ecosystem and openness