diff --git a/jsapp/js/components/common/icon.scss b/jsapp/js/components/common/icon.scss
index 27bf3670e0..ae08d867bf 100644
--- a/jsapp/js/components/common/icon.scss
+++ b/jsapp/js/components/common/icon.scss
@@ -43,6 +43,10 @@ $s-icon-xl: 28px;
   color: colors.$kobo-red;
 }
 
+.k-icon.k-icon--color-blue {
+  color: colors.$kobo-blue;
+}
+
 .k-icon.k-icon--color-amber {
   color: colors.$kobo-amber;
 }
diff --git a/jsapp/js/components/common/icon.tsx b/jsapp/js/components/common/icon.tsx
index b8ce777d37..74625730c4 100644
--- a/jsapp/js/components/common/icon.tsx
+++ b/jsapp/js/components/common/icon.tsx
@@ -7,7 +7,7 @@ import './icon.scss';
  * Check out `icon.scss` file for exact pixel values.
  */
 export type IconSize = 'l' | 'm' | 's' | 'xl' | 'xs' | 'xxs';
-export type IconColor = 'red' | 'storm' | 'teal' | 'amber';
+export type IconColor = 'red' | 'storm' | 'teal' | 'amber' | 'blue';
 
 const DefaultSize = 's';
 
diff --git a/jsapp/js/components/formLanding.js b/jsapp/js/components/formLanding.js
index 71fceb78f6..3e93e12f7d 100644
--- a/jsapp/js/components/formLanding.js
+++ b/jsapp/js/components/formLanding.js
@@ -365,6 +365,12 @@ class FormLanding extends React.Component {
     kc_server.href = this.state.deployment__identifier;
     var kobocollect_url = kc_server.origin;
 
+    /* TODO
+     `deployment__identifier` has been removed from API response.
+     Stop reading `kc_server` from `deployment__identifier` and use `open_rosa_server`
+     property provided in `/environment` endpoint
+    */
+
     return (
       <bem.FormView__row>
         <bem.FormView__cell m={['label', 'first']}>
diff --git a/jsapp/js/components/formSubScreens.js b/jsapp/js/components/formSubScreens.js
index 4d348bc779..c95765e5bf 100644
--- a/jsapp/js/components/formSubScreens.js
+++ b/jsapp/js/components/formSubScreens.js
@@ -15,6 +15,8 @@ import RESTServices from './RESTServices';
 import LoadingSpinner from 'js/components/common/loadingSpinner';
 import {ROUTES} from 'js/router/routerConstants';
 import {withRouter} from 'js/router/legacy';
+import sessionStore from 'js/stores/session';
+import TransferProjects from 'js/components/permissions/transferProjects/transferProjects.component';
 
 const ConnectProjects = React.lazy(() =>
   import(
@@ -137,9 +139,12 @@ export class FormSubScreens extends React.Component {
   }
   renderSharing() {
     const uid = this.props.params.assetid || this.props.params.uid;
+
     return (
       <bem.FormView m='form-settings-sharing'>
         <SharingForm assetUid={uid} />
+
+        <TransferProjects asset={this.state} />
       </bem.FormView>
     );
   }
diff --git a/jsapp/js/components/modals/koboModal.scss b/jsapp/js/components/modals/koboModal.scss
index 1123aa70c7..5c5070002d 100644
--- a/jsapp/js/components/modals/koboModal.scss
+++ b/jsapp/js/components/modals/koboModal.scss
@@ -65,12 +65,15 @@ $kobo-modal-header-icon-margin: sizes.$x10;
   padding: $kobo-modal-padding;
   border-radius: sizes.$x6 sizes.$x6 0 0;
 
-    &.kobo-modal__header--red{
+    &.kobo-modal__header--red {
       background-color: color.change(colors.$kobo-red, $alpha: 0.1);
     }
-    &.kobo-modal__header--grey{
+    &.kobo-modal__header--grey {
       background-color: colors.$kobo-gray-98;
     }
+    &.kobo-modal__header--white {
+      background-color: colors.$kobo-white;
+    }
 
   h1 {
     @include mixins.centerRowFlex;
diff --git a/jsapp/js/components/modals/koboModalHeader.tsx b/jsapp/js/components/modals/koboModalHeader.tsx
index dea0cc3f75..4059ced17d 100644
--- a/jsapp/js/components/modals/koboModalHeader.tsx
+++ b/jsapp/js/components/modals/koboModalHeader.tsx
@@ -8,7 +8,7 @@ bem.KoboModal__header = makeBem(bem.KoboModal, 'header', 'header');
 bem.KoboModal__headerIcon = makeBem(bem.KoboModal, 'header-icon', 'span');
 
 export type KoboModalHeaderIconColors = 'blue' | 'red' | 'storm';
-export type KoboModalHeaderBackgroundColors = 'red' | 'grey';
+export type KoboModalHeaderBackgroundColors = 'red' | 'grey' | 'white';
 
 interface KoboModalHeaderProps {
   /** Optional icon displayed on the left of the title. */
diff --git a/jsapp/js/components/permissions/sharingForm.component.tsx b/jsapp/js/components/permissions/sharingForm.component.tsx
index 91361e52f5..857750020d 100644
--- a/jsapp/js/components/permissions/sharingForm.component.tsx
+++ b/jsapp/js/components/permissions/sharingForm.component.tsx
@@ -12,6 +12,7 @@ import {replaceBracketsWithLink} from 'js/textUtils';
 import {ANON_USERNAME, ANON_USERNAME_URL} from 'js/users/utils';
 import {ASSET_TYPES} from 'js/constants';
 import {ACCOUNT_ROUTES} from 'js/account/routes';
+import {TransferStatuses} from 'js/components/permissions/transferProjects/transferProjects.api';
 import './sharingForm.scss';
 // parts
 import CopyTeamPermissions from './copyTeamPermissions.component';
@@ -162,6 +163,41 @@ export default class SharingForm extends React.Component<
     }
   }
 
+  /** Check if the recipient of the transfer is the specified user */
+  isPendingOwner(username: string) {
+    return this.state.asset?.project_ownership?.status ===
+      TransferStatuses.Pending &&
+      this.state.asset?.project_ownership?.recipient === username
+      ? true
+      : false;
+  }
+
+  /** Display pending owner if not already included in list of user permissions */
+  renderPendingOwner() {
+    if (
+      this.state.asset?.project_ownership?.status ===
+        TransferStatuses.Pending &&
+      !this.state.permissions?.find(
+        (perm) =>
+          perm.user.name === this.state.asset?.project_ownership?.recipient
+      )
+    ) {
+      return (
+        <UserPermissionRow
+          assetUid={this.props.assetUid}
+          nonOwnerPerms={this.state.nonOwnerPerms}
+          assignablePerms={this.state.assignablePerms}
+          permissions={[]}
+          isUserOwner={false}
+          isPendingOwner={true}
+          username={this.state.asset.project_ownership.recipient}
+        />
+      );
+    } else {
+      return null;
+    }
+  }
+
   render() {
     if (!this.state.asset || !this.state.permissions) {
       return <LoadingSpinner />;
@@ -217,10 +253,12 @@ export default class SharingForm extends React.Component<
                 assignablePerms={this.state.assignablePerms}
                 permissions={perm.permissions}
                 isUserOwner={perm.user.isOwner}
+                isPendingOwner={this.isPendingOwner(perm.user.name)}
                 username={perm.user.name}
               />
             );
           })}
+          {this.renderPendingOwner()}
 
           {!this.state.isAddUserEditorVisible && (
             <Button
diff --git a/jsapp/js/components/permissions/sharingForm.scss b/jsapp/js/components/permissions/sharingForm.scss
index a6069df0f2..01947bd74e 100644
--- a/jsapp/js/components/permissions/sharingForm.scss
+++ b/jsapp/js/components/permissions/sharingForm.scss
@@ -27,8 +27,6 @@ $s-gray-row-spacing: 10px;
 }
 
 .copy-team-permissions {
-  margin-bottom: 30px;
-
   &.copy-team-permissions--opened
     .copy-team-permissions-opener
     .k-icon::before {
diff --git a/jsapp/js/components/permissions/transferProjects/transferProjects.api.ts b/jsapp/js/components/permissions/transferProjects/transferProjects.api.ts
new file mode 100644
index 0000000000..b953e114f1
--- /dev/null
+++ b/jsapp/js/components/permissions/transferProjects/transferProjects.api.ts
@@ -0,0 +1,203 @@
+import {FailResponse, PaginatedResponse} from 'js/dataInterface';
+import {fetchGet, fetchPost, fetchPatch} from 'jsapp/js/api';
+import sessionStore from 'js/stores/session';
+import {buildUserUrl, getUsernameFromUrl} from 'js/users/utils';
+import {notify} from 'js/utils';
+import {handleApiFail} from 'js/api';
+
+const INVITE_URL = '/api/v2/project-ownership/invites/';
+
+/**
+ * The status of a project transfer.
+ */
+export enum TransferStatuses {
+  /**Sender sent the invite but recipient hasn't responded yet.*/
+  Pending = 'pending',
+  /**Sender sent the invite but cancelled it before the recipient could respond.*/
+  Cancelled = 'cancelled',
+  /**Recipient has declined the invite.*/
+  Declined = 'declined',
+  /**Recipient has accepted the invite but transfer process has not started yet*/
+  Accepted = 'accepted',
+  /**Recipient has accepted and the transfer process has begun.*/
+  InProgress = 'in_progress',
+  /**Recipient has accepted and transfer has completed successfully.*/
+  Complete = 'complete',
+  /**Recipient has accepted and process went south.*/
+  Failed = 'failed',
+}
+
+/**Detail about a single asset's transfer. This is listed in the invite detail.*/
+export interface ProjectTransfer {
+  url: string;
+  asset: string;
+  asset__name: string;
+  status: TransferStatuses;
+  error: any;
+  date_modified: string;
+}
+
+/**Detail about current asset's transfer. This is listed in the asset detail.*/
+export interface ProjectTransferAssetDetail {
+  invite: string;
+  sender: string;
+  recipient: string;
+  status: TransferStatuses;
+}
+
+export interface InvitesResponse {
+  url: string;
+  sender: string;
+  recipient: string;
+  status: TransferStatuses;
+  date_created: string;
+  date_modified: string;
+  /**
+   * Backend is written such that invites can have multiple
+   * projects per transfer. This is not supported by the UI right now.
+   */
+  transfers: ProjectTransfer[];
+}
+
+export async function sendInvite(username: string, assetUid: string) {
+  return fetchPost<InvitesResponse>(INVITE_URL, {
+    recipient: buildUserUrl(username),
+    assets: [assetUid],
+  });
+}
+
+// Note: the following invite actions are seperated to make it clearer when using in
+// the JSX code.
+
+export async function cancelInvite(inviteUrl: string) {
+  let response;
+  try {
+    response = await fetchPatch<InvitesResponse>(
+      inviteUrl,
+      {
+        status: TransferStatuses.Cancelled,
+      },
+      {prependRootUrl: false, notifyAboutError: false}
+    );
+  } catch (error) {
+    handleApiFail(
+      error as FailResponse,
+      t(
+        'Failed to cancel transfer. The transfer may be declined or accpeted already. Please check your email.'
+      )
+    );
+  }
+
+  return response;
+}
+
+export async function acceptInvite(inviteUid: string) {
+  let response;
+  try {
+    response = await fetchPatch<InvitesResponse>(
+      INVITE_URL + inviteUid + '/',
+      {
+        status: TransferStatuses.Accepted,
+      },
+      {prependRootUrl: false, notifyAboutError: false}
+    );
+  } catch (error) {
+    handleApiFail(
+      error as FailResponse,
+      t(
+        'Failed to accept invite.'
+      )
+    );
+  }
+
+  return response;
+}
+
+export async function declineInvite(inviteUid: string) {
+  let response;
+  try {
+    response = await fetchPatch<InvitesResponse>(
+      INVITE_URL + inviteUid + '/',
+      {
+        status: TransferStatuses.Declined,
+      },
+      {prependRootUrl: false, notifyAboutError: false}
+    );
+  } catch (error) {
+    handleApiFail(
+      error as FailResponse,
+      t(
+        'Failed to decline invite'
+      )
+    );
+  }
+  return response;
+}
+
+/**Returns *all invites* the current user sent or recieved.*/
+export async function getAllInvites() {
+  let invites;
+  try {
+    invites = await fetchGet<PaginatedResponse<InvitesResponse>>(INVITE_URL, {notifyAboutError: false});
+  } catch (error) {
+    handleApiFail(
+      error as FailResponse,
+    );
+  }
+
+  return invites;
+}
+
+/**
+ * Returns detail for a single invite.
+ *
+ * Note: backend is written such that invites can have multiple
+ * projects per transfer. This is not supported by the UI right now.
+ */
+export async function getInviteDetail(inviteUid: string) {
+  return fetchGet<InvitesResponse>(INVITE_URL + inviteUid, {notifyAboutError: false});
+}
+
+/** Check if the invite is meant for the currently logged in user. */
+export async function isInviteForLoggedInUser(inviteUid: string) {
+  let inviteIsCorrect = false;
+  try {
+    await getInviteDetail(inviteUid).then((data) => {
+      // Only bother with the check if it's in the `pending` state.
+      if (data.status !== TransferStatuses.Pending) {
+        notify.warning(t('Invite has been cancelled or expired'));
+        return;
+      }
+
+      inviteIsCorrect =
+        sessionStore.currentAccount.username ===
+        getUsernameFromUrl(data.recipient);
+    });
+  } catch (error) {
+    handleApiFail(
+      error as FailResponse,
+      t(
+        'Invite is invaild.'
+      )
+    );
+  }
+
+  return inviteIsCorrect;
+}
+
+export async function getAssetFromInviteUid(inviteUid: string) {
+  let displayDetails = null;
+  try {
+    await getInviteDetail(inviteUid).then((data) => {
+      displayDetails = {
+        assetName: data.transfers[0].asset__name,
+        assetOwner: getUsernameFromUrl(data.sender),
+      };
+    });
+  } catch (error) {
+    handleApiFail(
+      error as FailResponse,
+    );
+  }
+  return displayDetails;
+}
diff --git a/jsapp/js/components/permissions/transferProjects/transferProjects.component.tsx b/jsapp/js/components/permissions/transferProjects/transferProjects.component.tsx
new file mode 100644
index 0000000000..b7068e55ac
--- /dev/null
+++ b/jsapp/js/components/permissions/transferProjects/transferProjects.component.tsx
@@ -0,0 +1,295 @@
+import React, {useState} from 'react';
+import Button from 'js/components/common/button';
+import KoboModal from 'js/components/modals/koboModal';
+import KoboModalHeader from 'js/components/modals/koboModalHeader';
+import KoboModalFooter from 'js/components/modals/koboModalFooter';
+import Icon from 'js/components/common/icon';
+import TextBox from 'js/components/common/textBox';
+import {
+  cancelInvite,
+  sendInvite,
+  TransferStatuses,
+} from './transferProjects.api';
+import type {AssetResponse} from 'js/dataInterface';
+import sessionStore from 'js/stores/session';
+import envStore from 'js/envStore';
+import {HELP_ARTICLE_ANON_SUBMISSIONS_URL} from 'js/constants';
+
+import styles from './transferProjects.module.scss';
+
+interface TransferProjectsProps {
+  asset: AssetResponse;
+}
+
+interface TransferProjectsState {
+  isModalOpen: boolean;
+  invitedUserName: string | null;
+  usernameInput: string;
+  usernameError: boolean | string;
+  inviteStatus: TransferStatuses | null;
+  inviteUrl: string | null;
+  submitPending: boolean;
+}
+
+/**
+ * Inline component to start the project transfer process.
+ * Also houses the modal for the transfer process.
+ */
+export default function TransferProjects(props: TransferProjectsProps) {
+  const [transfer, setTransfer] = useState<TransferProjectsState>({
+    isModalOpen: false,
+    invitedUserName: props.asset.project_ownership
+      ? props.asset.project_ownership.recipient
+      : null,
+    usernameInput: '',
+    usernameError: false,
+    inviteStatus: props.asset.project_ownership
+      ? props.asset.project_ownership.status
+      : null,
+    inviteUrl: props.asset.project_ownership
+      ? props.asset.project_ownership.invite
+      : null,
+    submitPending: false,
+  });
+
+  const updateUsername = (newUsername: string) => {
+    setTransfer({
+      ...transfer,
+      usernameInput: newUsername,
+      usernameError: false,
+    });
+  };
+
+  const toggleModal = () => {
+    setTransfer({
+      ...transfer,
+      isModalOpen: !transfer.isModalOpen,
+      usernameInput: '',
+    });
+  };
+
+  function submitInvite(username: string) {
+    if (username === sessionStore.currentAccount.username) {
+      setTransfer({
+        ...transfer,
+        usernameError: t('Cannot transfer a project to the same account.'),
+      });
+
+      return;
+    }
+
+    if (username !== '') {
+      setTransfer({...transfer, usernameError: false, submitPending: true});
+      sendInvite(username, props.asset.uid)
+        .then((data) => {
+          if (data) {
+            setTransfer({
+              ...transfer,
+              invitedUserName: username,
+              inviteStatus: data?.status,
+              inviteUrl: data?.url,
+              isModalOpen: false,
+              usernameInput: '',
+              submitPending: false,
+            });
+          }
+        })
+        .catch((err) => {
+          if (err.status === 400) {
+            setTransfer({
+              ...transfer,
+              usernameError: t('User not found. Please try again.'),
+            });
+          }
+
+          setTransfer({...transfer, submitPending: false});
+        });
+    } else {
+      setTransfer({...transfer, usernameError: t('Please enter a user name.')});
+    }
+  }
+
+  function cancelCurrentInvite() {
+    if (transfer.inviteUrl) {
+      cancelInvite(transfer.inviteUrl).then((data) => {
+        if (data) {
+          setTransfer({
+            ...transfer,
+            inviteStatus: data.status,
+            invitedUserName: null,
+          });
+        }
+      });
+    }
+  }
+
+  if (props.asset.owner__username === sessionStore.currentAccount.username) {
+    return (
+      <div className={styles.root}>
+        <div className={styles.bar}>
+          <div className={styles.description}>
+            <strong>{t('Transfer project ownership')}</strong>
+            <div className={styles.copy}>
+              {transfer.inviteStatus === TransferStatuses.Pending ? (
+                <div
+                  dangerouslySetInnerHTML={{
+                    __html: t(
+                      'Your transfer request is pending until ##username## has accepted or declined it.'
+                    ).replace(
+                      '##username##',
+                      `<strong>${
+                        transfer.invitedUserName ? transfer.invitedUserName : ''
+                      }</strong>`
+                    ),
+                  }}
+                />
+              ) : (
+                <span>
+                  {t(
+                    'Transfer ownership of this project to another user. All submissions, data storage, and transcription and translation usage for this project will be transferred to the new project owner.'
+                  )}
+                  &nbsp;
+                  <a
+                    href={
+                      envStore.data.support_url +
+                      HELP_ARTICLE_ANON_SUBMISSIONS_URL
+                    }
+                    target='_blank'
+                  >
+                    {t('Learn more →')}
+                  </a>
+                </span>
+              )}
+            </div>
+          </div>
+
+          {transfer.inviteStatus === TransferStatuses.Pending && (
+            <Button
+              classNames={[styles.transferButton]}
+              label={t('Cancel transfer')}
+              isFullWidth
+              onClick={cancelCurrentInvite}
+              color='storm'
+              type='frame'
+              size='l'
+            />
+          )}
+
+          {transfer.inviteStatus !== TransferStatuses.Pending && (
+            <Button
+              classNames={[styles.transferButton]}
+              label={t('Transfer')}
+              isFullWidth
+              onClick={toggleModal}
+              color='storm'
+              type='frame'
+              size='l'
+            />
+          )}
+        </div>
+
+        <KoboModal
+          isOpen={transfer.isModalOpen}
+          onRequestClose={toggleModal}
+          size='medium'
+        >
+          <KoboModalHeader onRequestCloseByX={toggleModal} headerColor='white'>
+            {t('Transfer ownership')}
+          </KoboModalHeader>
+          {/* Auto comeplete off as the feild will be filled by your own username
+          which is who you definitely don’t want to use here */}
+          <form autoComplete='off' className={styles.form}>
+            <section className={styles.modalBody}>
+              <p>
+                {t(
+                  'This action will transfer ownership of ##username## to another user'
+                ).replace('##username##', props.asset.name)}
+              </p>
+              <p>
+                {t(
+                  'When you transfer ownership of the project to another user, all of the submissions, data storage, and transcription and translation usage for the project will be transferred to the new project owner.'
+                )}
+              </p>
+              <p>
+                {t(
+                  'The new project owner will receive an email request to accept the transfer. You will be notified when the transfer is accepted or declined.'
+                )}
+              </p>
+
+              <div className={styles.warning}>
+                <Icon
+                  name='warning'
+                  size='s'
+                  color='red'
+                  classNames={styles.warningIcon}
+                />
+
+                <div className={styles.warningCopy}>
+                  {t(
+                    'You will be the owner of the project until the transfer is accepted.'
+                  )}
+                  <br />
+                  <strong>
+                    {t(
+                      'Once the transfer is accepted, you will not be able to undo this action.'
+                    )}
+                  </strong>
+                  &nbsp;
+                  <a
+                    href={
+                      envStore.data.support_url +
+                      HELP_ARTICLE_ANON_SUBMISSIONS_URL
+                    }
+                    target='_blank'
+                  >
+                    {t('Learn more')}
+                  </a>
+                </div>
+              </div>
+              {/* Unused element to prevent firefox autocomplete
+            suggestions on username field */}
+              <input type='text' style={{display: 'none'}} />
+              <div className={styles.input}>
+                <TextBox
+                  label={t(
+                    'To complete the transfer, enter the username of the new project owner'
+                  )}
+                  type='text'
+                  value={transfer.usernameInput}
+                  placeholder={t('Enter username here')}
+                  required
+                  errors={transfer.usernameError}
+                  onChange={updateUsername}
+                />
+              </div>
+            </section>
+
+            <KoboModalFooter alignment='end'>
+              <Button
+                label={t('Cancel')}
+                onClick={toggleModal}
+                color='blue'
+                type='frame'
+                size='m'
+              />
+              <Button
+                label={t('Transfer project')}
+                onClick={(evt: React.FormEvent<HTMLFormElement>) => {
+                  evt.preventDefault();
+                  submitInvite(transfer.usernameInput);
+                }}
+                isPending={transfer.submitPending}
+                color='blue'
+                type='full'
+                size='m'
+                isSubmit
+              />
+            </KoboModalFooter>
+          </form>
+        </KoboModal>
+      </div>
+    );
+  } else {
+    return null;
+  }
+}
diff --git a/jsapp/js/components/permissions/transferProjects/transferProjects.module.scss b/jsapp/js/components/permissions/transferProjects/transferProjects.module.scss
new file mode 100644
index 0000000000..5f26a662db
--- /dev/null
+++ b/jsapp/js/components/permissions/transferProjects/transferProjects.module.scss
@@ -0,0 +1,68 @@
+@use 'scss/sizes';
+@use '~kobo-common/src/styles/colors';
+
+.root {
+  background: colors.$kobo-white;
+  padding: sizes.$x20;
+  margin: sizes.$x24 sizes.$x40;
+  border: 1px solid colors.$kobo-gray-92;
+  border-radius: sizes.$x5;
+}
+
+.form {
+  overflow-x: auto;
+}
+
+.bar {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+
+  .transferButton {
+    max-width: sizes.$x180;
+  }
+}
+
+.description {
+  margin-right: sizes.$x16;
+}
+
+.copy {
+  margin-top: sizes.$x8;
+}
+
+.modalBody {
+  line-height: sizes.$x24;
+  padding: 0 sizes.$x24;
+
+  p:first-of-type {
+    margin: sizes.$x16 0;
+  }
+}
+
+.warning {
+  display: flex;
+  padding: sizes.$x12;
+  margin: sizes.$x24 0 sizes.$x24 0;
+  background-color: colors.$kobo-light-red;;
+  border-radius: sizes.$x5;
+}
+
+.warningIcon {
+  margin-right: sizes.$x8;
+}
+
+@media screen and (max-width: 768px) {
+  .bar {
+    flex-direction: column;
+    align-items: flex-start;
+
+    .transferButton {
+      margin-top: sizes.$x12;
+    }
+  }
+
+  .description {
+    margin: 0 0 sizes.$x12 0;
+  }
+}
diff --git a/jsapp/js/components/permissions/transferProjects/transferProjectsInvite.component.tsx b/jsapp/js/components/permissions/transferProjects/transferProjectsInvite.component.tsx
new file mode 100644
index 0000000000..fca259aff4
--- /dev/null
+++ b/jsapp/js/components/permissions/transferProjects/transferProjectsInvite.component.tsx
@@ -0,0 +1,177 @@
+import React, {useState, useEffect} from 'react';
+import {useSearchParams} from 'react-router-dom';
+import KoboModal from 'js/components/modals/koboModal';
+import KoboModalHeader from 'js/components/modals/koboModalHeader';
+import KoboModalFooter from 'js/components/modals/koboModalFooter';
+import Button from 'js/components/common/button';
+import Icon from 'js/components/common/icon';
+import cx from 'classnames';
+
+import styles from './transferProjectsInvite.module.scss';
+import {
+  acceptInvite,
+  declineInvite,
+  getAssetFromInviteUid,
+  TransferStatuses,
+} from './transferProjects.api';
+
+interface DisplayDetails {
+  assetName: string;
+  assetOwner: string;
+}
+
+interface TransferProjectsInviteProps {
+  inviteUid: string;
+  setInvite: Function;
+}
+
+/*
+ * Invite modal that will show after clicking the invite sent through the email.
+ *
+ * For testing (without email), go to `[projects landing]?invite=<inviteUid>`.
+ * A quick way to get the inviteUid after sending the request is through the
+ * network response under `url`.
+ *
+ */
+export default function TransferProjectsInvite(
+  props: TransferProjectsInviteProps
+) {
+  const [isModalOpen, setIsModalOpen] = useState(true);
+  const [isDeclined, setIsDeclined] = useState(false);
+  const [declinePending, setDeclinePending] = useState(false);
+  const [acceptPending, setAcceptPending] = useState(false);
+  const [asset, setAsset] = useState<DisplayDetails | null>(null);
+  const [searchParams, setSearchParams] = useSearchParams();
+
+  useEffect(() => {
+    getAssetFromInviteUid(props.inviteUid).then((data) => {
+      if (data) {
+        setAsset(data);
+      }
+    });
+  }, []);
+
+  const toggleModal = () => {
+    setIsModalOpen(!isModalOpen);
+  };
+
+  function decline() {
+    setDeclinePending(true)
+    declineInvite(props.inviteUid).then(() => {
+      setIsDeclined(true);
+      props.setInvite(
+        TransferStatuses.Declined,
+        asset?.assetName,
+        asset?.assetOwner
+      );
+      setDeclinePending(false);
+      setSearchParams();
+    });
+  }
+
+  function accept() {
+    setAcceptPending(true);
+    acceptInvite(props.inviteUid).then(() => {
+      setAcceptPending(false);
+      setIsModalOpen(!isModalOpen);
+      props.setInvite(
+        TransferStatuses.Accepted,
+        asset?.assetName,
+        asset?.assetOwner
+      );
+      setSearchParams()
+    });
+  }
+
+  return (
+    <KoboModal isOpen={isModalOpen} onRequestClose={toggleModal} size='medium'>
+      <KoboModalHeader onRequestCloseByX={toggleModal} headerColor='white'>
+        {isDeclined
+          ? t('Project transfer declined')
+          : 'Accept ownership transfer'}
+      </KoboModalHeader>
+      <div>
+        <section className={styles.modalBody}>
+          {isDeclined && (
+            <p>
+              {t(
+                'You have declined the request of transfer ownership for ##PROJECT_NAME##.'
+              ).replace('##PROJECT_NAME##', asset ? asset.assetName : '')}
+            </p>
+          )}
+
+          {!isDeclined && (
+            <>
+              <p>
+                {t(
+                  'When you accept the ownership transfer of project ##PROJECT_NAME##, all of the submissions, data storage, and transcription and translation usage for the project will be transferred to you and count against your plan limits.'
+                ).replace('##PROJECT_NAME##', asset ? asset.assetName : '')}
+              </p>
+              <strong>
+                {t(
+                  'Once you accept, the transfer might take a few minutes to complete.'
+                )}
+              </strong>
+            </>
+          )}
+          <div
+            className={cx({
+              [styles.note]: true,
+              [styles.declinedNote]: isDeclined,
+            })}
+          >
+            <Icon
+              name='information'
+              size='s'
+              color='blue'
+              classNames={[styles.noteIcon]}
+            />
+
+            {isDeclined && asset ? (
+              <div>
+                {'##CURRENT_OWNER_NAME## will receive a notification that the transfer was incomplete.'.replace(
+                  '##CURRENT_OWNER_NAME##',
+                  asset ? asset.assetOwner : t('Current owner')
+                )}
+                &nbsp;
+                {'##CURRENT_OWNER_NAME## will remain the project owner.'.replace(
+                  '##CURRENT_OWNER_NAME##',
+                  asset ? asset.assetOwner : t('Current owner')
+                )}
+              </div>
+            ) : (
+              <div>
+                {t(
+                  'Note: The previous owner has permissions to manage the project. You can change user permissions in the project sharing settings.'
+                )}
+              </div>
+            )}
+          </div>
+        </section>
+
+        {!isDeclined && (
+          <KoboModalFooter alignment='end'>
+            <Button
+              label={t('Decline')}
+              onClick={decline}
+              color='blue'
+              type='frame'
+              size='l'
+              isDisabled={acceptPending}
+              isPending={declinePending}
+            />
+            <Button
+              label={t('Accept')}
+              onClick={accept}
+              color='blue'
+              type='full'
+              size='l'
+              isDisabled={declinePending}
+              isPending={acceptPending}
+            />
+          </KoboModalFooter>
+        )}
+      </div>
+    </KoboModal>
+  );
+}
diff --git a/jsapp/js/components/permissions/transferProjects/transferProjectsInvite.module.scss b/jsapp/js/components/permissions/transferProjects/transferProjectsInvite.module.scss
new file mode 100644
index 0000000000..6e5ed5fc1e
--- /dev/null
+++ b/jsapp/js/components/permissions/transferProjects/transferProjectsInvite.module.scss
@@ -0,0 +1,28 @@
+@use 'scss/sizes';
+@use '~kobo-common/src/styles/colors';
+
+.modalBody {
+  line-height: sizes.$x24;
+  padding: 0 sizes.$x24;
+
+  p:first-of-type {
+    margin-top: 0;
+  }
+}
+
+.note {
+  display: flex;
+  padding: sizes.$x12;
+  margin: sizes.$x24 0 0 0;
+  background-color: colors.$kobo-light-blue;
+  border-radius: sizes.$x5;
+}
+
+.note.declinedNote {
+  margin-bottom: sizes.$x30;
+}
+
+.noteIcon {
+  margin-right: sizes.$x8;
+}
+
diff --git a/jsapp/js/components/permissions/userPermissionRow.component.tsx b/jsapp/js/components/permissions/userPermissionRow.component.tsx
index 6aaf5ea33b..104323f505 100644
--- a/jsapp/js/components/permissions/userPermissionRow.component.tsx
+++ b/jsapp/js/components/permissions/userPermissionRow.component.tsx
@@ -16,6 +16,7 @@ interface UserPermissionRowProps {
   assignablePerms: AssignablePermsMap;
   permissions: PermissionResponse[];
   isUserOwner: boolean;
+  isPendingOwner: boolean;
   username: string;
 }
 
@@ -136,7 +137,7 @@ export default class UserPermissionRow extends React.Component<
     };
 
     const modifiers = [];
-    if (this.props.permissions.length === 0) {
+    if (!this.props.isPendingOwner && this.props.permissions.length === 0) {
       modifiers.push('deleted');
     }
     if (this.state.isBeingDeleted) {
@@ -157,7 +158,12 @@ export default class UserPermissionRow extends React.Component<
           {this.props.isUserOwner && (
             <bem.UserRow__perms>{t('is owner')}</bem.UserRow__perms>
           )}
-          {!this.props.isUserOwner && (
+
+          {this.props.isPendingOwner && (
+            <bem.UserRow__perms>{t('Pending owner')}</bem.UserRow__perms>
+          )}
+
+          {!this.props.isUserOwner && !this.props.isPendingOwner && (
             <React.Fragment>
               {this.renderPermissions(this.props.permissions)}
 
diff --git a/jsapp/js/dataInterface.ts b/jsapp/js/dataInterface.ts
index 1d3b1e475a..d371c9a059 100644
--- a/jsapp/js/dataInterface.ts
+++ b/jsapp/js/dataInterface.ts
@@ -23,6 +23,7 @@ import type {
 import type {TransxObject} from './components/processing/processingActions';
 import type {UserResponse} from 'js/users/userExistence.store';
 import type {ReportsResponse} from 'js/components/reports/reportsConstants';
+import type {ProjectTransferAssetDetail} from 'js/components/permissions/transferProjects/transferProjects.api';
 
 interface AssetsRequestData {
   q?: string;
@@ -640,6 +641,7 @@ export interface AssetResponse extends AssetRequestObject {
   settings__style?: string;
   settings__form_id?: string;
   settings__title?: string;
+  project_ownership: ProjectTransferAssetDetail;
 }
 
 /** This is the asset object returned by project-views endpoint. */
diff --git a/jsapp/js/projects/myProjectsRoute.tsx b/jsapp/js/projects/myProjectsRoute.tsx
index 44429dcd8d..11f91b101b 100644
--- a/jsapp/js/projects/myProjectsRoute.tsx
+++ b/jsapp/js/projects/myProjectsRoute.tsx
@@ -28,10 +28,31 @@ import Icon from 'js/components/common/icon';
 import {dropImportXLSForms} from 'js/dropzone.utils';
 import LimitNotifications from 'js/components/usageLimits/limitNotifications.component';
 import {UsageContext, useUsage} from 'js/account/usage/useUsage.hook';
+import {useSearchParams} from 'react-router-dom';
+import TransferProjectsInvite from 'js/components/permissions/transferProjects/transferProjectsInvite.component';
+import {isInviteForLoggedInUser, TransferStatuses} from 'js/components/permissions/transferProjects/transferProjects.api';
+import Button from '../components/common/button';
+
+interface InviteState {
+  valid: boolean;
+  uid: string;
+  status: TransferStatuses.Accepted | TransferStatuses.Declined | null;
+  name: string;
+  currentOwner: string;
+}
 
 function MyProjectsRoute() {
   const [customView] = useState(customViewStore);
   const [selectedRows, setSelectedRows] = useState<string[]>([]);
+  const [invite, setInvite] = useState<InviteState>({
+    valid: false,
+    uid: '',
+    status: null,
+    name: '',
+    currentOwner: '',
+  });
+  const [banner, setBanner] = useState(true);
+  const [searchParams] = useSearchParams();
   const usage = useUsage();
 
   useEffect(() => {
@@ -40,7 +61,16 @@ function MyProjectsRoute() {
       `${ROOT_URL}/api/v2/assets/`,
       HOME_DEFAULT_VISIBLE_FIELDS
     );
-  }, []);
+
+    const inviteParams = searchParams.get('invite');
+    if (inviteParams) {
+      isInviteForLoggedInUser(inviteParams).then((data) => {
+        setInvite({...invite, valid: data, uid: inviteParams});
+      });
+    } else {
+      setInvite({...invite, valid: false, uid: ''});
+    }
+  }, [searchParams]);
 
   /** Returns a list of names for fields that have at least 1 filter defined. */
   const getFilteredFieldsNames = () => {
@@ -65,6 +95,19 @@ function MyProjectsRoute() {
     );
   };
 
+  const setInviteDetail = (
+    newStatus: TransferStatuses.Accepted | TransferStatuses.Declined,
+    name: string,
+    currentOwner: string
+  ) => {
+    setInvite({
+      ...invite,
+      status: newStatus,
+      name: name,
+      currentOwner: currentOwner,
+    });
+  };
+
   return (
     <Dropzone
       onDrop={dropImportXLSForms}
@@ -84,6 +127,50 @@ function MyProjectsRoute() {
       </UsageContext.Provider>
 
       <section className={styles.root}>
+        {invite.status && banner && (
+          <div className={styles.banner}>
+            <Icon
+              name='information'
+              color='blue'
+              classNames={[styles.bannerIcon]}
+            />
+
+            {invite.status === TransferStatuses.Declined && (
+              <>
+                {t(
+                  'You have declined the request of transfer ownership for ##PROJECT_NAME##. ##CURRENT_OWNER_NAME## will receive a notification that the transfer was incomplete.'
+                )
+                  .replace('##PROJECT_NAME##', invite.name)
+                  .replace('##CURRENT_OWNER_NAME##', invite.currentOwner)}
+                &nbsp;
+                {t(
+                  '##CURRENT_OWNER_NAME## will remain the project owner.'
+                ).replace('##CURRENT_OWNER_NAME##', invite.currentOwner)}
+              </>
+            )}
+            {invite.status === TransferStatuses.Accepted && (
+              <>
+                {t(
+                  'You have accepted project ownership from ##CURRENT_OWNER_NAME## for ##PROJECT_NAME##. This process can take up to a few minutes to complete.'
+                )
+                  .replace('##PROJECT_NAME##', invite.name)
+                  .replace('##CURRENT_OWNER_NAME##', invite.currentOwner)}
+              </>
+            )}
+
+            <Button
+              type='bare'
+              color='storm'
+              size='s'
+              startIcon='close'
+              onClick={() => {
+                setBanner(false);
+              }}
+              classNames={[styles.bannerButton]}
+            />
+          </div>
+        )}
+
         <header className={styles.header}>
           <ViewSwitcher selectedViewUid={HOME_VIEW.uid} />
 
@@ -131,6 +218,12 @@ function MyProjectsRoute() {
           selectedRows={selectedRows}
           onRowsSelected={setSelectedRows}
         />
+        {invite.valid && invite.uid !== '' && (
+          <TransferProjectsInvite
+            setInvite={setInviteDetail}
+            inviteUid={invite.uid}
+          />
+        )}
       </section>
     </Dropzone>
   );
diff --git a/jsapp/js/projects/projectViews.module.scss b/jsapp/js/projects/projectViews.module.scss
index 6945b4a817..6303c46149 100644
--- a/jsapp/js/projects/projectViews.module.scss
+++ b/jsapp/js/projects/projectViews.module.scss
@@ -1,5 +1,6 @@
 @use 'scss/mixins';
 @use 'scss/sizes';
+@use '~kobo-common/src/styles/colors';
 
 .root {
   display: flex;
@@ -19,3 +20,21 @@
   flex: 1;
   justify-content: flex-end;
 }
+
+.banner {
+  display: flex;
+  justify-content: space-between;
+  margin: sizes.$x24 sizes.$x24 0 sizes.$x24;
+  padding: sizes.$x12;
+  background-color: colors.$kobo-light-blue;
+  border-radius: sizes.$x5;
+  align-items: center;
+}
+
+.bannerIcon {
+  padding-right: sizes.$x18;
+}
+
+.bannerButton {
+  margin-left: auto;
+}
diff --git a/jsapp/scss/components/_kobo.form-view.scss b/jsapp/scss/components/_kobo.form-view.scss
index 029d834719..e5bcc58fcf 100644
--- a/jsapp/scss/components/_kobo.form-view.scss
+++ b/jsapp/scss/components/_kobo.form-view.scss
@@ -1,5 +1,5 @@
-@use "scss/_variables";
 @use 'scss/sizes';
+@use 'scss/_variables';
 @use 'scss/z-indexes';
 @use '~kobo-common/src/styles/colors';
 
@@ -563,10 +563,9 @@ $side-tabs-width-mobile: 70px;
 }
 
 .form-view.form-view--form-settings-sharing {
+  background: colors.$kobo-white;
   .form-modal {
-    background: colors.$kobo-white;
-    padding: 40px;
-    height: 100%;
+    padding: sizes.$x40 sizes.$x40 sizes.$x16 sizes.$x40;
     overflow: auto;
   }
 }
diff --git a/kobo/apps/help/migrations/0004_link_generic_objects_to_inapp_message.py b/kobo/apps/help/migrations/0004_link_generic_objects_to_inapp_message.py
new file mode 100644
index 0000000000..adb047015d
--- /dev/null
+++ b/kobo/apps/help/migrations/0004_link_generic_objects_to_inapp_message.py
@@ -0,0 +1,29 @@
+# Generated by Django 3.2.15 on 2024-03-13 20:00
+
+from django.conf import settings
+from django.db import migrations, models
+import django.db.models.deletion
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+        ('help', '0003_delete_inappmessagefile_model'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='inappmessage',
+            name='generic_related_objects',
+            field=models.JSONField(default=dict),
+        ),
+        migrations.CreateModel(
+            name='InAppMessageUsers',
+            fields=[
+                ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('in_app_message', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='help.inappmessage')),
+                ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)),
+            ],
+        ),
+    ]
diff --git a/kobo/apps/help/models.py b/kobo/apps/help/models.py
index f50b5e6733..de0ebf3a73 100644
--- a/kobo/apps/help/models.py
+++ b/kobo/apps/help/models.py
@@ -43,6 +43,9 @@ class InAppMessage(AbstractMarkdownxModel):
     valid_from = models.DateTimeField(default=EPOCH_BEGINNING)
     valid_until = models.DateTimeField(default=EPOCH_BEGINNING)
     last_editor = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.CASCADE)
+    # We do not want to use a generic foreign key or tightly couple this model
+    # with another one, so we use JSONField to store related object name and pk
+    generic_related_objects = models.JSONField(default=dict)
 
     markdown_fields = ['snippet', 'body']
 
@@ -59,6 +62,12 @@ def html(self):
         return result
 
 
+class InAppMessageUsers(models.Model):
+
+    in_app_message = models.ForeignKey(InAppMessage, on_delete=models.CASCADE)
+    user = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.CASCADE)
+
+
 class InAppMessageFile(MarkdownxUploaderFile):
     class Meta:
         proxy = True
diff --git a/kobo/apps/help/serializers.py b/kobo/apps/help/serializers.py
index 6d394e16c1..29a311684c 100644
--- a/kobo/apps/help/serializers.py
+++ b/kobo/apps/help/serializers.py
@@ -1,6 +1,10 @@
-# coding: utf-8
+from __future__ import annotations
+
+from django.utils.translation import gettext as t
 from rest_framework import serializers
 
+from kobo.apps.project_ownership.models import Transfer
+from kpi.utils.object_permission import get_database_user
 from .models import InAppMessage, InAppMessageUserInteractions
 
 
@@ -54,6 +58,10 @@ def to_internal_value(self, data):
         lookup_field='uid', view_name='inappmessage-detail')
     interactions = InteractionsField()
     always_display_as_new = serializers.ReadOnlyField()
+    title = serializers.SerializerMethodField()
+    snippet = serializers.SerializerMethodField()
+    body = serializers.SerializerMethodField()
+    html = serializers.SerializerMethodField()
 
     class Meta:
         model = InAppMessage
@@ -68,3 +76,61 @@ class Meta:
             'always_display_as_new',
         )
         read_only_fields = ('uid',)
+
+    def get_title(self, in_app_message: InAppMessage) -> str:
+        if not in_app_message.generic_related_objects:
+            return in_app_message.title
+        return self._replace_placeholders(in_app_message, in_app_message.title)
+
+    def get_snippet(self, in_app_message: InAppMessage) -> str:
+        if not in_app_message.generic_related_objects:
+            return in_app_message.snippet
+        return self._replace_placeholders(in_app_message, in_app_message.snippet)
+
+    def get_body(self, in_app_message: InAppMessage) -> str:
+        if not in_app_message.generic_related_objects:
+            return in_app_message.body
+        return self._replace_placeholders(in_app_message, in_app_message.body)
+
+    def get_html(self, in_app_message: InAppMessage) -> dict:
+        if not in_app_message.generic_related_objects:
+            return in_app_message.html
+
+        return {
+            'snippet': self._replace_placeholders(
+                in_app_message, in_app_message.html['snippet']
+            ),
+            'body': self._replace_placeholders(
+                in_app_message, in_app_message.html['body']
+            ),
+        }
+
+    def _replace_placeholders(
+        self, in_app_message: InAppMessage, value: str
+    ) -> str:
+        # This method only support transfers so far
+        transfer_identifier = (
+            f'{Transfer._meta.app_label}.{Transfer._meta.model_name}'
+        )
+        if transfer_identifier in in_app_message.generic_related_objects:
+            transfer_id = in_app_message.generic_related_objects[transfer_identifier]
+            return self._replace_placeholders_for_transfer(value, transfer_id)
+
+        return t(value)
+
+    def _replace_placeholders_for_transfer(self, value: str, transfer_id: int):
+        request = self.context['request']
+        user = get_database_user(request.user)
+        value = t(value)
+
+        try:
+            transfer = Transfer.objects.get(pk=transfer_id)
+        except Transfer.DoesNotExist:
+            return value
+
+        value = value.replace('##username##', user.username)
+        value = value.replace('##project_name##', transfer.asset.name)
+        value = value.replace('##previous_owner##', transfer.invite.sender.username)
+        value = value.replace('##new_owner##', transfer.invite.recipient.username)
+
+        return value
diff --git a/kobo/apps/help/views.py b/kobo/apps/help/views.py
index fa2f980397..3aba1eee0e 100644
--- a/kobo/apps/help/views.py
+++ b/kobo/apps/help/views.py
@@ -1,16 +1,14 @@
-# coding: utf-8
-import datetime
 try:
     from zoneinfo import ZoneInfo
 except ImportError:
     from backports.zoneinfo import ZoneInfo
 
 from django.db.models import Q
-from markdownx.views import ImageUploadView
+from django.utils import timezone
 from private_storage.views import PrivateStorageView
 from rest_framework import viewsets
 
-from .forms import InAppMessageImageForm
+from kpi.utils.object_permission import get_database_user
 from .models import InAppMessage, InAppMessageFile
 from .permissions import InAppMessagePermissions
 from .serializers import InAppMessageSerializer
@@ -46,9 +44,11 @@ class InAppMessageViewSet(viewsets.ModelViewSet):
     permission_classes = [InAppMessagePermissions]
 
     def get_queryset(self):
-        now = datetime.datetime.now(tz=ZoneInfo('UTC'))
-        return self.queryset.filter(
-            Q(published=True) | Q(last_editor=self.request.user),
-            valid_from__lte=now,
-            valid_until__gte=now,
+        user = get_database_user(self.request.user)
+
+        return self.queryset.distinct().filter(
+            Q(published=True) | Q(last_editor=user),
+            Q(inappmessageusers__isnull=True) | Q(inappmessageusers__user=user),
+            valid_from__lte=timezone.now(),
+            valid_until__gte=timezone.now(),
         ).order_by('-pk')
diff --git a/kobo/apps/hook/tasks.py b/kobo/apps/hook/tasks.py
index 223721ebee..6ff659961f 100644
--- a/kobo/apps/hook/tasks.py
+++ b/kobo/apps/hook/tasks.py
@@ -129,6 +129,8 @@ def failures_reports():
             max_length = max(max_length, hook_name_length)
             records[record.hook.asset.owner.id]['assets'][record.hook.asset.uid]['max_length'] = max_length
 
+        # TODO use kpi.utils.mailer.EmailMessage and kpi.utils.mailer.Mailer
+        #  classes to send emails
         # Get templates
         plain_text_template = get_template('reports/failures_email_body.txt')
         html_template = get_template('reports/failures_email_body.html')
diff --git a/kobo/apps/project_ownership/__init__.py b/kobo/apps/project_ownership/__init__.py
new file mode 100644
index 0000000000..cd9e2606da
--- /dev/null
+++ b/kobo/apps/project_ownership/__init__.py
@@ -0,0 +1,13 @@
+from django.apps import AppConfig
+
+
+class ProjectOwnershipAppConfig(AppConfig):
+
+    name = 'kobo.apps.project_ownership'
+    verbose_name = 'Project ownership'
+
+    def ready(self):
+        # Makes sure all signal handlers are connected
+        # Uncomment the lines below if you need signals
+        # from kobo.apps.project_ownership import signals
+        super().ready()
diff --git a/kobo/apps/project_ownership/admin.py b/kobo/apps/project_ownership/admin.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/kobo/apps/project_ownership/exceptions.py b/kobo/apps/project_ownership/exceptions.py
new file mode 100644
index 0000000000..7efd66be5a
--- /dev/null
+++ b/kobo/apps/project_ownership/exceptions.py
@@ -0,0 +1,6 @@
+class AsyncTaskException(Exception):
+    pass
+
+
+class TransferAlreadyProcessedException(Exception):
+    pass
diff --git a/kobo/apps/project_ownership/filters.py b/kobo/apps/project_ownership/filters.py
new file mode 100644
index 0000000000..47629fff4d
--- /dev/null
+++ b/kobo/apps/project_ownership/filters.py
@@ -0,0 +1,25 @@
+from django.db.models import Q
+from rest_framework import filters
+
+from kpi.utils.object_permission import get_database_user
+
+
+class InviteFilter(filters.BaseFilterBackend):
+
+    SENDER_MODE = 'sender'
+    RECIPIENT_MODE = 'recipient'
+
+    def filter_queryset(self, request, queryset, view):
+        mode = request.query_params.get('mode')
+        user = get_database_user(request.user)
+
+        if view.action == 'retrieve' and user.is_superuser:
+            # superusers can see all invites individually
+            return queryset
+
+        if mode == self.SENDER_MODE:
+            return queryset.filter(sender=user)
+        elif mode == self.RECIPIENT_MODE:
+            return queryset.filter(recipient=user)
+        else:
+            return queryset.filter(Q(sender=user) | Q(recipient=user))
diff --git a/kobo/apps/project_ownership/migrations/0001_initial.py b/kobo/apps/project_ownership/migrations/0001_initial.py
new file mode 100644
index 0000000000..023d3a6d68
--- /dev/null
+++ b/kobo/apps/project_ownership/migrations/0001_initial.py
@@ -0,0 +1,64 @@
+# Generated by Django 3.2.15 on 2024-03-13 20:01
+
+from django.conf import settings
+from django.db import migrations, models
+import django.db.models.deletion
+import django.utils.timezone
+import kpi.fields.kpi_uid
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='Invite',
+            fields=[
+                ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('date_created', models.DateTimeField(default=django.utils.timezone.now)),
+                ('date_modified', models.DateTimeField(default=django.utils.timezone.now)),
+                ('uid', kpi.fields.kpi_uid.KpiUidField(_null=False, uid_prefix='poi')),
+                ('status', models.CharField(choices=[('accepted', 'Accepted'), ('cancelled', 'Cancelled'), ('complete', 'Complete'), ('declined', 'Declined'), ('expired', 'Expired'), ('failed', 'Failed'), ('in_progress', 'In Progress'), ('pending', 'Pending')], db_index=True, default='pending', max_length=11)),
+                ('recipient', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='transfer_ownership_responses', to=settings.AUTH_USER_MODEL)),
+                ('sender', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='transfer_ownership_requests', to=settings.AUTH_USER_MODEL)),
+            ],
+            options={
+                'verbose_name': 'project ownership transfer invite',
+            },
+        ),
+        migrations.CreateModel(
+            name='Transfer',
+            fields=[
+                ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('date_created', models.DateTimeField(default=django.utils.timezone.now)),
+                ('date_modified', models.DateTimeField(default=django.utils.timezone.now)),
+                ('uid', kpi.fields.kpi_uid.KpiUidField(_null=False, uid_prefix='pot')),
+                ('asset', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='transfers', to='kpi.asset')),
+                ('invite', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='transfers', to='project_ownership.invite')),
+            ],
+            options={
+                'verbose_name': 'project ownership transfer',
+            },
+        ),
+        migrations.CreateModel(
+            name='TransferStatus',
+            fields=[
+                ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('date_created', models.DateTimeField(default=django.utils.timezone.now)),
+                ('date_modified', models.DateTimeField(default=django.utils.timezone.now)),
+                ('status', models.CharField(choices=[('cancelled', 'Cancelled'), ('failed', 'Failed'), ('in_progress', 'In Progress'), ('pending', 'Pending'), ('success', 'Success')], db_index=True, default='pending', max_length=11)),
+                ('status_type', models.CharField(choices=[('attachments', 'Attachments'), ('media_files', 'Media Files'), ('global', 'Global'), ('submissions', 'Submissions')], db_index=True, default='global', max_length=11)),
+                ('error', models.TextField(null=True)),
+                ('transfer', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='statuses', to='project_ownership.transfer')),
+            ],
+        ),
+        migrations.AddConstraint(
+            model_name='transferstatus',
+            constraint=models.UniqueConstraint(fields=('transfer', 'status_type'), name='uniq_transfer_status_type'),
+        ),
+    ]
diff --git a/kobo/apps/project_ownership/migrations/__init__.py b/kobo/apps/project_ownership/migrations/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/kobo/apps/project_ownership/models/__init__.py b/kobo/apps/project_ownership/models/__init__.py
new file mode 100644
index 0000000000..b5efa69fe6
--- /dev/null
+++ b/kobo/apps/project_ownership/models/__init__.py
@@ -0,0 +1,7 @@
+from .choices import (
+    InviteStatusChoices,
+    TransferStatusChoices,
+    TransferStatusTypeChoices,
+)
+from .invite import Invite
+from .transfer import Transfer, TransferStatus
diff --git a/kobo/apps/project_ownership/models/choices.py b/kobo/apps/project_ownership/models/choices.py
new file mode 100644
index 0000000000..530a29c879
--- /dev/null
+++ b/kobo/apps/project_ownership/models/choices.py
@@ -0,0 +1,30 @@
+from django.db import models
+
+
+class InviteStatusChoices(models.TextChoices):
+
+    ACCEPTED = 'accepted'
+    CANCELLED = 'cancelled'
+    COMPLETE = 'complete'
+    DECLINED = 'declined'
+    EXPIRED = 'expired'
+    FAILED = 'failed'
+    IN_PROGRESS = 'in_progress'
+    PENDING = 'pending'
+
+
+class TransferStatusChoices(models.TextChoices):
+
+    CANCELLED = 'cancelled'
+    FAILED = 'failed'
+    IN_PROGRESS = 'in_progress'
+    PENDING = 'pending'
+    SUCCESS = 'success'
+
+
+class TransferStatusTypeChoices(models.TextChoices):
+
+    ATTACHMENTS = 'attachments'
+    MEDIA_FILES = 'media_files'
+    GLOBAL = 'global'
+    SUBMISSIONS = 'submissions'
diff --git a/kobo/apps/project_ownership/models/invite.py b/kobo/apps/project_ownership/models/invite.py
new file mode 100644
index 0000000000..17bcde99c6
--- /dev/null
+++ b/kobo/apps/project_ownership/models/invite.py
@@ -0,0 +1,47 @@
+from __future__ import annotations
+
+from django.conf import settings
+from django.db import models
+from django.utils import timezone
+
+from kpi.fields import KpiUidField
+from .choices import InviteStatusChoices
+
+
+class Invite(models.Model):
+
+    uid = KpiUidField(uid_prefix='poi')
+    sender = models.ForeignKey(
+        settings.AUTH_USER_MODEL,
+        related_name='transfer_ownership_requests',
+        on_delete=models.CASCADE,
+    )
+    recipient = models.ForeignKey(
+        settings.AUTH_USER_MODEL,
+        related_name='transfer_ownership_responses',
+        on_delete=models.CASCADE,
+    )
+    status = models.CharField(
+        max_length=11,
+        choices=InviteStatusChoices.choices,
+        default=InviteStatusChoices.PENDING,
+        db_index=True
+    )
+    date_created = models.DateTimeField(default=timezone.now)
+    date_modified = models.DateTimeField(default=timezone.now)
+
+    class Meta:
+        verbose_name = 'project ownership transfer invite'
+
+    def __str__(self):
+        return (
+            f'from {self.sender.username} to '
+            f'{self.recipient.username} '
+            f'({InviteStatusChoices(self.status)})'
+        )
+
+    def save(self, *args, **kwargs):
+        update_fields = kwargs.get('update_fields', {})
+        if not update_fields or 'date_modified' in update_fields:
+            self.date_modified = timezone.now()
+        super().save(*args, **kwargs)
diff --git a/kobo/apps/project_ownership/models/transfer.py b/kobo/apps/project_ownership/models/transfer.py
new file mode 100644
index 0000000000..3e45cebb8e
--- /dev/null
+++ b/kobo/apps/project_ownership/models/transfer.py
@@ -0,0 +1,386 @@
+from __future__ import annotations
+
+from datetime import timedelta
+from typing import Optional, Union
+
+from constance import config
+from django.conf import settings
+from django.db import models, transaction
+from django.utils import timezone
+from django.utils.translation import gettext_lazy as t
+
+from kobo.apps.help.models import InAppMessage, InAppMessageUsers
+from kpi.constants import PERM_MANAGE_ASSET
+from kpi.deployment_backends.kc_access.utils import (
+    assign_applicable_kc_permissions,
+    kc_transaction_atomic,
+    reset_kc_permissions,
+)
+from kpi.fields import KpiUidField
+from kpi.models import Asset, ObjectPermission
+from .choices import (
+    InviteStatusChoices,
+    TransferStatusChoices,
+    TransferStatusTypeChoices,
+)
+from .invite import Invite
+from ..exceptions import TransferAlreadyProcessedException
+from ..tasks import async_task, send_email_to_admins
+from ..utils import get_target_folder
+
+
+class Transfer(models.Model):
+
+    uid = KpiUidField(uid_prefix='pot')
+    asset = models.ForeignKey(
+        'kpi.Asset',
+        related_name='transfers',
+        on_delete=models.CASCADE,
+    )
+    invite = models.ForeignKey(
+        Invite,
+        related_name='transfers',
+        on_delete=models.CASCADE,
+    )
+    date_created = models.DateTimeField(default=timezone.now)
+    date_modified = models.DateTimeField(default=timezone.now)
+
+    class Meta:
+        verbose_name = 'project ownership transfer'
+
+    def __str__(self) -> str:
+        return (
+            f'{self.asset}: '
+            f'{self.invite.sender.username} -> '
+            f'{self.invite.recipient.username}'
+        )
+
+    def save(self, *args, **kwargs):
+
+        is_new = self.pk is None
+
+        update_fields = kwargs.get('update_fields', {})
+        if not update_fields or 'date_modified' in update_fields:
+            self.date_modified = timezone.now()
+
+        super().save(*args, **kwargs)
+
+        if is_new:
+            self._init_statuses()
+
+    @property
+    def status(self):
+        return self.statuses.get(
+            status_type=TransferStatusTypeChoices.GLOBAL
+        ).status
+
+    @status.setter
+    def status(self, value: Union[str, tuple[str]]):
+        with transaction.atomic():
+            global_status = self.statuses.select_for_update().get(
+                status_type=TransferStatusTypeChoices.GLOBAL
+            )
+            if isinstance(value, tuple):
+                global_status.status = value[0]
+                global_status.error = value[1]
+            else:
+                global_status.status = value
+
+            global_status.save()
+            self.date_modified = timezone.now()
+            self.save(update_fields=['date_modified'])
+            self._update_invite_status()
+
+    def transfer_project(self):
+        if self.status != TransferStatusChoices.PENDING:
+            raise TransferAlreadyProcessedException()
+
+        self.status = TransferStatusChoices.IN_PROGRESS
+        new_owner = self.invite.recipient
+        success = False
+        try:
+            if not self.asset.has_deployment:
+                with transaction.atomic():
+                    self._reassign_project_permissions(update_deployment=False)
+                    self._sent_in_app_messages()
+                    # Draft projects do not have submissions or attachments to
+                    # sync, set them to success right away
+                    status_types = [
+                        TransferStatusTypeChoices.SUBMISSIONS,
+                        TransferStatusTypeChoices.ATTACHMENTS,
+                    ]
+                    self.statuses.filter(status_type__in=status_types).update(
+                        status=TransferStatusChoices.SUCCESS
+                    )
+            else:
+                with transaction.atomic():
+                    with kc_transaction_atomic():
+                        deployment = self.asset.deployment
+                        with deployment.suspend_submissions(
+                            [self.asset.owner_id, new_owner.pk]
+                        ):
+                            # Update counters
+                            deployment.transfer_counters_ownership(new_owner)
+                            previous_owner_username = self.asset.owner.username
+                            self._reassign_project_permissions(
+                                update_deployment=True
+                            )
+                            deployment.rename_enketo_id_key(previous_owner_username)
+
+                        self._sent_in_app_messages()
+
+                # Move submissions, media files and attachments in background
+                # tasks because it can take a while to complete on big projects
+
+                # 1) Rewrite `_userform_id` in MongoDB
+                async_task.delay(
+                    self.pk, TransferStatusTypeChoices.SUBMISSIONS
+                )
+
+            # 2) Move media files to new owner's home directory
+            async_task.delay(
+                self.pk, TransferStatusTypeChoices.MEDIA_FILES
+            )
+
+            success = True
+        finally:
+            if not success:
+                # We do not know which error has been raised, so no logs are
+                # saved. Sentry is our friend to find out what's going on.
+                self.status = (
+                    TransferStatusChoices.FAILED,
+                    'Error occurred while processing transfer',
+                )
+
+    def _init_statuses(self):
+        TransferStatus.objects.bulk_create(
+            [
+                TransferStatus(transfer=self, status_type=type_)
+                for type_ in TransferStatusTypeChoices.values
+            ],
+            ignore_conflicts=True,
+        )
+
+    def _reassign_project_permissions(self, update_deployment: bool = False):
+        new_owner = self.invite.recipient
+
+        # Delete existing new owner's permissions on project if any
+        self.asset.permissions.filter(user=new_owner).delete()
+        old_owner = self.asset.owner
+        self.asset.owner = new_owner
+
+        if update_deployment:
+            owner_perms = [
+                p.permission.codename
+                for p in self.asset.permissions.filter(user=old_owner)
+            ]
+            # Add calculated permissions in case some of them match KC owner's
+            # permissions
+            owner_perms += list(Asset.CALCULATED_PERMISSIONS)
+            xform = self.asset.deployment.xform
+            xform.user_id = new_owner.pk
+            if (
+                target_folder := get_target_folder(
+                    old_owner.username, new_owner.username, xform.xls.name
+                )
+            ):
+                xform.xls.move(target_folder)
+
+            xform.save(update_fields=['user_id', 'xls'])
+            # Kobocat adds 3 more permissions that are ignored by KPI:
+            # - add_xform
+            # - transfer_xform
+            # - move_xform
+            # There are not transferred since they are not used anymore by Kobocat
+            # and it does not break anything.
+            assign_applicable_kc_permissions(self.asset, new_owner, owner_perms)
+            reset_kc_permissions(self.asset, old_owner)
+
+            backend_response = self.asset.deployment.backend_response
+            backend_response['owner'] = new_owner.username
+            self.asset.deployment.store_data(
+               {'backend_response': backend_response}
+            )
+
+        self.asset.save(
+            update_fields=['owner', '_deployment_data'],
+            create_version=False,
+            adjust_content=False,
+        )
+        self.asset.assign_perm(
+            self.invite.sender, PERM_MANAGE_ASSET
+        )
+
+    def _sent_in_app_messages(self):
+
+        # Use translatable strings here to let Transifex detect them but …
+        title = t('Project ownership transferred')
+        snippet = t(
+            'Please note that the ownership of the project **##project_name##** '
+            'has been transferred from **##previous_owner##** to **##new_owner##**.'
+        )
+        body = t(
+            'Dear ##username##,\n\n'
+            'Please note that the ownership of the project **##project_name##** '
+            'has been transferred from **##previous_owner##** to **##new_owner##**.\n\n'
+            'Note: You will continue to have the same project permissions until '
+            'they are changed.'
+        )
+
+        exclusions = [
+            settings.ANONYMOUS_USER_ID,
+            self.invite.sender.pk,
+            self.invite.recipient.pk,
+        ]
+
+        message_recipient_ids = (
+            ObjectPermission.objects.filter(asset_id=self.asset_id)
+            .exclude(user_id__in=exclusions)
+            .values_list("user_id", flat=True)
+        )
+
+        if len(message_recipient_ids):
+            transfer_identifier = (
+                f'{Transfer._meta.app_label}.{Transfer._meta.model_name}'
+            )
+            in_app_message = InAppMessage.objects.create(
+                #  … save raw strings into DB to let them be translated in
+                # the users' language in the API response, i.e. when front end
+                # exposes the message in the UI.
+                title=title._proxy____args[0],  # noqa
+                snippet=snippet._proxy____args[0],  # noqa
+                body=body._proxy____args[0],  # noqa
+                published=True,
+                valid_from=timezone.now(),
+                valid_until=timezone.now()
+                + timedelta(days=config.PROJECT_OWNERSHIP_IN_APP_MESSAGES_EXPIRY),
+                last_editor=self.invite.sender,
+                generic_related_objects={transfer_identifier: self.pk},
+            )
+
+            InAppMessageUsers.objects.bulk_create(
+                [
+                    InAppMessageUsers(user_id=user_id, in_app_message=in_app_message)
+                    for user_id in message_recipient_ids
+                ]
+            )
+
+    def _update_invite_status(self):
+        """
+        Update the status of the invite based on the status of each transfer
+
+        This method must be called within a transaction because of the lock
+        acquired the object row (with `select_for_update`)
+        """
+        invite = self.invite.__class__.objects.select_for_update().get(
+            pk=self.invite.pk
+        )
+        previous_status = invite.status
+        is_complete = True
+
+        # One of the transfers has begun, mark the invite as `in_progress`
+        if invite.status == InviteStatusChoices.PENDING:
+            invite.status = InviteStatusChoices.IN_PROGRESS
+
+        for transfer in invite.transfers.all():
+            if transfer.status == TransferStatusChoices.FAILED:
+                invite.status = InviteStatusChoices.FAILED
+                is_complete = False
+                break
+            elif transfer.status != TransferStatusChoices.SUCCESS:
+                is_complete = False
+
+        if is_complete:
+            invite.status = InviteStatusChoices.COMPLETE
+
+        if previous_status != invite.status:
+            invite.date_modified = timezone.now()
+            invite.save(update_fields=['status', 'date_modified'])
+            if invite.status == InviteStatusChoices.FAILED:
+                send_email_to_admins.delay(invite.uid)
+
+        if previous_status != invite.status:
+            self.invite.refresh_from_db()
+
+
+class TransferStatus(models.Model):
+
+    transfer = models.ForeignKey(
+        Transfer, related_name='statuses', on_delete=models.CASCADE
+    )
+    status = models.CharField(
+        max_length=11,
+        choices=TransferStatusChoices.choices,
+        default=TransferStatusChoices.PENDING,
+        db_index=True
+    )
+    status_type = models.CharField(
+        max_length=11,
+        choices=TransferStatusTypeChoices.choices,
+        default=TransferStatusTypeChoices.GLOBAL,
+        db_index=True
+    )
+    error = models.TextField(null=True)
+    date_created = models.DateTimeField(default=timezone.now)
+    date_modified = models.DateTimeField(default=timezone.now)
+
+    class Meta:
+        constraints = [
+            models.UniqueConstraint(
+                fields=['transfer', 'status_type'],
+                name='uniq_transfer_status_type',
+            )
+        ]
+
+    def __str__(self):
+        return (
+            f'Transfer #{self.transfer_id} '
+            f'[{TransferStatusTypeChoices(self.status_type).label}]: '
+            f'{TransferStatusChoices(self.status).label}'
+        )
+
+    def save(self, *args, **kwargs):
+        update_fields = kwargs.get('update_fields', {})
+        if not update_fields or 'date_modified' in update_fields:
+            self.date_modified = timezone.now()
+
+        super().save(*args, **kwargs)
+
+    @classmethod
+    def update_status(
+        cls,
+        transfer_id: int,
+        status: str,
+        status_type: str,
+        error: Optional[str] = None,
+    ):
+        with transaction.atomic():
+            # Lock row to ensure status and errors are logged properly
+            transfer_status = cls.objects.select_for_update().get(
+                transfer_id=transfer_id, status_type=status_type
+            )
+            transfer_status.status = status
+            transfer_status.error = error
+            transfer_status.date_modified = timezone.now()
+            transfer_status.save(
+                update_fields=['status', 'error', 'date_modified']
+            )
+
+            # No need to update parent if `status` is still 'in_progress'
+            if status != TransferStatusChoices.IN_PROGRESS:
+                transfer_status.update_transfer_status()
+
+    def update_transfer_status(self):
+        success = True
+        for status_ in self.transfer.statuses.exclude(
+            status_type=TransferStatusTypeChoices.GLOBAL
+        ):
+            if status_.status == TransferStatusChoices.FAILED:
+                self.transfer.status = (status_.status, status_.error)
+                return
+            elif status_.status != TransferStatusChoices.SUCCESS:
+                success = False
+                continue
+
+        if success:
+            self.transfer.status = TransferStatusChoices.SUCCESS
diff --git a/kobo/apps/project_ownership/serializers/__init__.py b/kobo/apps/project_ownership/serializers/__init__.py
new file mode 100644
index 0000000000..2039f0cc04
--- /dev/null
+++ b/kobo/apps/project_ownership/serializers/__init__.py
@@ -0,0 +1,2 @@
+from .invite import InviteSerializer
+from .transfer import TransferListSerializer, TransferDetailSerializer
diff --git a/kobo/apps/project_ownership/serializers/invite.py b/kobo/apps/project_ownership/serializers/invite.py
new file mode 100644
index 0000000000..3a5ed6dc79
--- /dev/null
+++ b/kobo/apps/project_ownership/serializers/invite.py
@@ -0,0 +1,327 @@
+from __future__ import annotations
+
+from constance import config
+from django.conf import settings
+from django.contrib.auth import get_user_model
+from django.db import transaction
+from django.db.models import Max, Prefetch
+from django.utils.translation import gettext as t
+from rest_framework import exceptions, serializers
+from rest_framework.reverse import reverse
+
+from kpi.fields import RelativePrefixHyperlinkedRelatedField
+from kpi.models import Asset
+from kpi.utils.mailer import EmailMessage, Mailer
+from .transfer import TransferListSerializer
+from ..models import (
+    Invite,
+    InviteStatusChoices,
+    Transfer,
+    TransferStatus,
+    TransferStatusChoices,
+    TransferStatusTypeChoices,
+)
+
+
+class InviteSerializer(serializers.ModelSerializer):
+
+    url = serializers.HyperlinkedIdentityField(
+        lookup_field='uid',
+        view_name='project-ownership-invite-detail',
+    )
+    sender = serializers.SerializerMethodField()
+    recipient = RelativePrefixHyperlinkedRelatedField(
+        view_name='user-detail',
+        lookup_field='username',
+        queryset=get_user_model().objects.filter(is_active=True),
+        style={'base_template': 'input.html'}  # Render as a simple text box
+    )
+    date_created = serializers.SerializerMethodField()
+    date_modified = serializers.SerializerMethodField()
+    transfers = serializers.SerializerMethodField()
+    assets = serializers.ListField(
+        write_only=True, child=serializers.CharField(), required=False
+    )
+
+    class Meta:
+        model = Invite
+        fields = (
+            'url',
+            'sender',
+            'recipient',
+            'status',
+            'date_created',
+            'date_modified',
+            'transfers',
+            'assets',
+        )
+
+    def create(self, validated_data: dict) -> Invite:
+        request = self.context['request']
+
+        with transaction.atomic():
+            instance = Invite.objects.create(
+                sender=request.user,
+                recipient=validated_data['recipient']
+            )
+            transfers = Transfer.objects.bulk_create(
+                [
+                    Transfer(invite=instance, asset=asset)
+                    for asset in validated_data['assets']
+                ]
+            )
+            statuses = []
+            for transfer in transfers:
+                for status_type in TransferStatusTypeChoices.values:
+                    statuses.append(
+                        TransferStatus(
+                            transfer=transfer,
+                            status_type=status_type,
+                        )
+                    )
+            TransferStatus.objects.bulk_create(statuses)
+
+        if config.PROJECT_OWNERSHIP_AUTO_ACCEPT_INVITES:
+            instance = self.update(
+                instance, {'status': InviteStatusChoices.ACCEPTED}
+            )
+        else:
+            self._send_invite_email(instance)
+
+        return instance
+
+    def get_transfers(self, invite: Invite) -> list:
+        transfers = (
+            invite.transfers.select_related('asset')
+            .only('asset__uid')
+            .prefetch_related(
+                Prefetch(
+                    'statuses',
+                    queryset=TransferStatus.objects.filter(
+                        status_type=TransferStatusTypeChoices.GLOBAL
+                    ),
+                    to_attr='prefetched_status',
+                ),
+            )
+        )
+
+        return TransferListSerializer(
+            transfers, many=True, context=self.context
+        ).data
+
+    def get_date_created(self, invite: Invite) -> str:
+        return invite.date_created.strftime('%Y-%m-%dT%H:%M:%SZ')
+
+    def get_date_modified(self, invite: Invite) -> str:
+        return invite.date_modified.strftime('%Y-%m-%dT%H:%M:%SZ')
+
+    def get_sender(self, invite: Invite) -> str:
+        request = self.context['request']
+        return reverse(
+            'user-detail', args=[invite.sender.username], request=request
+        )
+
+    def validate_assets(self, asset_uids: list[str]) -> list[Asset]:
+        if self.instance is not None:
+            raise serializers.ValidationError(t(
+                'This field cannot be modified'
+            ))
+
+        request = self.context['request']
+        assets = Asset.objects.only('pk', 'uid').filter(
+            uid__in=asset_uids, owner=request.user
+        )
+        count = assets.count()
+        if count != len(asset_uids):
+            raise serializers.ValidationError(t(
+                'You must be the owner of each project you want to transfer'
+            ))
+
+        # We need to retrieve the latest transfers for current user and projects,
+        # because this rare case but could happen:
+        #   - UserA transfers project to UserB
+        #   - UserB transfers project back to UserA
+        #   - UserA transfers project to UserC
+        # We do want to block UserA to transfer again this project to UserC.
+
+        max_transfer_ids_per_asset = [
+            r['pk__max']
+            for r in (
+                Transfer.objects.values('asset')
+                .annotate(Max('pk'))
+                .filter(asset__in=assets)
+                .order_by()
+            )
+        ]
+
+        queryset = Transfer.objects.filter(
+            pk__in=max_transfer_ids_per_asset, invite__sender=request.user
+        )
+
+        errors = []
+        # Validate whether the asset does not belong to an invite that has been
+        # already processed. We only accept re-invitations on projects for which
+        # the invitation was declined or cancelled.
+        for transfer in queryset:
+            if transfer.invite.status not in [
+                InviteStatusChoices.DECLINED,
+                InviteStatusChoices.CANCELLED,
+                InviteStatusChoices.EXPIRED,
+            ]:
+                errors.append(
+                    t(
+                        'Project `##asset_uid##` cannot be transferred. '
+                        'Current status: ##status##'
+                    )
+                    .replace('##asset_uid##', transfer.asset.uid)
+                    .replace('##status##', transfer.invite.status)
+                )
+
+        if errors:
+            raise serializers.ValidationError(errors)
+
+        return assets
+
+    def validate_recipient(self, user: 'auth.User') -> 'auth.User':
+        if self.instance is None:
+            return user
+
+        raise serializers.ValidationError(t(
+            'This field cannot be modified'
+        ))
+
+    def validate_status(self, status: str) -> str:
+        if (
+            self.instance is None and status
+            or self.instance.status != InviteStatusChoices.PENDING
+        ):
+            raise serializers.ValidationError(t(
+                'This field cannot be modified'
+            ))
+
+        request = self.context['request']
+
+        if not (
+            request.user == self.instance.recipient
+            and status
+            in [
+                InviteStatusChoices.DECLINED,
+                InviteStatusChoices.ACCEPTED,
+            ]
+            or (
+                request.user == self.instance.sender
+                and status == InviteStatusChoices.CANCELLED
+            )
+        ):
+            raise exceptions.PermissionDenied()
+
+        return status
+
+    def update(self, instance: Invite, validated_data: dict) -> Invite:
+
+        status = validated_data['status']
+
+        # Keep `status` value to email condition below
+        instance.status = (
+            InviteStatusChoices.IN_PROGRESS
+            if status == InviteStatusChoices.ACCEPTED
+            else status
+        )
+        instance.save(update_fields=['status', 'date_modified'])
+
+        for transfer in instance.transfers.all():
+            if instance.status != InviteStatusChoices.IN_PROGRESS:
+                transfer.statuses.update(
+                    status=TransferStatusChoices.CANCELLED
+                )
+            else:
+                transfer.transfer_project()
+
+        if not config.PROJECT_OWNERSHIP_AUTO_ACCEPT_INVITES:
+            if status == InviteStatusChoices.DECLINED:
+                self._send_refusal_email(instance)
+            elif status == InviteStatusChoices.ACCEPTED:
+                self._send_acceptance_email(instance)
+
+        return instance
+
+    def _send_acceptance_email(self, invite: Invite):
+
+        template_variables = {
+            'username': invite.sender.username,
+            'recipient': invite.recipient.username,
+            'transfers': [
+                {
+                    'asset_uid': transfer.asset.uid,
+                    'asset_name': transfer.asset.name,
+                }
+                for transfer in invite.transfers.all()
+            ],
+            'base_url': settings.KOBOFORM_URL,
+        }
+
+        email_message = EmailMessage(
+            to=invite.sender.email,
+            subject=t('KoboToolbox project ownership transfer accepted'),
+            plain_text_content_or_template='emails/accepted_invite.txt',
+            template_variables=template_variables,
+            html_content_or_template='emails/accepted_invite.html',
+            language=invite.recipient.extra_details.data.get('last_ui_language')
+        )
+
+        Mailer.send(email_message)
+
+    def _send_invite_email(self, invite: Invite):
+
+        template_variables = {
+            'username': invite.recipient.username,
+            'sender_username': invite.sender.username,
+            'sender_email': invite.sender.email,
+            'transfers': [
+                {
+                    'asset_uid': transfer.asset.uid,
+                    'asset_name': transfer.asset.name,
+                }
+                for transfer in invite.transfers.all()
+            ],
+            'base_url': settings.KOBOFORM_URL,
+            'invite_expiry': config.PROJECT_OWNERSHIP_INVITE_EXPIRY,
+            'invite_uid': invite.uid,
+        }
+
+        email_message = EmailMessage(
+            to=invite.recipient.email,
+            subject=t('Action required: KoboToolbox project ownership transfer request'),
+            plain_text_content_or_template='emails/new_invite.txt',
+            template_variables=template_variables,
+            html_content_or_template='emails/new_invite.html',
+            language=invite.recipient.extra_details.data.get('last_ui_language')
+        )
+
+        Mailer.send(email_message)
+
+    def _send_refusal_email(self, invite: Invite):
+
+        template_variables = {
+            'username': invite.sender.username,
+            'recipient': invite.recipient.username,
+            'transfers': [
+                {
+                    'asset_uid': transfer.asset.uid,
+                    'asset_name': transfer.asset.name,
+                }
+                for transfer in invite.transfers.all()
+            ],
+            'base_url': settings.KOBOFORM_URL,
+        }
+
+        email_message = EmailMessage(
+            to=invite.sender.email,
+            subject=t('KoboToolbox project ownership transfer incomplete'),
+            plain_text_content_or_template='emails/declined_invite.txt',
+            template_variables=template_variables,
+            html_content_or_template='emails/declined_invite.html',
+            language=invite.recipient.extra_details.data.get('last_ui_language')
+        )
+
+        Mailer.send(email_message)
diff --git a/kobo/apps/project_ownership/serializers/transfer.py b/kobo/apps/project_ownership/serializers/transfer.py
new file mode 100644
index 0000000000..b365ef5155
--- /dev/null
+++ b/kobo/apps/project_ownership/serializers/transfer.py
@@ -0,0 +1,104 @@
+from __future__ import annotations
+
+from rest_framework import serializers
+from rest_framework.reverse import reverse
+
+from kpi.fields import RelativePrefixHyperlinkedRelatedField
+from kpi.models.asset import Asset
+from ..models import Transfer, TransferStatus, TransferStatusTypeChoices
+
+
+class TransferListSerializer(serializers.ModelSerializer):
+
+    url = serializers.SerializerMethodField()
+    asset = RelativePrefixHyperlinkedRelatedField(
+        view_name='asset-detail',
+        lookup_field='uid',
+        queryset=Asset.objects.all(),
+        style={'base_template': 'input.html'}  # Render as a simple text box
+    )
+    asset__name = serializers.SerializerMethodField()
+    error = serializers.SerializerMethodField()
+    date_modified = serializers.SerializerMethodField()
+    status = serializers.SerializerMethodField()
+
+    class Meta:
+        model = Transfer
+        fields = (
+            'url',
+            'asset',
+            'asset__name',
+            'status',
+            'error',
+            'date_modified',
+        )
+
+    def get_asset__name(self, transfer: Transfer) -> str:
+        return transfer.asset.name
+
+    def get_date_modified(self, transfer: Transfer) -> str:
+        return transfer.date_modified.strftime('%Y-%m-%dT%H:%M:%SZ')
+
+    def get_error(self, transfer: Transfer) -> str:
+        return transfer.statuses.get(
+            status_type=TransferStatusTypeChoices.GLOBAL
+        ).error
+
+    def get_status(self, transfer: Transfer) -> str:
+
+        # Use prefetched attributes if they are present instead of querying the
+        # DB one more time.
+
+        # From the invite endpoints
+        if hasattr(transfer, 'prefetched_status'):
+            # return the first one because we only fetch GLOBAL status,
+            return transfer.prefetched_status[0].status
+
+        # From the transfer detail endpoint
+        if hasattr(transfer, 'prefetched_statuses'):
+            for status in transfer.prefetched_statuses:
+                if status.status_type == TransferStatusTypeChoices.GLOBAL:
+                    return status.status
+
+        return transfer.status
+
+    def get_url(self, transfer: Transfer) -> str:
+        return reverse(
+            'project-ownership-transfer-detail',
+            kwargs={
+                'parent_lookup_invite_uid': transfer.invite.uid,
+                'uid': transfer.uid,
+            },
+            request=self.context.get('request', None),
+        )
+
+
+class TransferDetailSerializer(TransferListSerializer):
+
+    statuses = serializers.SerializerMethodField()
+    status = serializers.SerializerMethodField()
+
+    class Meta(TransferListSerializer.Meta):
+        fields = (
+            'url',
+            'asset',
+            'status',
+            'date_modified',
+            'statuses',
+        )
+
+    def get_statuses(self,  transfer: Transfer) -> list[dict]:
+        return TransferStatusSerializer(
+            transfer.prefetched_statuses, many=True, context=self.context
+        ).data
+
+
+class TransferStatusSerializer(serializers.ModelSerializer):
+
+    class Meta:
+        model = TransferStatus
+        fields = (
+            'status',
+            'status_type',
+            'error',
+        )
diff --git a/kobo/apps/project_ownership/tasks.py b/kobo/apps/project_ownership/tasks.py
new file mode 100644
index 0000000000..87b37d5964
--- /dev/null
+++ b/kobo/apps/project_ownership/tasks.py
@@ -0,0 +1,262 @@
+from datetime import timedelta
+
+from celery.signals import task_failure, task_retry
+from celery.exceptions import SoftTimeLimitExceeded, TimeLimitExceeded
+from constance import config
+from django.apps import apps
+from django.conf import settings
+from django.urls import reverse
+from django.utils import timezone
+from django.utils.translation import gettext as t
+
+from kobo.celery import celery_app
+from kpi.utils.mailer import EmailMessage, Mailer
+from .exceptions import AsyncTaskException
+from .models.choices import (
+    InviteStatusChoices,
+    TransferStatusChoices,
+    TransferStatusTypeChoices,
+)
+from .utils import (
+    move_attachments,
+    move_media_files,
+    rewrite_mongo_userform_id,
+)
+
+
+@celery_app.task(
+    autoretry_for=(
+        SoftTimeLimitExceeded,
+        TimeLimitExceeded,
+    ),
+    max_retry=5,
+    retry_backoff=60,
+    retry_jitter=False,
+    queue='kpi_low_priority_queue',
+    soft_time_limit=settings.CELERY_LONG_RUNNING_TASK_SOFT_TIME_LIMIT,
+    time_limit=settings.CELERY_LONG_RUNNING_TASK_TIME_LIMIT,
+)
+def async_task(transfer_id: int, async_task_type: str):
+    # Avoid circular import
+    Transfer = apps.get_model('project_ownership', 'Transfer')  # noqa
+    TransferStatus = apps.get_model('project_ownership', 'TransferStatus')  # noqa
+
+    transfer = Transfer.objects.get(pk=transfer_id)
+
+    if transfer.status != TransferStatusChoices.IN_PROGRESS:
+        raise AsyncTaskException(f'`{transfer}` is not in progress')
+
+    TransferStatus.update_status(
+        transfer_id=transfer_id,
+        status=TransferStatusChoices.IN_PROGRESS,
+        status_type=async_task_type,
+    )
+
+    if async_task_type == TransferStatusTypeChoices.ATTACHMENTS:
+        move_attachments(transfer)
+    elif async_task_type == TransferStatusTypeChoices.MEDIA_FILES:
+        move_media_files(transfer)
+    elif async_task_type == TransferStatusTypeChoices.SUBMISSIONS:
+        rewrite_mongo_userform_id(transfer)
+        # Attachments cannot be moved before `_userform_id` is updated for
+        # each submission
+        async_task.delay(transfer_id, TransferStatusTypeChoices.ATTACHMENTS)
+    else:
+        raise NotImplementedError(f'`{async_task_type}` is not supported')
+
+
+@task_failure.connect(sender=async_task)
+def async_task_failure(sender=None, **kwargs):
+    # Avoid circular import
+    TransferStatus = apps.get_model('project_ownership', 'TransferStatus')  # noqa
+
+    async_task_type = kwargs['args'][1]
+    error = str(kwargs['exception'])
+    transfer_id = kwargs['args'][0]
+
+    if 'SIGKILL' in error:
+        # We want the process to recover if it is killed
+        TransferStatus.update_status(
+            transfer_id=transfer_id,
+            status=TransferStatusChoices.IN_PROGRESS,
+            status_type=async_task_type,
+            error=error,
+        )
+    else:
+        TransferStatus.update_status(
+            transfer_id=transfer_id,
+            status=TransferStatusChoices.FAILED,
+            status_type=async_task_type,
+            error=error,
+        )
+
+
+@task_retry.connect(sender=async_task)
+def async_task_retry(sender=None, **kwargs):
+    # This may be useless because errors can be overwritten at a later retry, but
+    # it could help to debug if something breaks before retry
+
+    # Avoid circular import
+    TransferStatus = apps.get_model('project_ownership', 'TransferStatus')  # noqa
+
+    async_task_type = kwargs['request'].get('args')[1]
+    error = str(kwargs['reason'])
+    transfer_id = kwargs['request'].get('args')[0]
+
+    TransferStatus.update_status(
+       transfer_id, TransferStatusChoices.FAILED, async_task_type, error
+    )
+
+
+@celery_app.task
+def garbage_collector():
+    """
+    Delete obsolete invites (except failed one)
+    """
+    # Avoid circular import
+    Invite = apps.get_model('project_ownership', 'Invite')  # noqa
+
+    # Keep failed invites forever for debugging purpose.
+    deletion_threshold = timezone.now() - timedelta(
+        days=config.PROJECT_OWNERSHIP_INVITE_HISTORY_RETENTION
+    )
+    Invite.objects.filter(date_created__lte=deletion_threshold).exclude(
+        status=InviteStatusChoices.FAILED
+    ).delete()
+
+
+@celery_app.task
+def mark_as_expired():
+    """
+    Flag as expired not accepted (or declined) invites after
+    """
+    # Avoid circular import
+    Invite = apps.get_model('project_ownership', 'Invite')  # noqa
+
+    expiry_threshold = timezone.now() - timedelta(
+        days=config.PROJECT_OWNERSHIP_INVITE_EXPIRY
+    )
+
+    invites_to_update = []
+    for invite in Invite.objects.filter(
+        date_created__lte=expiry_threshold,
+        status=InviteStatusChoices.PENDING,
+    ):
+        invite.status = InviteStatusChoices.EXPIRED
+        invites_to_update.append(invite)
+
+    if not invites_to_update:
+        return
+
+    # Notify senders
+    Invite.objects.bulk_update(invites_to_update, fields=['status'])
+    email_messages = []
+
+    for invite in invites_to_update:
+        template_variables = {
+            'username': invite.sender.username,
+            'recipient': invite.recipient.username,
+            'transfers': [
+                {
+                    'asset_uid': transfer.asset.uid,
+                    'asset_name': transfer.asset.name,
+                }
+                for transfer in invite.transfers.all()
+            ],
+            'base_url': settings.KOBOFORM_URL,
+        }
+        email_messages.append(
+            EmailMessage(
+                to=invite.sender.email,
+                subject=t('Invite has expired'),
+                plain_text_content_or_template='emails/expired_invite.txt',
+                template_variables=template_variables,
+                html_content_or_template='emails/expired_invite.html',
+                language=invite.sender.extra_details.data.get('last_ui_language')
+            )
+        )
+
+    Mailer.send(email_messages)
+
+
+@celery_app.task
+def mark_stuck_tasks_as_failed():
+    """
+    Flag tasks as failed if they have been created for a long time.
+    """
+    # Avoid circular import
+    TransferStatus = apps.get_model('project_ownership', 'TransferStatus')  # noqa
+    stuck_threshold = timezone.now() - timedelta(
+        minutes=config.PROJECT_OWNERSHIP_STUCK_THRESHOLD
+    )
+
+    for transfer_status in TransferStatus.objects.filter(
+        date_created__lte=stuck_threshold,
+        status=TransferStatusChoices.IN_PROGRESS,
+    ).exclude(status_type=TransferStatusTypeChoices.GLOBAL):
+        TransferStatus.update_status(
+            transfer_id=transfer_status.transfer.pk,
+            status=TransferStatusChoices.FAILED,
+            status_type=transfer_status.status_type,
+            error=(
+                f'Task has been stuck for more than {stuck_threshold} minutes',
+            )
+        )
+
+
+@celery_app.task
+def send_email_to_admins(invite_uid: str):
+    """
+    Send failure reports to admins
+    """
+    admin_emails = config.PROJECT_OWNERSHIP_ADMIN_EMAIL.strip()
+    if not admin_emails:
+        return
+
+    invite_url = settings.KOBOFORM_URL + reverse(
+        'api_v2:project-ownership-invite-detail', args=(invite_uid,)
+    )
+
+    email_message = EmailMessage(
+        to=admin_emails.split('\n'),
+        subject=config.PROJECT_OWNERSHIP_ADMIN_EMAIL_SUBJECT.strip(),
+        plain_text_content_or_template=(
+            config.PROJECT_OWNERSHIP_ADMIN_EMAIL_BODY.replace(
+                '##invite_url##', invite_url
+            )
+        ),
+    )
+
+    Mailer.send(email_message)
+
+
+@celery_app.task
+def task_rescheduler():
+    """
+    This task restarts previous tasks which have been stopped accidentally,
+    e.g.: docker container/k8s pod restart or OOM killed.
+
+    FIXME `ack_late=True` would have been a better (more reliable) option, i.e.:
+        delegate to celery internal mechanism to restart tasks itself.
+        Unfortunately, it does not seem to work as a parameter of @celery_app.task
+        decorator (it is ignored), but as a global setting - which would have
+        affect all celery tasks across the app.
+    """
+    # Avoid circular import
+    TransferStatus = apps.get_model('project_ownership', 'TransferStatus')  # noqa
+    resume_threshold = timezone.now() - timedelta(
+        minutes=config.PROJECT_OWNERSHIP_RESUME_THRESHOLD
+    )
+    stuck_threshold = timezone.now() - timedelta(
+        minutes=config.PROJECT_OWNERSHIP_STUCK_THRESHOLD
+    )
+
+    # Resume stopped involuntarily tasks
+    for transfer_status in TransferStatus.objects.filter(
+        date_modified__lte=resume_threshold,
+        date_created__gt=stuck_threshold,
+        status=TransferStatusChoices.IN_PROGRESS,
+    ).exclude(status_type=TransferStatusTypeChoices.GLOBAL):
+        async_task.delay(
+            transfer_status.transfer.pk, transfer_status.status_type
+        )
diff --git a/kobo/apps/project_ownership/templates/emails/accepted_invite.html b/kobo/apps/project_ownership/templates/emails/accepted_invite.html
new file mode 100644
index 0000000000..1a738f35ed
--- /dev/null
+++ b/kobo/apps/project_ownership/templates/emails/accepted_invite.html
@@ -0,0 +1,30 @@
+{% load i18n %}
+{% load strings %}
+{% trans "Projects:" as projects_label %}
+
+<p>{% trans "Dear" %} {{ username }},</p>
+
+{% if transfers|length == 1 %}
+  <p>{% blocktrans with asset_uid=transfers.0.asset_uid asset_name=transfers.0.asset_name  %}{{ recipient }} has accepted your request to transfer ownership of the project <a href="{{ base_url }}/#/forms/{{ asset_uid }}/landing">{{ asset_name }}</a> to you.{% endblocktrans %}</p>
+
+  <p>{% trans "All submissions, data storage, and transcription and translation usage for this project will be transferred to the new project owner." %}</p>
+
+  <p>{% trans "Note: You will continue to have permissions to manage the project until the user permissions are changed." %}</p>
+{% else %}
+  <p>{% blocktrans %}{{ recipient }} has accepted your request to transfer ownership of these projects:{% endblocktrans %}
+    <ul>
+    {% for transfer in transfers %}
+      {% url 'api_v2:asset-detail' uid=transfer.asset_uid as asset_url %}
+      <li><a href="{{ base_url }}/#/forms/{{transfer.asset_uid}}/landing">{{ transfer.asset_name }}</a></li>
+    {% endfor %}
+    </ul>
+  </p>
+
+  <p>{% trans "All submissions, data storage, and transcription and translation usage for these projects will be transferred to the new project owner." %}</p>
+
+  <p>{% trans "Note: You will continue to have permissions to manage these projects until the user permissions are changed." %}</p>
+{% endif %}
+
+<p>
+&nbsp;-&nbsp;KoboToolbox
+</p>
diff --git a/kobo/apps/project_ownership/templates/emails/accepted_invite.txt b/kobo/apps/project_ownership/templates/emails/accepted_invite.txt
new file mode 100644
index 0000000000..68e41163d0
--- /dev/null
+++ b/kobo/apps/project_ownership/templates/emails/accepted_invite.txt
@@ -0,0 +1,22 @@
+{% load i18n %}
+{% load strings %}
+{% trans "Dear" %} {{ username }},
+
+{% if transfers|length == 1 %}
+{% blocktrans with asset_uid=transfers.0.asset_uid asset_name=transfers.0.asset_name  %}{{ recipient }} has accepted your request to transfer ownership of the project {{ asset_name }} ({{ base_url }}/#/forms/{{ asset_uid }}/landing) to you.{% endblocktrans %}
+
+{% trans "All submissions, data storage, and transcription and translation usage for the project will be transferred to the new project owner." %}
+
+{% trans "Note: You will continue to have permissions to manage the project until the user permissions are changed." %}
+{% else %}
+{% blocktrans %}{{ recipient }} has accepted your request to transfer ownership of these projects:{% endblocktrans %}
+{% for transfer in transfers %}
+    * {{ transfer.asset_name }} - [{{ base_url }}/#/forms/{{ transfer.asset_uid }}/landing]
+{% endfor %}
+
+{% trans "All submissions, data storage, and transcription and translation usage for these projects will be transferred to the new project owner." %}
+
+{% trans "Note: You will continue to have permissions to manage these projects until the user permissions are changed." %}
+{% endif %}
+
+- KoboToolbox
diff --git a/kobo/apps/project_ownership/templates/emails/declined_invite.html b/kobo/apps/project_ownership/templates/emails/declined_invite.html
new file mode 100644
index 0000000000..384240a0d5
--- /dev/null
+++ b/kobo/apps/project_ownership/templates/emails/declined_invite.html
@@ -0,0 +1,24 @@
+{% load i18n %}
+{% load strings %}
+{% trans "Projects:" as projects_label %}
+
+<p>{% trans "Dear" %} {{ username }},</p>
+
+{% if transfers|length == 1 %}
+  <p>{% blocktrans with asset_uid=transfers.0.asset_uid asset_name=transfers.0.asset_name  %}{{ recipient }} has declined your request to transfer ownership of the project <a href="{{ base_url }}/#/forms/{{ asset_uid }}/landing">{{ asset_name }}</a>.{% endblocktrans %}</p>
+
+  <p>{% trans "You will remain the owner of the project. The submissions, data storage, and transcription and translation usage for the project have not been transferred." %}</p>
+{% else %}
+  <p>{% blocktrans %}{{ recipient }} has declined your request to transfer ownership of these projects:{% endblocktrans %}
+    <ul>
+    {% for transfer in transfers %}
+      <li><a href="{{ base_url }}/#/forms/{{ transfer.asset_uid }}/landing">{{ transfer.asset_name }}</a></li>
+    {% endfor %}
+    </ul>
+  </p>
+
+  {% trans "You will remain the owner of these projects. The submissions, data storage, and transcription and translation usage for these projects have not been transferred." %}
+{% endif %}
+<p>
+&nbsp;-&nbsp;KoboToolbox
+</p>
diff --git a/kobo/apps/project_ownership/templates/emails/declined_invite.txt b/kobo/apps/project_ownership/templates/emails/declined_invite.txt
new file mode 100644
index 0000000000..f0165f7462
--- /dev/null
+++ b/kobo/apps/project_ownership/templates/emails/declined_invite.txt
@@ -0,0 +1,19 @@
+{% load i18n %}
+{% load strings %}
+{% trans "Projects:" as projects_label %}
+
+{% trans "Dear" %} {{ username }},
+{% if transfers|length == 1 %}
+{% blocktrans with asset_uid=transfers.0.asset_uid asset_name=transfers.0.asset_name  %}{{ recipient }} has declined your request to transfer ownership of the project {{ asset_name }} ({{ base_url }}/#/forms/{{ asset_uid }}/landing).{% endblocktrans %}
+
+{% trans "You will remain the owner of the project. The submissions, data storage, and transcription and translation usage for the project have not been transferred." %}
+{% else %}
+{% blocktrans %}{{ recipient }} has declined your request to transfer ownership of these projects:{% endblocktrans %}
+    {% for transfer in transfers %}
+    * {{ transfer.asset_name }} - [{{ base_url }}/#/forms/{{ transfer.asset_uid }}/landing]
+    {% endfor %}
+
+{% trans "You will remain the owner of these projects. The submissions, data storage, and transcription and translation usage for these projects have not been transferred." %}
+{% endif %}
+
+- KoboToolbox
diff --git a/kobo/apps/project_ownership/templates/emails/expired_invite.html b/kobo/apps/project_ownership/templates/emails/expired_invite.html
new file mode 100644
index 0000000000..24c2f0b951
--- /dev/null
+++ b/kobo/apps/project_ownership/templates/emails/expired_invite.html
@@ -0,0 +1,17 @@
+{% load i18n %}
+{% load strings %}
+{% trans "Projects:" as projects_label %}
+
+<p>{% trans "Dear" %} {{ username }},</p>
+<p>{% blocktrans %}The request you have sent to <b>{{ recipient }}</b> has expired.{% endblocktrans %}</p>
+
+<b>{{ projects_label }}</b>
+<ul>
+{% for transfer in transfers %}
+  <li><a href="{{ base_url }}/#/forms/{{ transfer.asset_uid }}/landing">{{ transfer.asset_name }}</a></li>
+{% endfor %}
+</ul>
+
+<p>
+&nbsp;-&nbsp;KoboToolbox
+</p>
diff --git a/kobo/apps/project_ownership/templates/emails/expired_invite.txt b/kobo/apps/project_ownership/templates/emails/expired_invite.txt
new file mode 100644
index 0000000000..d12423d1a5
--- /dev/null
+++ b/kobo/apps/project_ownership/templates/emails/expired_invite.txt
@@ -0,0 +1,14 @@
+{% load i18n %}
+{% load strings %}
+{% trans "Projects:" as projects_label %}
+
+{% trans "Dear" %} {{ username }},
+
+{% blocktrans %}The request you have sent to {{ recipient }} has expired.{% endblocktrans %}
+
+{{ projects_label }}
+{% for transfer in transfers %}
+* {{ transfer.asset_name }} - [{{ base_url }}/#/forms/{{ transfer.asset_uid }}/landing]
+{% endfor %}
+
+- KoboToolbox
diff --git a/kobo/apps/project_ownership/templates/emails/new_invite.html b/kobo/apps/project_ownership/templates/emails/new_invite.html
new file mode 100644
index 0000000000..dd7872d604
--- /dev/null
+++ b/kobo/apps/project_ownership/templates/emails/new_invite.html
@@ -0,0 +1,31 @@
+{% load i18n %}
+{% load strings %}
+{% trans "Projects:" as projects_label %}
+
+<p>{% trans "Dear" %} {{ username }},</p>
+
+{% if transfers|length == 1 %}
+  <p>{% blocktrans with asset_uid=transfers.0.asset_uid asset_name=transfers.0.asset_name  %}{{ sender_username }} ({{ sender_email }}) has requested to transfer ownership of the project <a href="{{ base_url }}/#/forms/{{ asset_uid }}/landing">{{ asset_name }}</a> to you.{% endblocktrans %}</p>
+
+  <p>{% trans "When you accept the ownership transfer, all of the submissions, data storage, and transcription and translation usage for these projects will be transferred to you and count against your plan limits." %}</p>
+{% else %}
+  <p>{% blocktrans %}{{ sender_username }} ({{ sender_email }}) has requested to transfer ownership of the following projects to you:{% endblocktrans %}
+    <ul>
+    {% for transfer in transfers %}
+      <li><a href="{{ base_url }}/#/forms/{{ transfer.asset_uid }}/landing">{{ transfer.asset_name }}</a></li>
+    {% endfor %}
+    </ul>
+  </p>
+
+  <p>{% trans "When you accept the ownership transfer, all of the submissions, data storage, and transcription and translation usage for these projects will be transferred to you and count against your plan limits." %}</p>
+{% endif %}
+
+<p>{% trans "If you are unsure, please contact the current owner." %}</p>
+
+<p>{% blocktrans %}This transfer request will expire in {{ invite_expiry }} days.{% endblocktrans %}</p>
+
+<p>{% blocktrans %}To respond to this transfer request, please use the following link: {{ base_url }}/#/projects/home?invite={{ invite_uid }}{% endblocktrans %}</p>
+
+<p>
+&nbsp;-&nbsp;KoboToolbox
+</p>
diff --git a/kobo/apps/project_ownership/templates/emails/new_invite.txt b/kobo/apps/project_ownership/templates/emails/new_invite.txt
new file mode 100644
index 0000000000..0adc49ff7b
--- /dev/null
+++ b/kobo/apps/project_ownership/templates/emails/new_invite.txt
@@ -0,0 +1,25 @@
+{% load i18n %}
+{% load strings %}
+{% trans "Projects:" as projects_label %}
+
+{% trans "Dear" %} {{ username }},
+{% if transfers|length == 1 %}
+{% blocktrans with asset_uid=transfers.0.asset_uid asset_name=transfers.0.asset_name  %}{{ sender_username }} ({{ sender_email }}) has requested to transfer ownership of the project {{ asset_name }} ({{ base_url }}/#/forms/{{ asset_uid }}/landing) to you.{% endblocktrans %}
+
+{% trans "When you accept the ownership transfer, all of the submissions, data storage, and transcription and translation usage for the project will be transferred to you and count against your plan limits." %}
+{% else %}
+{% blocktrans %}{{ sender_username }} ({{ sender_email }}) has requested to transfer ownership of the following projects to you:{% endblocktrans %}
+    {% for transfer in transfers %}
+    * {{ transfer.asset_name }} - [{{ base_url }}/#/forms/{{ asset_uid }}/landing]
+    {% endfor %}
+
+{% trans "When you accept the ownership transfer, all of the submissions, data storage, and transcription and translation usage for these projects will be transferred to you and count against your plan limits." %}
+{% endif %}
+
+{% trans "If you are unsure, please contact the current owner." %}
+
+{% blocktrans %}This transfer request will expire in {{ invite_expiry }} days.{% endblocktrans %}
+
+{% blocktrans %}To respond to this transfer request, please use the following link: {{ base_url }}/#/projects/home?invite={{ invite_uid }}{% endblocktrans %}
+
+- KoboToolbox
diff --git a/kobo/apps/project_ownership/tests/__init__.py b/kobo/apps/project_ownership/tests/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/kobo/apps/project_ownership/tests/api/__init__.py b/kobo/apps/project_ownership/tests/api/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/kobo/apps/project_ownership/tests/api/v2/__init__.py b/kobo/apps/project_ownership/tests/api/v2/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/kobo/apps/project_ownership/tests/api/v2/test_api.py b/kobo/apps/project_ownership/tests/api/v2/test_api.py
new file mode 100644
index 0000000000..f1c49edfd4
--- /dev/null
+++ b/kobo/apps/project_ownership/tests/api/v2/test_api.py
@@ -0,0 +1,648 @@
+import datetime
+import uuid
+
+from constance.test import override_config
+from django.conf import settings
+from django.contrib.auth import get_user_model
+from mock import patch, MagicMock
+from rest_framework import status
+from rest_framework.reverse import reverse
+
+from kobo.apps.project_ownership.models import (
+    Invite,
+    InviteStatusChoices,
+    Transfer,
+)
+from kobo.apps.project_ownership.tests.utils import MockServiceUsageSerializer
+from kobo.apps.trackers.utils import update_nlp_counter
+
+from kpi.constants import PERM_VIEW_ASSET
+from kpi.models import Asset
+from kpi.tests.base_test_case import BaseAssetTestCase
+from kpi.tests.kpi_test_case import KpiTestCase
+from kpi.urls.router_api_v2 import URL_NAMESPACE as ROUTER_URL_NAMESPACE
+
+
+class ProjectOwnershipAPITestCase(KpiTestCase):
+
+    URL_NAMESPACE = ROUTER_URL_NAMESPACE
+
+    def setUp(self) -> None:
+
+        super().setUp()
+        User = get_user_model()  # noqa
+        self.someuser = User.objects.get(username='someuser')
+        self.anotheruser = User.objects.get(username='anotheruser')
+        self.thirduser = User.objects.create_user(
+            username='thirduser',
+            password='thirduser',
+            email='thirduser@example.com',
+        )
+
+        self.invite_url = reverse(
+            self._get_endpoint('project-ownership-invite-list')
+        )
+        self.asset = Asset.objects.get(pk=1)
+
+    def test_can_create_invite_as_asset_owner(self):
+
+        self.client.login(username='someuser', password='someuser')
+        payload = {
+            'recipient': self.absolute_reverse(
+                self._get_endpoint('user-detail'),
+                args=[self.anotheruser.username]
+            ),
+            'assets': [self.asset.uid]
+        }
+        response = self.client.post(self.invite_url, data=payload, format='json')
+        assert response.status_code == status.HTTP_201_CREATED
+
+    def test_cannot_create_bulk_invite_with_not_all_own_assets(self):
+
+        self.client.login(username='someuser', password='someuser')
+        payload = {
+            'recipient': self.absolute_reverse(
+                self._get_endpoint('user-detail'),
+                args=[self.anotheruser.username],
+            ),
+            'assets': [self.asset.uid, 'not_owned_asset_uid'],
+        }
+        response = self.client.post(self.invite_url, data=payload, format='json')
+        assert response.status_code == status.HTTP_400_BAD_REQUEST
+
+    def test_cannot_create_invite_as_regular_user(self):
+
+        self.client.login(username='thirduser', password='thirduser')
+        payload = {
+            'recipient': self.absolute_reverse(
+                self._get_endpoint('user-detail'),
+                args=[self.anotheruser.username]
+            ),
+            'assets': [self.asset.uid]
+        }
+        response = self.client.post(self.invite_url, data=payload, format='json')
+        assert response.status_code == status.HTTP_400_BAD_REQUEST
+
+
+class ProjectOwnershipInviteAPITestCase(KpiTestCase):
+
+    URL_NAMESPACE = ROUTER_URL_NAMESPACE
+
+    def setUp(self) -> None:
+
+        super().setUp()
+        User = get_user_model()  # noqa
+        self.someuser = User.objects.get(username='someuser')
+        self.anotheruser = User.objects.get(username='anotheruser')
+        self.thirduser = User.objects.create_user(
+            username='thirduser',
+            password='thirduser',
+            email='thirduser@example.com',
+        )
+        self.asset = Asset.objects.get(pk=1)
+        self.asset.save()  # Set asset permissions for owner
+        self.invite = Invite.objects.create(
+            sender=self.someuser, recipient=self.anotheruser
+        )
+        self.transfer = Transfer.objects.create(
+            invite=self.invite, asset=self.asset
+        )
+        self.invite_detail_url = reverse(
+            self._get_endpoint('project-ownership-invite-detail'),
+            args=[self.invite.uid],
+        )
+
+    def test_can_cancel_invite_as_sender(self):
+
+        self.client.login(username='someuser', password='someuser')
+        payload = {
+            'status': InviteStatusChoices.CANCELLED
+        }
+        response = self.client.patch(
+            self.invite_detail_url, data=payload, format='json'
+        )
+        assert response.status_code == status.HTTP_200_OK
+        assert response.json()['status'] == InviteStatusChoices.CANCELLED
+
+    def test_cannot_cancel_invite_as_regular_sender(self):
+
+        self.client.login(username='thirduser', password='thirduser')
+        payload = {
+            'status': InviteStatusChoices.CANCELLED
+        }
+        response = self.client.patch(
+            self.invite_detail_url, data=payload, format='json'
+        )
+        assert response.status_code == status.HTTP_404_NOT_FOUND
+
+    def test_cannot_cancel_invite_as_recipient(self):
+
+        self.client.login(username='anotheruser', password='anotheruser')
+        payload = {
+            'status': InviteStatusChoices.CANCELLED
+        }
+        response = self.client.patch(
+            self.invite_detail_url, data=payload, format='json'
+        )
+        assert response.status_code == status.HTTP_403_FORBIDDEN
+
+    def test_can_accept_invite_as_recipient(self):
+
+        self.client.login(username='anotheruser', password='anotheruser')
+        payload = {
+            'status': InviteStatusChoices.ACCEPTED
+        }
+        response = self.client.patch(
+            self.invite_detail_url, data=payload, format='json'
+        )
+        assert response.status_code == status.HTTP_200_OK
+        assert response.json()['status'] == InviteStatusChoices.IN_PROGRESS
+
+    def test_can_decline_invite_as_recipient(self):
+
+        self.client.login(username='anotheruser', password='anotheruser')
+        payload = {
+            'status': InviteStatusChoices.DECLINED
+        }
+        response = self.client.patch(
+            self.invite_detail_url, data=payload, format='json'
+        )
+        assert response.status_code == status.HTTP_200_OK
+        assert response.json()['status'] == InviteStatusChoices.DECLINED
+
+    def test_cannot_accept_invite_as_sender(self):
+
+        self.client.login(username='someuser', password='someuser')
+        payload = {
+            'status': InviteStatusChoices.ACCEPTED
+        }
+        response = self.client.patch(
+            self.invite_detail_url, data=payload, format='json'
+        )
+        assert response.status_code == status.HTTP_403_FORBIDDEN
+
+    def test_cannot_decline_invite_as_sender(self):
+
+        self.client.login(username='someuser', password='someuser')
+        payload = {
+            'status': InviteStatusChoices.DECLINED
+        }
+        response = self.client.patch(
+            self.invite_detail_url, data=payload, format='json'
+        )
+        assert response.status_code == status.HTTP_403_FORBIDDEN
+
+    def test_cannot_change_in_progress_invite(self):
+
+        self.invite.status = InviteStatusChoices.IN_PROGRESS
+        self.invite.save()
+
+        self.client.login(username='anotheruser', password='anotheruser')
+        payload = {
+            'status': InviteStatusChoices.DECLINED
+        }
+        response = self.client.patch(
+            self.invite_detail_url, data=payload, format='json'
+        )
+        assert response.status_code == status.HTTP_400_BAD_REQUEST
+
+    def test_cannot_change_complete_invite(self):
+        self.invite.status = InviteStatusChoices.COMPLETE
+        self.invite.save()
+
+        self.client.login(username='anotheruser', password='anotheruser')
+        payload = {
+            'status': InviteStatusChoices.DECLINED
+        }
+        response = self.client.patch(
+            self.invite_detail_url, data=payload, format='json'
+        )
+        assert response.status_code == status.HTTP_400_BAD_REQUEST
+
+    def test_cannot_change_failed_invite(self):
+        self.invite.status = InviteStatusChoices.FAILED
+        self.invite.save()
+
+        self.client.login(username='anotheruser', password='anotheruser')
+        payload = {
+            'status': InviteStatusChoices.ACCEPTED
+        }
+        response = self.client.patch(
+            self.invite_detail_url, data=payload, format='json'
+        )
+        assert response.status_code == status.HTTP_400_BAD_REQUEST
+
+    def test_cannot_change_expired_invite(self):
+        self.invite.status = InviteStatusChoices.EXPIRED
+        self.invite.save()
+
+        self.client.login(username='anotheruser', password='anotheruser')
+        payload = {
+            'status': InviteStatusChoices.ACCEPTED
+        }
+        response = self.client.patch(
+            self.invite_detail_url, data=payload, format='json'
+        )
+        assert response.status_code == status.HTTP_400_BAD_REQUEST
+
+    def test_invite_set_as_cancelled_on_project_deletion(self):
+
+        self.client.login(username='someuser', password='someuser')
+        assert self.invite.status == InviteStatusChoices.PENDING
+        asset_detail_url = reverse(
+            self._get_endpoint('asset-detail'),
+            args=[self.asset.uid],
+        )
+        response = self.client.delete(asset_detail_url)
+        # Should be a 204, but DRF Browsable API renderer (the default)
+        # alter the status code and returns a 200 instead.
+        # All other deletion tests on Asset assert a 200 either.
+        assert response.status_code == status.HTTP_200_OK
+
+        self.client.login(username='anotheruser', password='anotheruser')
+        response = self.client.get(self.invite_detail_url, format='json')
+        assert response.status_code == status.HTTP_200_OK
+        assert response.data['status'] == InviteStatusChoices.CANCELLED
+
+
+class ProjectOwnershipTransferDataAPITestCase(BaseAssetTestCase):
+
+    """
+    Tests in this class use the mock library a lot because transferring a
+    deployed project implies accessing KoboCAT tables. However, KPI does not
+    support it.
+    """
+
+    URL_NAMESPACE = ROUTER_URL_NAMESPACE
+    fixtures = ['test_data']
+
+    def setUp(self) -> None:
+        super().setUp()
+        User = get_user_model()  # noqa
+        self.someuser = User.objects.get(username='someuser')
+        self.anotheruser = User.objects.get(username='anotheruser')
+        self.invite_url = reverse(self._get_endpoint('project-ownership-invite-list'))
+        content_source_asset = {
+            'survey': [
+                {
+                    'type': 'audio',
+                    'label': 'q1',
+                    'required': 'false',
+                    '$kuid': 'abcd',
+                },
+                {
+                    'type': 'file',
+                    'label': 'q2',
+                    'required': 'false',
+                    '$kuid': 'efgh',
+                },
+            ]
+        }
+        self.asset = Asset.objects.create(
+            content=content_source_asset,
+            owner=self.someuser,
+            asset_type='survey',
+        )
+        self.asset.deploy(backend='mock', active=True)
+        self.__add_submissions()
+        self.asset.deployment.set_namespace(self.URL_NAMESPACE)
+        # Add fake NLP usage
+        update_nlp_counter(
+            service='mock_nlp_service_asr_seconds',
+            amount=120,
+            user_id=self.someuser.pk,
+            asset_id=self.asset.pk,
+        )
+        update_nlp_counter(
+            service='mock_nlp_service_mt_characters',
+            amount=1000,
+            user_id=self.someuser.pk,
+            asset_id=self.asset.pk,
+        )
+
+    def __add_submissions(self):
+        submissions = []
+        v_uid = self.asset.latest_deployed_version.uid
+        _uuid = str(uuid.uuid4())
+        submission = {
+            '__version__': v_uid,
+            'q1': 'audio_conversion_test_clip.3gp',
+            'q2': 'audio_conversion_test_image.jpg',
+            '_uuid': _uuid,
+            'meta/instanceID': f'uuid:{_uuid}',
+            'formhub/uuid': self.asset.uid,
+            '_attachments': [
+                {
+                    'id': 1,
+                    'download_url': 'http://testserver/someuser/audio_conversion_test_clip.3gp',
+                    'filename': 'someuser/audio_conversion_test_clip.3gp',
+                    'mimetype': 'video/3gpp',
+                    'bytes': 5000,
+                },
+                {
+                    'id': 2,
+                    'download_url': 'http://testserver/someuser/audio_conversion_test_image.jpg',
+                    'filename': 'someuser/audio_conversion_test_image.jpg',
+                    'mimetype': 'image/jpeg',
+                    'bytes': 10000,
+                },
+            ],
+            '_submitted_by': 'someuser'
+        }
+        submissions.append(submission)
+        self.asset.deployment.mock_submissions(submissions)
+        self.submissions = submissions
+
+    @patch(
+        'kpi.serializers.v2.service_usage.ServiceUsageSerializer._get_storage_usage',
+        new=MockServiceUsageSerializer._get_storage_usage
+    )
+    @patch(
+        'kpi.serializers.v2.service_usage.ServiceUsageSerializer._get_submission_counters',
+        new=MockServiceUsageSerializer._get_submission_counters
+    )
+    @patch(
+        'kobo.apps.project_ownership.models.transfer.reset_kc_permissions',
+        MagicMock()
+    )
+    @patch(
+        'kobo.apps.project_ownership.tasks.move_attachments',
+        MagicMock()
+    )
+    @patch(
+        'kobo.apps.project_ownership.tasks.move_media_files',
+        MagicMock()
+    )
+    @override_config(PROJECT_OWNERSHIP_AUTO_ACCEPT_INVITES=True)
+    def test_account_usage_transferred_to_new_user(self):
+        today = datetime.date.today()
+        expected_data = {
+            'total_nlp_usage': {
+                'asr_seconds_current_year': 120,
+                'mt_characters_current_year': 1000,
+                'asr_seconds_current_month': 120,
+                'mt_characters_current_month': 1000,
+                'asr_seconds_all_time': 120,
+                'mt_characters_all_time': 1000,
+            },
+            'total_storage_bytes': 15000,
+            'total_submission_count': {
+                'all_time': 1,
+                'current_year': 1,
+                'current_month': 1,
+            },
+            'current_month_start': datetime.date(today.year, today.month, 1),
+            'current_year_start': datetime.date(today.year, 1, 1),
+            'billing_period_end': None,
+        }
+
+        expected_empty_data = {
+            'total_nlp_usage': {
+                'asr_seconds_current_year': 0,
+                'mt_characters_current_year': 0,
+                'asr_seconds_current_month': 0,
+                'mt_characters_current_month': 0,
+                'asr_seconds_all_time': 0,
+                'mt_characters_all_time': 0,
+            },
+            'total_storage_bytes': 0,
+            'total_submission_count': {
+                'all_time': 0,
+                'current_year': 0,
+                'current_month': 0,
+            },
+            'current_month_start': datetime.date(today.year, today.month, 1),
+            'current_year_start': datetime.date(today.year, 1, 1),
+            'billing_period_end': None,
+        }
+
+        service_usage_url = reverse(
+            self._get_endpoint('service-usage-list'),
+        )
+        # someuser has some usage metrics
+        self.client.login(username='someuser', password='someuser')
+        response = self.client.get(service_usage_url)
+        assert response.data == expected_data
+
+        # anotheruser's usage should be 0
+        self.client.login(username='anotheruser', password='anotheruser')
+        response = self.client.get(service_usage_url)
+        assert response.data == expected_empty_data
+
+        # Transfer project from someuser to anotheruser
+        self.client.login(username='someuser', password='someuser')
+        payload = {
+            'recipient': self.absolute_reverse(
+                self._get_endpoint('user-detail'),
+                args=[self.anotheruser.username]
+            ),
+            'assets': [self.asset.uid]
+        }
+        with patch(
+            'kpi.deployment_backends.backends.MockDeploymentBackend.xform',
+            MagicMock(),
+        ):
+            response = self.client.post(
+                self.invite_url, data=payload, format='json'
+            )
+            assert response.status_code == status.HTTP_201_CREATED
+
+        # someuser should have no usage reported anymore
+        response = self.client.get(service_usage_url)
+        assert response.data == expected_empty_data
+
+        # anotheruser should now have usage reported
+        self.client.login(username='anotheruser', password='anotheruser')
+        response = self.client.get(service_usage_url)
+        assert response.data == expected_data
+
+    @patch(
+        'kobo.apps.project_ownership.models.transfer.reset_kc_permissions',
+        MagicMock()
+    )
+    @patch(
+        'kobo.apps.project_ownership.tasks.move_attachments',
+        MagicMock()
+    )
+    @patch(
+        'kobo.apps.project_ownership.tasks.move_media_files',
+        MagicMock()
+    )
+    @override_config(PROJECT_OWNERSHIP_AUTO_ACCEPT_INVITES=True)
+    def test_data_accessible_to_new_user(self):
+
+        self.client.login(username='anotheruser', password='anotheruser')
+        data_url = reverse(
+            self._get_endpoint('submission-list'), args=[self.asset.uid]
+        )
+
+        # anotheruser does not have permissions on someuser's project
+        response = self.client.get(data_url)
+        assert response.status_code == status.HTTP_404_NOT_FOUND
+
+        # Validate Mongo documents directly
+        assert (
+            settings.MONGO_DB.instances.find(
+                {'_userform_id': f'someuser_{self.asset.uid}'}
+            ).count()
+            == 1
+        )
+        assert (
+            settings.MONGO_DB.instances.find(
+                {'_userform_id': f'anotheruser_{self.asset.uid}'}
+            ).count()
+            == 0
+        )
+
+        # Transfer project from someuser to anotheruser
+        self.client.login(username='someuser', password='someuser')
+        payload = {
+            'recipient': self.absolute_reverse(
+                self._get_endpoint('user-detail'),
+                args=[self.anotheruser.username]
+            ),
+            'assets': [self.asset.uid]
+        }
+        with patch(
+            'kpi.deployment_backends.backends.MockDeploymentBackend.xform',
+            MagicMock(),
+        ):
+            response = self.client.post(
+                self.invite_url, data=payload, format='json'
+            )
+            assert response.status_code == status.HTTP_201_CREATED
+
+        # anotheruser is the owner and should see the project
+        self.client.login(username='anotheruser', password='anotheruser')
+        response = self.client.get(data_url, args=[self.asset.uid])
+        assert response.status_code == status.HTTP_200_OK
+        assert response.data['count'] == 1
+        for attachment in response.data['results'][0]['_attachments']:
+            assert attachment['filename'].startswith('anotheruser/')
+
+        assert (
+            settings.MONGO_DB.instances.find(
+                {'_userform_id': f'someuser_{self.asset.uid}'}
+            ).count()
+            == 0
+        )
+        assert (
+            settings.MONGO_DB.instances.find(
+                {'_userform_id': f'anotheruser_{self.asset.uid}'}
+            ).count()
+            == 1
+        )
+
+
+class ProjectOwnershipInAppMessageAPITestCase(KpiTestCase):
+
+    URL_NAMESPACE = ROUTER_URL_NAMESPACE
+
+    def setUp(self) -> None:
+
+        super().setUp()
+        User = get_user_model()  # noqa
+        self.someuser = User.objects.get(username='someuser')
+        self.anotheruser = User.objects.get(username='anotheruser')
+        self.invite_url = reverse(self._get_endpoint('project-ownership-invite-list'))
+        self.asset = Asset.objects.get(pk=1)
+        self.alice = User.objects.create_user(
+            username='alice', password='alice', email='alice@example.com'
+        )
+
+    @override_config(PROJECT_OWNERSHIP_AUTO_ACCEPT_INVITES=True)
+    def test_shared_users_receive_in_app_message(self):
+
+        self.asset.assign_perm(self.alice, PERM_VIEW_ASSET)
+        self.client.login(username='alice', password='alice')
+        # in-app message has not migrated to API `v2`.
+        # No need to use `_get_endpoint` utility
+        in_app_response = self.client.get(reverse('inappmessage-list'))
+        assert in_app_response.status_code == status.HTTP_200_OK
+        assert in_app_response.data['count'] == 0
+
+        self.client.login(username='someuser', password='someuser')
+        payload = {
+            'recipient': self.absolute_reverse(
+                self._get_endpoint('user-detail'),
+                args=[self.anotheruser.username]
+            ),
+            'assets': [self.asset.uid]
+        }
+        response = self.client.post(self.invite_url, data=payload, format='json')
+        assert response.status_code == status.HTTP_201_CREATED
+
+        self.client.login(username='alice', password='alice')
+        in_app_response = self.client.get(reverse('inappmessage-list'))
+        assert in_app_response.status_code == status.HTTP_200_OK
+        assert in_app_response.data['count'] == 1
+
+    @override_config(PROJECT_OWNERSHIP_AUTO_ACCEPT_INVITES=True)
+    def test_other_users_do_not_receive_in_app_message(self):
+        self.client.login(username='alice', password='alice')
+
+        in_app_response = self.client.get(reverse('inappmessage-list'))
+        assert in_app_response.status_code == status.HTTP_200_OK
+        assert in_app_response.data['count'] == 0
+
+        self.client.login(username='someuser', password='someuser')
+        payload = {
+            'recipient': self.absolute_reverse(
+                self._get_endpoint('user-detail'),
+                args=[self.anotheruser.username]
+            ),
+            'assets': [self.asset.uid]
+        }
+        response = self.client.post(self.invite_url, data=payload, format='json')
+        assert response.status_code == status.HTTP_201_CREATED
+
+        self.client.login(username='alice', password='alice')
+        in_app_response = self.client.get(reverse('inappmessage-list'))
+        assert in_app_response.status_code == status.HTTP_200_OK
+        assert in_app_response.data['count'] == 0
+
+    @override_config(PROJECT_OWNERSHIP_AUTO_ACCEPT_INVITES=True)
+    def test_previous_owner_do_not_receive_in_app_message(self):
+
+        self.client.login(username='someuser', password='someuser')
+        in_app_response = self.client.get(reverse('inappmessage-list'))
+        assert in_app_response.status_code == status.HTTP_200_OK
+        assert in_app_response.data['count'] == 0
+
+        payload = {
+            'recipient': self.absolute_reverse(
+                self._get_endpoint('user-detail'),
+                args=[self.anotheruser.username]
+            ),
+            'assets': [self.asset.uid]
+        }
+        response = self.client.post(self.invite_url, data=payload, format='json')
+        assert response.status_code == status.HTTP_201_CREATED
+
+        in_app_response = self.client.get(reverse('inappmessage-list'))
+        assert in_app_response.status_code == status.HTTP_200_OK
+        assert in_app_response.data['count'] == 0
+
+    @override_config(PROJECT_OWNERSHIP_AUTO_ACCEPT_INVITES=True)
+    def test_new_owner_do_not_receive_in_app_message(self):
+
+        self.client.login(username='anotheruser', password='anotheruser')
+        in_app_response = self.client.get(reverse('inappmessage-list'))
+        assert in_app_response.status_code == status.HTTP_200_OK
+        assert in_app_response.data['count'] == 0
+
+        self.client.login(username='someuser', password='someuser')
+        payload = {
+            'recipient': self.absolute_reverse(
+                self._get_endpoint('user-detail'),
+                args=[self.anotheruser.username]
+            ),
+            'assets': [self.asset.uid]
+        }
+        response = self.client.post(self.invite_url, data=payload, format='json')
+        assert response.status_code == status.HTTP_201_CREATED
+
+        self.client.login(username='anotheruser', password='anotheruser')
+        in_app_response = self.client.get(reverse('inappmessage-list'))
+        assert in_app_response.status_code == status.HTTP_200_OK
+        assert in_app_response.data['count'] == 0
diff --git a/kobo/apps/project_ownership/tests/test_mail.py b/kobo/apps/project_ownership/tests/test_mail.py
new file mode 100644
index 0000000000..75facf72e8
--- /dev/null
+++ b/kobo/apps/project_ownership/tests/test_mail.py
@@ -0,0 +1,92 @@
+from constance.test import override_config
+from django.contrib.auth import get_user_model
+from django.core import mail
+from rest_framework.reverse import reverse
+
+from kpi.models import Asset
+from kpi.tests.kpi_test_case import KpiTestCase
+from kpi.urls.router_api_v2 import URL_NAMESPACE as ROUTER_URL_NAMESPACE
+
+from ..models import Invite, InviteStatusChoices, Transfer, TransferStatusChoices
+from ..tasks import mark_as_expired
+
+
+class ProjectOwnershipMailTestCase(KpiTestCase):
+    URL_NAMESPACE = ROUTER_URL_NAMESPACE
+
+    def setUp(self) -> None:
+        super().setUp()
+        User = get_user_model()  # noqa
+        self.someuser = User.objects.get(username='someuser')
+        self.anotheruser = User.objects.get(username='anotheruser')
+
+        self.invite_url = reverse(self._get_endpoint('project-ownership-invite-list'))
+        self.asset = Asset.objects.get(pk=1)
+
+    def test_recipient_receives_invite(self):
+        self.client.login(username='someuser', password='someuser')
+        payload = {
+            'recipient': self.absolute_reverse(
+                self._get_endpoint('user-detail'), args=[self.anotheruser.username]
+            ),
+            'assets': [self.asset.uid],
+        }
+        self.client.post(self.invite_url, data=payload, format='json')
+
+        invite_uid = Invite.objects.first().uid
+        self.assertEqual(mail.outbox[0].to[0], self.anotheruser.email)
+        self.assertIn(invite_uid, mail.outbox[0].body)
+
+    def test_sender_receives_new_owner_acceptance(self):
+        invite = Invite.objects.create(sender=self.someuser, recipient=self.anotheruser)
+        invite_detail_url = reverse(
+            self._get_endpoint('project-ownership-invite-detail'), args=[invite.uid]
+        )
+
+        self.client.login(username='anotheruser', password='anotheruser')
+        payload = {'status': InviteStatusChoices.ACCEPTED}
+        self.client.patch(invite_detail_url, data=payload, format='json')
+
+        self.assertEqual(mail.outbox[0].to[0], self.someuser.email)
+        self.assertEqual(
+            mail.outbox[0].subject, 'KoboToolbox project ownership transfer accepted'
+        )
+
+    def test_sender_receives_new_owner_refusal(self):
+        invite = Invite.objects.create(sender=self.someuser, recipient=self.anotheruser)
+        invite_detail_url = reverse(
+            self._get_endpoint('project-ownership-invite-detail'), args=[invite.uid]
+        )
+
+        self.client.login(username='anotheruser', password='anotheruser')
+        payload = {'status': InviteStatusChoices.DECLINED}
+        self.client.patch(invite_detail_url, data=payload, format='json')
+
+        self.assertEqual(mail.outbox[0].to[0], self.someuser.email)
+        self.assertEqual(
+            mail.outbox[0].subject, 'KoboToolbox project ownership transfer incomplete'
+        )
+
+    @override_config(PROJECT_OWNERSHIP_INVITE_EXPIRY=0)
+    def test_sender_receives_expired_notification(self):
+        Invite.objects.create(sender=self.someuser, recipient=self.anotheruser)
+
+        mark_as_expired()
+
+        self.assertEqual(mail.outbox[0].to[0], self.someuser.email)
+        self.assertEqual(mail.outbox[0].subject, 'Invite has expired')
+
+    @override_config(PROJECT_OWNERSHIP_ADMIN_EMAIL='admin@admin.com')
+    def test_admins_receive_failure_report(self):
+        asset = Asset.objects.get(pk=1)
+        invite = Invite.objects.create(sender=self.someuser, recipient=self.anotheruser)
+        transfer = Transfer.objects.create(invite=invite, asset=asset)
+
+        transfer.status = TransferStatusChoices.FAILED
+        transfer.save()
+
+        self.assertEqual(mail.outbox[0].to[0], 'admin@admin.com')
+        self.assertEqual(
+            mail.outbox[0].subject,
+            'KoboToolbox Notifications: Project ownership transfer failure',
+        )
diff --git a/kobo/apps/project_ownership/tests/test_transfer_status.py b/kobo/apps/project_ownership/tests/test_transfer_status.py
new file mode 100644
index 0000000000..11985bdc2c
--- /dev/null
+++ b/kobo/apps/project_ownership/tests/test_transfer_status.py
@@ -0,0 +1,116 @@
+from django.contrib.auth import get_user_model
+from django.test import TestCase
+
+from kpi.models import Asset
+from ..models import (
+    Invite,
+    InviteStatusChoices,
+    Transfer,
+    TransferStatusChoices,
+    TransferStatusTypeChoices,
+)
+
+
+class ProjectOwnershipTransferStatusTestCase(TestCase):
+
+    fixtures = ['test_data']
+
+    def setUp(self):
+
+        User = get_user_model()  # noqa
+        someuser = User.objects.get(username='someuser')
+        anotheruser = User.objects.get(username='anotheruser')
+        asset = Asset.objects.get(pk=1)
+        self.invite = Invite.objects.create(sender=someuser, recipient=anotheruser)
+        self.transfer = Transfer.objects.create(invite=self.invite, asset=asset)
+
+        assert self.invite.status == InviteStatusChoices.PENDING
+        assert self.transfer.status == TransferStatusChoices.PENDING
+        for transfer_sub_status in self.transfer.statuses.all():
+            assert (
+                transfer_sub_status.status
+                == TransferStatusChoices.PENDING
+            )
+
+    def test_calculated_in_progress_invite_status(self):
+
+        self.transfer.status = TransferStatusChoices.IN_PROGRESS
+        self.invite.refresh_from_db()
+        assert self.invite.status == InviteStatusChoices.IN_PROGRESS
+
+    def test_calculated_in_success_invite_status(self):
+
+        self.transfer.status = TransferStatusChoices.SUCCESS
+        self.invite.refresh_from_db()
+        assert self.invite.status == InviteStatusChoices.COMPLETE
+
+    def test_calculated_failed_invite_status(self):
+
+        self.transfer.status = TransferStatusChoices.FAILED
+        self.invite.refresh_from_db()
+        assert self.invite.status == InviteStatusChoices.FAILED
+
+    def test_calculated_success_transfer_status(self):
+
+        # Simulate transfer beginning
+        self.transfer.status = TransferStatusChoices.IN_PROGRESS
+
+        # Mark media files task as success
+        media_files_async_task = self.transfer.statuses.get(
+            status_type=TransferStatusTypeChoices.MEDIA_FILES
+        )
+        media_files_async_task.status = TransferStatusChoices.SUCCESS
+        media_files_async_task.save(update_fields=['status'])
+        media_files_async_task.update_transfer_status()
+
+        # Transfer is still in progress
+        self.transfer.refresh_from_db()
+        assert self.transfer.status == TransferStatusChoices.IN_PROGRESS
+
+        # Mark all async tasks as success
+        for transfer_sub_status in self.transfer.statuses.exclude(
+            status_type=TransferStatusTypeChoices.GLOBAL
+        ):
+            transfer_sub_status.status = TransferStatusChoices.SUCCESS
+            transfer_sub_status.save(update_fields=['status'])
+            transfer_sub_status.update_transfer_status()
+
+        # Transfer should be marked as success too now…
+        self.transfer.refresh_from_db()
+        assert self.transfer.status == TransferStatusChoices.SUCCESS
+
+        # … and invite should be marked as completed.
+        self.invite.refresh_from_db()
+        assert self.invite.status == InviteStatusChoices.COMPLETE
+
+    def test_calculated_failed_transfer_status(self):
+
+        # Simulate transfer beginning
+        self.transfer.status = TransferStatusChoices.IN_PROGRESS
+
+        # Update status of media files task
+        media_files_async_task = self.transfer.statuses.get(
+            status_type=TransferStatusTypeChoices.MEDIA_FILES
+        )
+        media_files_async_task.status = TransferStatusChoices.FAILED
+        media_files_async_task.save(update_fields=['status'])
+        media_files_async_task.update_transfer_status()
+
+        # Transfer should be marked as failed right away
+        self.transfer.refresh_from_db()
+        assert self.transfer.status == TransferStatusChoices.FAILED
+
+        # Same as the invite
+        self.invite.refresh_from_db()
+        assert self.invite.status == InviteStatusChoices.FAILED
+
+    def test_draft_project_transfer(self):
+        # when project is a draft, there are no celery tasks called to move
+        # submissions (and related attachments).
+        self.transfer.transfer_project()
+        assert self.transfer.status == TransferStatusChoices.SUCCESS
+
+        # However, the status of each async task should still be updated to
+        # 'success'.
+        for transfer_status in self.transfer.statuses.all():
+            assert transfer_status.status == TransferStatusChoices.SUCCESS
diff --git a/kobo/apps/project_ownership/tests/utils.py b/kobo/apps/project_ownership/tests/utils.py
new file mode 100644
index 0000000000..fe46f81c9e
--- /dev/null
+++ b/kobo/apps/project_ownership/tests/utils.py
@@ -0,0 +1,35 @@
+from django.db.models import F
+from kpi.models.asset import Asset
+
+
+class MockServiceUsageSerializer:
+
+    def _get_storage_usage(self):
+
+        assets = Asset.objects.annotate(user_id=F('owner_id')).filter(
+            self._user_id_query
+        )
+
+        self._total_storage_bytes = 0
+        for asset in assets:
+            if asset.has_deployment:
+                for submission in asset.deployment.get_submissions(asset.owner):
+                    self._total_storage_bytes += sum(
+                        [att['bytes'] for att in submission['_attachments']]
+                    )
+
+    def _get_submission_counters(self, month_filter, year_filter):
+        self._total_submission_count = {
+            'all_time': 0,
+            'current_year': 0,
+            'current_month': 0,
+        }
+        assets = Asset.objects.annotate(user_id=F('owner_id')).filter(
+            self._user_id_query
+        )
+        for asset in assets:
+            if asset.has_deployment:
+                submissions = asset.deployment.get_submissions(asset.owner)
+                self._total_submission_count['all_time'] += len(submissions)
+                self._total_submission_count['current_year'] += len(submissions)
+                self._total_submission_count['current_month'] += len(submissions)
diff --git a/kobo/apps/project_ownership/urls.py b/kobo/apps/project_ownership/urls.py
new file mode 100644
index 0000000000..d52dc605b1
--- /dev/null
+++ b/kobo/apps/project_ownership/urls.py
@@ -0,0 +1,20 @@
+from django.urls import path, include
+from rest_framework_extensions.routers import ExtendedDefaultRouter
+
+from .views import InviteViewSet, TransferViewSet
+
+
+router = ExtendedDefaultRouter()
+invite_router = router.register(
+    r'project-ownership/invites', InviteViewSet, basename='project-ownership-invite'
+)
+invite_router.register(
+    r'transfers',
+    TransferViewSet,
+    basename='project-ownership-transfer',
+    parents_query_lookups=['invite_uid'],
+)
+
+urlpatterns = [
+    path('', include(router.urls)),
+]
diff --git a/kobo/apps/project_ownership/utils.py b/kobo/apps/project_ownership/utils.py
new file mode 100644
index 0000000000..77d5e526a0
--- /dev/null
+++ b/kobo/apps/project_ownership/utils.py
@@ -0,0 +1,168 @@
+import os
+from typing import Optional
+
+from django.apps import apps
+from django.utils import timezone
+
+from kpi.deployment_backends.kc_access.shadow_models import (
+    KobocatAttachment,
+    KobocatMetadata,
+)
+from kpi.models.asset import AssetFile
+from .models.choices import TransferStatusChoices, TransferStatusTypeChoices
+from .exceptions import AsyncTaskException
+
+
+def get_target_folder(
+    previous_owner_username: str, new_owner_username: str, filename: str
+) -> Optional[str]:
+
+    if not filename:
+        return
+
+    target_folder = os.path.dirname(
+        filename.replace(previous_owner_username, new_owner_username)
+    )
+
+    return target_folder
+
+
+def move_attachments(transfer: 'project_ownership.Transfer'):
+
+    async_task_type = TransferStatusTypeChoices.ATTACHMENTS
+
+    # Attachments cannot be moved until `_userform_id` is updated successfully
+    if not (
+        transfer.statuses.filter(
+            status_type=TransferStatusTypeChoices.SUBMISSIONS,
+            status=TransferStatusChoices.SUCCESS,
+        ).exists()
+    ):
+        raise AsyncTaskException(
+            '`_userform_id` has not been updated successfully'
+        )
+
+    submissions = transfer.asset.deployment.get_submissions(
+        transfer.asset.owner, fields=['_id']
+    )
+
+    submission_ids = [
+        s['_id']
+        for s in submissions
+    ]
+
+    if not submission_ids:
+        _mark_task_as_successful(transfer, async_task_type)
+        return
+
+    attachments = KobocatAttachment.all_objects.filter(
+        instance_id__in=submission_ids
+    ).exclude(media_file__startswith=f'{transfer.asset.owner.username}/')
+
+    for attachment in attachments.iterator():
+        # Pretty slow but it should run in celery task. We want to be the
+        # path of the file is saved right away. It lets us resume when it stopped
+        # in case of failure.
+        if not (
+            target_folder := get_target_folder(
+                transfer.invite.sender.username,
+                transfer.invite.recipient.username,
+                attachment.media_file.name,
+            )
+        ):
+            continue
+        else:
+            attachment.media_file.move(target_folder)
+            attachment.save(update_fields=['media_file'])
+
+            # We only need to update `date_modified` to update task heart beat.
+            # No need to use `TransferStatus.update_status()` and
+            # its lock mechanism.
+            transfer.statuses.filter(status_type=async_task_type).update(
+                date_modified=timezone.now()
+            )
+
+    _mark_task_as_successful(transfer, async_task_type)
+
+
+def move_media_files(transfer: 'project_ownership.Transfer'):
+
+    async_task_type = TransferStatusTypeChoices.MEDIA_FILES
+    media_files = transfer.asset.asset_files.filter(
+        file_type=AssetFile.FORM_MEDIA
+    ).exclude(content__startswith=f'{transfer.asset.owner.username}/')
+
+    kc_files = {}
+
+    if transfer.asset.has_deployment:
+        kc_files = {
+            kc_file.file_hash: kc_file
+            for kc_file in KobocatMetadata.objects.filter(
+                xform_id=transfer.asset.deployment.xform.pk
+            )
+        }
+
+    for media_file in media_files:
+        if not (
+            target_folder := get_target_folder(
+                transfer.invite.sender.username,
+                transfer.invite.recipient.username,
+                media_file.content.name,
+            )
+        ):
+            continue
+        else:
+            # Pretty slow but it should run in celery task. We want to be sure the
+            # path of the file is saved right away. It lets us resume when it stopped
+            # in case of failure.
+            media_file.content.move(target_folder)
+            old_md5 = media_file.metadata.pop('hash', None)
+            media_file.set_md5_hash()
+            if old_md5 in kc_files.keys():
+                kc_obj = kc_files[old_md5]
+                if kc_target_folder := get_target_folder(
+                    transfer.invite.sender.username,
+                    transfer.invite.recipient.username,
+                    kc_obj.data_file.name,
+                ):
+                    kc_obj.data_file.move(kc_target_folder)
+                    kc_obj.file_hash = media_file.md5_hash
+                    kc_obj.save(update_fields=['data_file', 'file_hash'])
+
+            media_file.save(update_fields=['content', 'metadata'])
+
+        # We only need to update `date_modified` to update task heart beat.
+        # No need to use `TransferStatus.update_status()` and
+        # its lock mechanism.
+        transfer.statuses.filter(status_type=async_task_type).update(
+            date_modified=timezone.now()
+        )
+
+    _mark_task_as_successful(transfer, async_task_type)
+
+
+def rewrite_mongo_userform_id(transfer: 'project_ownership.Transfer'):
+    old_owner = transfer.invite.sender
+
+    if not transfer.asset.has_deployment:
+        return
+
+    if not transfer.asset.deployment.transfer_submissions_ownership(
+        old_owner.username
+    ):
+        raise AsyncTaskException(
+            'Could not rewrite MongoDB `_userform_id` successfully'
+        )
+
+    _mark_task_as_successful(
+        transfer, TransferStatusTypeChoices.SUBMISSIONS
+    )
+
+
+def _mark_task_as_successful(
+    transfer: 'project_ownership.Transfer', async_task_type: str
+):
+    TransferStatus = apps.get_model('project_ownership', 'TransferStatus')  # noqa
+    TransferStatus.update_status(
+        transfer.pk, TransferStatusChoices.SUCCESS, async_task_type
+    )
diff --git a/kobo/apps/project_ownership/views/__init__.py b/kobo/apps/project_ownership/views/__init__.py
new file mode 100644
index 0000000000..146392525f
--- /dev/null
+++ b/kobo/apps/project_ownership/views/__init__.py
@@ -0,0 +1,2 @@
+from .invite import InviteViewSet
+from .transfer import TransferViewSet
diff --git a/kobo/apps/project_ownership/views/invite.py b/kobo/apps/project_ownership/views/invite.py
new file mode 100644
index 0000000000..71126c8692
--- /dev/null
+++ b/kobo/apps/project_ownership/views/invite.py
@@ -0,0 +1,237 @@
+from rest_framework import viewsets
+
+from kpi.permissions import IsAuthenticated
+from ..filters import InviteFilter
+from ..models import Invite
+from ..serializers import InviteSerializer
+
+
+class InviteViewSet(viewsets.ModelViewSet):
+    """
+    ## List of invites
+
+    Invites sent or received by current user about transfer project ownership.
+
+    <pre class="prettyprint">
+    <b>GET</b> /api/v2/project-ownership/invites/
+    </pre>
+
+    > Example
+    >
+    >       curl -X GET https://[kpi]/api/v2/project-ownership/invites/
+
+    <pre class="prettyprint">
+    <b>HTTP 200 OK</b>
+    {
+        "count": 1
+        "next": ...
+        "previous": ...
+        "results": [
+            {
+               "url": "https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/",
+               "recipient": "https://[kpi]/api/v2/users/bob/",
+               "status": "complete",
+               "date_created": "2023-12-14T21:17:27Z",
+               "date_modified": "2023-12-14T21:17:29Z",
+               "transfers": [
+                   {
+                       "url": "https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/transfers/pot54pTqM5qwKdZ4wnNdiwDY/",
+                       "asset": "https://[kpi]/api/v2/assets/a8rg3w7ZNL5Nwj7iHzKiyX/",
+                       "status": "success",
+                       "error": null,
+                       "date_modified": "2023-12-14T21:17:29Z"
+                   }
+               ]
+           }
+        ]
+    }
+    </pre>
+
+    List can be filtered with `mode` parameter,  e.g.: display only received invites.
+
+    Possible values for `mode`:
+
+    - `sender`
+    - `recipient`
+
+
+    ## Create an invite
+
+    <pre class="prettyprint">
+    <b>POST</b> /api/v2/project-ownership/invites/
+    </pre>
+
+    > Example
+    >
+    >       curl -X POST https://[kpi]/api/v2/project-ownership/invites/
+
+
+    > Payload to create (send) an invite
+    >
+    >       {
+    >            "recipient": "https://[kpi]/api/v2/users/alice/",
+    >            "assets": [
+    >                "a8rg3w7ZNL5Nwj7iHzKiyX"
+    >            ]
+    >       }
+
+    <pre class="prettyprint">
+    <b>HTTP 201 OK</b>
+    {
+        "url": "https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/",
+        "recipient": "https://[kpi]/api/v2/users/alice/",
+        "status": "pending",
+        "date_created": "2023-12-14T21:17:27Z",
+        "date_modified": "2023-12-14T21:17:29Z",
+        "transfers": [
+           {
+               "url": "https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/transfers/pot54pTqM5qwKdZ4wnNdiwDY/",
+               "asset": "https://[kpi]/api/v2/assets/a8rg3w7ZNL5Nwj7iHzKiyX/",
+               "status": "pending",
+               "error": null,
+               "date_modified": "2023-12-14T21:17:29Z"
+           }
+        ]
+    }
+    </pre>
+
+    ## Cancel an invite
+
+    <span class='label label-warning'>Only the sender can cancel an invite, and **if only if** the invite is still pending.</span>
+
+    <pre class="prettyprint">
+    <b>PATCH</b> /api/v2/project-ownership/invites/&lt;invite_uid&gt;/
+    </pre>
+
+    > Example
+    >
+    >       curl -X PATCH https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/
+
+
+    > Payload to cancel an invite
+    >
+    >       {
+    >            "status": "cancelled"
+    >       }
+
+    <pre class="prettyprint">
+    <b>HTTP 200 OK</b>
+    {
+        "url": "https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/",
+        "recipient": "https://[kpi]/api/v2/users/alice/",
+        "status": "cancelled",
+        "date_created": "2023-12-14T21:17:27Z",
+        "date_modified": "2023-12-14T21:17:29Z",
+        "transfers": [
+           {
+               "url": "https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/transfers/pot54pTqM5qwKdZ4wnNdiwDY/",
+               "asset": "https://[kpi]/api/v2/assets/a8rg3w7ZNL5Nwj7iHzKiyX/",
+               "status": "cancelled",
+               "error": null,
+               "date_modified": "2023-12-14T21:17:29Z"
+           }
+        ]
+    }
+    </pre>
+
+    ## Accept or decline an invite
+
+    <span class='label label-warning'>Only the recipient can accept or decline, **if and only if** the invite is still pending.</span>
+
+    <pre class="prettyprint">
+    <b>PATCH</b> /api/v2/project-ownership/invites/&lt;invite_uid&gt;/
+    </pre>
+
+    > Example
+    >
+    >       curl -X GET https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/
+
+    > Payload to accept (or decline) an invite
+    >
+    >       {
+    >            "status": "accepted|declined"
+    >       }
+
+    <pre class="prettyprint">
+    <b>HTTP 200 OK</b>
+    {
+        "url": "https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/",
+        "recipient": "https://[kpi]/api/v2/users/alice/",
+        "status": "in_progress|declined",
+        "date_created": "2023-12-14T21:17:27Z",
+        "date_modified": "2023-12-14T21:17:29Z",
+        "transfers": [
+           {
+               "url": "https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/transfers/pot54pTqM5qwKdZ4wnNdiwDY/",
+               "asset": "https://[kpi]/api/v2/assets/a8rg3w7ZNL5Nwj7iHzKiyX/",
+               "status": "in_progress|cancelled",
+               "error": null,
+               "date_modified": "2023-12-14T21:17:29Z"
+           }
+        ]
+    }
+    </pre>
+
+    _**Notes**: When submitting `accepted` the invite status becomes automatically `in_progress`_
+
+
+    ## Invite detail
+
+    It can be useful to monitor the invite status while the transfer is being
+    process
+
+    <pre class="prettyprint">
+    <b>GET</b> /api/v2/project-ownership/invites/&lt;invite_uid&gt;/
+    </pre>
+
+    > Example
+    >
+    >       curl -X GET https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/
+
+    <pre class="prettyprint">
+    <b>HTTP 200 OK</b>
+    {
+        "url": "https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/",
+        "recipient": "https://[kpi]/api/v2/users/alice/",
+        "status": "in_progress",
+        "date_created": "2023-12-14T21:17:27Z",
+        "date_modified": "2023-12-14T21:17:29Z",
+        "transfers": [
+           {
+               "url": "https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/transfers/pot54pTqM5qwKdZ4wnNdiwDY/",
+               "asset": "https://[kpi]/api/v2/assets/a8rg3w7ZNL5Nwj7iHzKiyX/",
+               "status": "in_progress",
+               "error": null,
+               "date_modified": "2023-12-14T21:17:29Z"
+           },
+           ...
+          {
+               "url": "https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/transfers/potKpv6rc9xGoPwSHft2prWs/",
+               "asset": "https://[kpi]/api/v2/assets/a8jyVbhvaPSBRtYqoshiLE/",
+               "status": "success",
+               "error": null,
+               "date_modified": "2023-12-14T21:16:29Z"
+           }
+        ]
+    }
+    </pre>
+
+
+    ### CURRENT ENDPOINT
+    """
+
+    model = Invite
+    lookup_field = 'uid'
+    serializer_class = InviteSerializer
+    permission_classes = (IsAuthenticated,)
+    filter_backends = (InviteFilter, )
+
+    def get_queryset(self):
+
+        queryset = (
+            self.model.objects
+            .select_related('sender')
+            .select_related('recipient')
+        )
+
+        return queryset
diff --git a/kobo/apps/project_ownership/views/transfer.py b/kobo/apps/project_ownership/views/transfer.py
new file mode 100644
index 0000000000..402009941e
--- /dev/null
+++ b/kobo/apps/project_ownership/views/transfer.py
@@ -0,0 +1,89 @@
+from django.shortcuts import Http404
+from django.db.models import Prefetch
+from rest_framework import viewsets
+
+from kpi.permissions import IsAuthenticated
+from ..models import Transfer, TransferStatus
+from ..serializers import TransferDetailSerializer
+
+
+class TransferViewSet(viewsets.ReadOnlyModelViewSet):
+
+    """
+    ## List of transfers
+
+    <span class='label label-danger'>Not implemented</span> Refer to invite list instead.
+
+    ## Transfer detail
+
+    It provides more details on error
+
+    <pre class="prettyprint">
+    <b>GET</b> /api/v2/project-ownership/invites/&lt;invite_uid&gt;/transfers/&lt;transfer_uid&gt;/
+    </pre>
+
+    > Example
+    >
+    >       curl -X GET https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/transfers/pot54pTqM5qwKdZ4wnNdiwDY/
+
+    <pre class="prettyprint">
+    <b>HTTP 200 OK</b>
+    {
+       "url": "https://[kpi]/api/v2/project-ownership/invites/poi52fGkwDjQeZkUxcaou39q/transfers/pot54pTqM5qwKdZ4wnNdiwDY/",
+       "asset": "https://[kpi]/api/v2/assets/a8rg3w7ZNL5Nwj7iHzKiyX/",
+       "status": "in_progress",
+       "error": null,
+       "date_modified": "2023-12-14T21:17:29Z",
+       "statuses": [
+            {
+                "status": "success",
+                "status_type": "submissions",
+                "error": null
+            },
+            {
+                "status": "success",
+                "status_type": "media_files",
+                "error": null
+            },
+            {
+                "status": "in_progress",
+                "status_type": "attachments",
+                "error": null
+            },
+            {
+                "status": "in_progress",
+                "status_type": "global",
+                "error": null
+            }
+        ]
+    }
+    </pre>
+
+
+    ### CURRENT ENDPOINT
+    """
+
+    model = Transfer
+    lookup_field = 'uid'
+    permission_classes = (IsAuthenticated,)
+    serializer_class = TransferDetailSerializer
+
+    def get_queryset(self):
+
+        queryset = (
+            self.model.objects.all()
+            .select_related('asset')
+            .only('asset__uid')
+            .prefetch_related(
+                Prefetch(
+                    'statuses',
+                    queryset=TransferStatus.objects.all(),
+                    to_attr='prefetched_statuses',
+                )
+            )
+        )
+
+        return queryset
+
+    def list(self, request, *args, **kwargs):
+        raise Http404()
diff --git a/kobo/apps/trash_bin/models/project.py b/kobo/apps/trash_bin/models/project.py
index dc3288770d..c98269d5f1 100644
--- a/kobo/apps/trash_bin/models/project.py
+++ b/kobo/apps/trash_bin/models/project.py
@@ -4,6 +4,11 @@
 from django.db import models, transaction
 from django.utils.timezone import now
 
+from kobo.apps.project_ownership.models import (
+    Invite,
+    InviteStatusChoices,
+    Transfer,
+)
 from kpi.deployment_backends.kc_access.shadow_models import KobocatUser, KobocatXForm
 from kpi.deployment_backends.kc_access.utils import kc_transaction_atomic
 from kpi.fields import KpiUidField
@@ -75,6 +80,15 @@ def toggle_asset_statuses(
                 updated = queryset.update(
                     **update_params
                 )
+
+                if toggle_delete and not active:
+                    Invite.objects.filter(
+                        pk__in=Transfer.objects.filter(
+                            asset_id__in=queryset.values_list('pk', flat=True),
+                            invite__status=InviteStatusChoices.PENDING,
+                        ).values_list('invite_id', flat=True)
+                    ).update(status=InviteStatusChoices.CANCELLED)
+
                 if not settings.TESTING:
                     kc_updated = KobocatXForm.objects.filter(
                         **kc_filter_params
diff --git a/kobo/settings/base.py b/kobo/settings/base.py
index 1a68721d98..6f8033b204 100644
--- a/kobo/settings/base.py
+++ b/kobo/settings/base.py
@@ -127,6 +127,7 @@
     'kobo.apps.trash_bin.TrashBinAppConfig',
     'kobo.apps.markdownx_uploader.MarkdownxUploaderAppConfig',
     'kobo.apps.form_disclaimer.FormDisclaimerAppConfig',
+    'kobo.apps.project_ownership.ProjectOwnershipAppConfig',
 )
 
 MIDDLEWARE = [
@@ -155,6 +156,7 @@
 # `CONSTANCE_CONFIG` dictionary: each place where the setting's value is needed
 # must use `constance.config.THE_SETTING` instead of
 # `django.conf.settings.THE_SETTING`
+
 CONSTANCE_CONFIG = {
     'REGISTRATION_OPEN': (
         True,
@@ -422,8 +424,7 @@
         ),
         'List all custom character rules as regular expressions supported '
         'by `regex` python library.\n'
-        'One per line.'
-        ,
+        'One per line.',
     ),
     'PASSWORD_CUSTOM_CHARACTER_RULES_REQUIRED_TO_PASS': (
         3,
@@ -469,6 +470,63 @@
         ),
         'i18n_text_jsonfield_schema',
     ),
+    'PROJECT_OWNERSHIP_RESUME_THRESHOLD': (
+        10,
+        'Number of minutes asynchronous tasks can be idle before being '
+        'restarted.\n'
+        'It is recommended to keep greater than 10 minutes.',
+        'positive_int',
+    ),
+    'PROJECT_OWNERSHIP_STUCK_THRESHOLD': (
+        12 * 60,
+        (
+            'Number of minutes asynchronous tasks can run before being '
+            'flagged as failed.\n'
+            'Should be greater than `PROJECT_OWNERSHIP_RESUME_THRESHOLD`.'
+        ),
+        'positive_int',
+    ),
+    'PROJECT_OWNERSHIP_INVITE_EXPIRY': (
+        14,
+        'Number of days before invites expire.',
+        'positive_int',
+    ),
+    'PROJECT_OWNERSHIP_INVITE_HISTORY_RETENTION': (
+        30,
+        (
+            'Number of days to keep invites history.\n'
+            'Failed invites are kept forever.'
+        ),
+        'positive_int',
+    ),
+    'PROJECT_OWNERSHIP_IN_APP_MESSAGES_EXPIRY': (
+        7,
+        'The number of days after which in-app messages expire.',
+        'positive_int',
+    ),
+    'PROJECT_OWNERSHIP_AUTO_ACCEPT_INVITES': (
+        False,
+        'Auto-accept invites by default and do not sent them by e-mail.'
+    ),
+    'PROJECT_OWNERSHIP_ADMIN_EMAIL': (
+        '',
+        (
+            'Email addresses to which error reports are sent, one per line.\n'
+            'Leave empty to not send emails.'
+        ),
+    ),
+    'PROJECT_OWNERSHIP_ADMIN_EMAIL_SUBJECT': (
+        'KoboToolbox Notifications: Project ownership transfer failure',
+        'Email subject to sent to admins on failure.',
+    ),
+    'PROJECT_OWNERSHIP_ADMIN_EMAIL_BODY': (
+        (
+            'Dear admins,\n\n'
+            'A transfer of project ownership has failed:\n'
+            '##invite_url##'
+        ),
+        'Email message to sent to admins on failure.',
+    ),
 }
 
 CONSTANCE_ADDITIONAL_FIELDS = {
@@ -512,6 +570,9 @@
     'positive_int_minus_one': ['django.forms.fields.IntegerField', {
         'min_value': -1
     }],
+    'positive_int': ['django.forms.fields.IntegerField', {
+        'min_value': 0
+    }],
 }
 
 CONSTANCE_CONFIG_FIELDSETS = {
@@ -565,6 +626,17 @@
         'PASSWORD_CUSTOM_CHARACTER_RULES_REQUIRED_TO_PASS',
         'CUSTOM_PASSWORD_GUIDANCE_TEXT',
     ),
+    'Transfer project ownership': (
+        'PROJECT_OWNERSHIP_RESUME_THRESHOLD',
+        'PROJECT_OWNERSHIP_STUCK_THRESHOLD',
+        'PROJECT_OWNERSHIP_INVITE_HISTORY_RETENTION',
+        'PROJECT_OWNERSHIP_INVITE_EXPIRY',
+        'PROJECT_OWNERSHIP_IN_APP_MESSAGES_EXPIRY',
+        'PROJECT_OWNERSHIP_ADMIN_EMAIL',
+        'PROJECT_OWNERSHIP_ADMIN_EMAIL_SUBJECT',
+        'PROJECT_OWNERSHIP_ADMIN_EMAIL_BODY',
+        'PROJECT_OWNERSHIP_AUTO_ACCEPT_INVITES',
+    ),
     'Trash bin': (
         'ASSET_SNAPSHOT_DAYS_RETENTION',
         'ACCOUNT_TRASH_GRACE_PERIOD',
@@ -987,6 +1059,30 @@ def dj_stripe_request_callback_method():
         'schedule': crontab(hour=0, minute=30, day_of_week=0),
         'options': {'queue': 'kpi_low_priority_queue'}
     },
+    # Schedule every 10 minutes
+    'project-ownership-task-scheduler': {
+        'task': 'kobo.apps.project_ownership.tasks.task_rescheduler',
+        'schedule': crontab(minute=10),
+        'options': {'queue': 'kpi_low_priority_queue'}
+    },
+    # Schedule every 30 minutes
+    'project-ownership-mark-stuck-tasks-as-failed': {
+        'task': 'kobo.apps.project_ownership.tasks.mark_stuck_tasks_as_failed',
+        'schedule': crontab(minute=30),
+        'options': {'queue': 'kpi_low_priority_queue'}
+    },
+    # Schedule every 30 minutes
+    'project-ownership-mark-as-expired': {
+        'task': 'kobo.apps.project_ownership.tasks.mark_as_expired',
+        'schedule': crontab(minute=30),
+        'options': {'queue': 'kpi_low_priority_queue'}
+    },
+    # Schedule every day at midnight UTC
+    'project-ownership-garbage-collector': {
+        'task': 'kobo.apps.project_ownership.tasks.garbage_collector',
+        'schedule': crontab(minute=0, hour=0),
+        'options': {'queue': 'kpi_low_priority_queue'}
+    },
 }
 
 CELERY_BROKER_TRANSPORT_OPTIONS = {
diff --git a/kpi/deployment_backends/base_backend.py b/kpi/deployment_backends/base_backend.py
index a5fab413a7..a72c8d60c2 100644
--- a/kpi/deployment_backends/base_backend.py
+++ b/kpi/deployment_backends/base_backend.py
@@ -1,19 +1,25 @@
 # coding: utf-8
 from __future__ import annotations
+
 import abc
 import copy
 import datetime
 import json
+import os
 import uuid
 from datetime import date
+from contextlib import contextmanager
 from typing import Union, Iterator, Optional
 
 from bson import json_util
+from django.conf import settings
+from django.core.files.storage import default_storage
 from django.db.models.query import QuerySet
 from django.utils import timezone
 from django.utils.translation import gettext_lazy as t
 from django.core.exceptions import PermissionDenied
 from rest_framework import serializers
+from rest_framework.reverse import reverse
 from rest_framework.pagination import _positive_int as positive_int
 from shortuuid import ShortUUID
 
@@ -28,6 +34,7 @@
 from kpi.models.asset_file import AssetFile
 from kpi.models.paired_data import PairedData
 from kpi.utils.django_orm_helper import UpdateJSONFieldAttributes
+from kpi.utils.submission import get_attachment_filenames_and_xpaths
 from kpi.utils.xml import (
     edit_submission_xml,
     fromstring_preserve_root_xmlns,
@@ -35,7 +42,6 @@
     xml_tostring,
 )
 
-
 class BaseDeploymentBackend(abc.ABC):
     """
     Defines the interface for a deployment backend.
@@ -183,17 +189,6 @@ def bulk_update_submissions(
     def calculated_submission_count(self, user: 'auth.User', **kwargs):
         pass
 
-    @abc.abstractmethod
-    def set_enketo_open_rosa_server(
-        self, require_auth: bool, enketo_id: str = None
-    ):
-        pass
-
-    @property
-    @abc.abstractmethod
-    def submission_count_since_date(self, start_date: Optional[datetime.date] = None):
-        pass
-
     @abc.abstractmethod
     def connect(self, active=False):
         pass
@@ -373,10 +368,6 @@ def get_validation_status(self, submission_id: int, user: 'auth.User') -> dict:
         """
         pass
 
-    @property
-    def identifier(self):
-        return self.get_data('identifier')
-
     @property
     def last_submission_time(self):
         return self._last_submission_time()
@@ -398,6 +389,10 @@ def remove_from_kc_only_flag(self, *args, **kwargs):
         # about whether the back end is KoBoCAT or something else
         pass
 
+    @abc.abstractmethod
+    def rename_enketo_id_key(self, previous_owner_username: str):
+        pass
+
     def save_to_db(self, updates: dict):
         """
         Persist values from deployment data into the DB.
@@ -432,6 +427,12 @@ def set_active(self, active: bool):
     def set_asset_uid(self, **kwargs) -> bool:
         pass
 
+    @abc.abstractmethod
+    def set_enketo_open_rosa_server(
+        self, require_auth: bool, enketo_id: str = None
+    ):
+        pass
+
     @abc.abstractmethod
     def set_has_kpi_hooks(self):
         pass
@@ -478,6 +479,13 @@ def store_submission(
     def submission_count(self):
         pass
 
+    @property
+    @abc.abstractmethod
+    def submission_count_since_date(
+        self, start_date: Optional[datetime.date] = None
+    ):
+        pass
+
     @property
     @abc.abstractmethod
     def submission_list_url(self):
@@ -488,10 +496,26 @@ def submission_list_url(self):
     def submission_model(self):
         pass
 
+    @staticmethod
+    @abc.abstractmethod
+    @contextmanager
+    def suspend_submissions(user_ids: list[int]):
+        pass
+
     @abc.abstractmethod
     def sync_media_files(self, file_type: str = AssetFile.FORM_MEDIA):
         pass
 
+    @abc.abstractmethod
+    def transfer_counters_ownership(self, new_owner: 'auth.User'):
+        pass
+
+    @abc.abstractmethod
+    def transfer_submissions_ownership(
+        self, previous_owner_username: str
+    ) -> bool:
+        pass
+
     def validate_submission_list_params(
         self,
         user: 'auth.User',
@@ -719,6 +743,10 @@ def version(self):
     def version_id(self):
         return self.get_data('version')
 
+    @property
+    def _open_rosa_server_storage(self):
+        return default_storage
+
     def _get_metadata_queryset(self, file_type: str) -> Union[QuerySet, list]:
         """
         Returns a list of objects, or a QuerySet to pass to Celery to
@@ -734,3 +762,44 @@ def _get_metadata_queryset(self, file_type: str) -> Union[QuerySet, list]:
         else:
             queryset = PairedData.objects(self.asset).values()
             return queryset
+
+    def _rewrite_json_attachment_urls(
+        self, submission: dict, request
+    ) -> dict:
+        if not request or '_attachments' not in submission:
+            return submission
+
+        attachment_xpaths = self.asset.get_attachment_xpaths(deployed=True)
+        filenames_and_xpaths = get_attachment_filenames_and_xpaths(
+            submission, attachment_xpaths
+        )
+
+        for attachment in submission['_attachments']:
+            for size, suffix in settings.KOBOCAT_THUMBNAILS_SUFFIX_MAPPING.items():
+                # We should use 'attachment-list' with `?xpath=` but we do not
+                # know what the XPath is here. Since the primary key is already
+                # exposed, let's use it to build the url with 'attachment-detail'
+                kpi_url = reverse(
+                    'attachment-detail',
+                    args=(self.asset.uid, submission['_id'], attachment['id']),
+                    request=request,
+                )
+                key = f'download{suffix}_url'
+                try:
+                    attachment[key] = kpi_url
+                except KeyError:
+                    continue
+            filename = attachment['filename']
+            attachment['filename'] = os.path.join(
+                self.asset.owner.username,
+                'attachments',
+                submission['formhub/uuid'],
+                submission['_uuid'],
+                os.path.basename(filename)
+            )
+
+            # Retrieve XPath and add it to attachment dictionary
+            basename = os.path.basename(attachment['filename'])
+            attachment['question_xpath'] = filenames_and_xpaths.get(basename, '')
+
+        return submission
diff --git a/kpi/deployment_backends/kc_access/shadow_models.py b/kpi/deployment_backends/kc_access/shadow_models.py
index bcd6b6433e..dab0bc0abb 100644
--- a/kpi/deployment_backends/kc_access/shadow_models.py
+++ b/kpi/deployment_backends/kc_access/shadow_models.py
@@ -23,6 +23,7 @@
 from kpi.exceptions import (
     BadContentTypeException,
 )
+from kpi.fields.file import ExtendedFileField
 from kpi.mixins.audio_transcoding import AudioTranscodingMixin
 from kpi.utils.hash import calculate_hash
 from .storage import (
@@ -109,8 +110,9 @@ class Meta(ShadowModel.Meta):
         related_name='attachments',
         on_delete=models.CASCADE,
     )
-    media_file = models.FileField(storage=get_kobocat_storage(), max_length=380,
-                                  db_index=True)
+    media_file = ExtendedFileField(
+        storage=get_kobocat_storage(), max_length=380, db_index=True
+    )
     media_file_basename = models.CharField(
         max_length=260, null=True, blank=True, db_index=True)
     # `PositiveIntegerField` will only accommodate 2 GiB, so we should consider
@@ -369,6 +371,28 @@ def _check_content_type_field(self):
                 return []
 
 
+class KobocatMetadata(ShadowModel):
+
+    MEDIA_FILES_TYPE = [
+        'media',
+        'paired_data',
+    ]
+
+    xform = models.ForeignKey('shadow_model.KobocatXForm', on_delete=models.CASCADE)
+    data_type = models.CharField(max_length=255)
+    data_value = models.CharField(max_length=255)
+    data_file = ExtendedFileField(storage=get_kobocat_storage(), blank=True, null=True)
+    data_file_type = models.CharField(max_length=255, blank=True, null=True)
+    file_hash = models.CharField(max_length=50, blank=True, null=True)
+    from_kpi = models.BooleanField(default=False)
+    data_filename = models.CharField(max_length=255, blank=True, null=True)
+    date_created = models.DateTimeField(default=timezone.now)
+    date_modified = models.DateTimeField(default=timezone.now)
+
+    class Meta(ShadowModel.Meta):
+        db_table = 'main_metadata'
+
+
 class KobocatMonthlyXFormSubmissionCounter(ShadowModel):
     year = models.IntegerField()
     month = models.IntegerField()
@@ -613,7 +637,7 @@ class Meta(ShadowModel.Meta):
         verbose_name_plural = 'xforms'
 
     XFORM_TITLE_LENGTH = 255
-    xls = models.FileField(null=True)
+    xls = ExtendedFileField(null=True)
     xml = models.TextField()
     user = models.ForeignKey(
         KobocatUser, related_name='xforms', null=True, on_delete=models.CASCADE
diff --git a/kpi/deployment_backends/kc_access/storage.py b/kpi/deployment_backends/kc_access/storage.py
index 8588e60129..946bc67a20 100644
--- a/kpi/deployment_backends/kc_access/storage.py
+++ b/kpi/deployment_backends/kc_access/storage.py
@@ -1,4 +1,3 @@
-# coding: utf-8
 from django.conf import settings as django_settings
 from django.core.files.storage import FileSystemStorage
 from django.utils.functional import SimpleLazyObject
diff --git a/kpi/deployment_backends/kc_access/utils.py b/kpi/deployment_backends/kc_access/utils.py
index 13b17386ce..a10ac205a7 100644
--- a/kpi/deployment_backends/kc_access/utils.py
+++ b/kpi/deployment_backends/kc_access/utils.py
@@ -311,14 +311,14 @@ def assign_applicable_kc_permissions(
         **obj.KC_CONTENT_TYPE_KWARGS)
 
     kc_permissions_already_assigned = KobocatUserObjectPermission.objects.filter(
-        user_id=user.pk, permission__in=permissions, object_pk=xform_id,
+        user_id=user_id, permission__in=permissions, object_pk=xform_id,
     ).values_list('permission__codename', flat=True)
     permissions_to_create = []
     for permission in permissions:
         if permission.codename in kc_permissions_already_assigned:
             continue
         permissions_to_create.append(KobocatUserObjectPermission(
-            user_id=user.pk, permission=permission, object_pk=xform_id,
+            user_id=user_id, permission=permission, object_pk=xform_id,
             content_type=xform_content_type
         ))
     KobocatUserObjectPermission.objects.bulk_create(permissions_to_create)
@@ -367,6 +367,44 @@ def remove_applicable_kc_permissions(
     ).delete()
 
 
+def reset_kc_permissions(
+    obj: Model,
+    user: Union[AnonymousUser, User, int],
+):
+    """
+    Remove the `user` all KC permissions from `obj`, if any
+    exists.
+    This should not called without a subsequent call of
+    `assign_applicable_kc_permissions()`
+    """
+
+    if not obj._meta.model_name == 'asset':
+        return
+    xform_id = _get_xform_id_for_asset(obj)
+    if not xform_id:
+        return
+
+    # Retrieve primary key from user object and use it on subsequent queryset.
+    # It avoids loading the object when `user` is passed as an integer.
+    if not isinstance(user, int):
+        if is_user_anonymous(user):
+            user_id = settings.ANONYMOUS_USER_ID
+        else:
+            user_id = user.pk
+    else:
+        user_id = user
+
+    if user_id == settings.ANONYMOUS_USER_ID:
+        raise NotImplementedError
+
+    content_type_kwargs = _get_content_type_kwargs_for_related(obj)
+    KobocatUserObjectPermission.objects.filter(
+        user_id=user_id, object_pk=xform_id,
+        # `permission` has a FK to `ContentType`, but I'm paranoid
+        **content_type_kwargs
+    ).delete()
+
+
 def delete_kc_user(username: str):
     url = settings.KOBOCAT_INTERNAL_URL + f'/api/v1/users/{username}'
 
diff --git a/kpi/deployment_backends/kobocat_backend.py b/kpi/deployment_backends/kobocat_backend.py
index d9eb41305d..fa71754271 100644
--- a/kpi/deployment_backends/kobocat_backend.py
+++ b/kpi/deployment_backends/kobocat_backend.py
@@ -1,12 +1,10 @@
-# coding: utf-8
 from __future__ import annotations
 
 import io
 import json
-import os.path
-import posixpath
 import re
 from collections import defaultdict
+from contextlib import contextmanager
 from datetime import date, datetime
 from typing import Generator, Optional, Union
 from urllib.parse import urlparse
@@ -16,11 +14,12 @@
     from backports.zoneinfo import ZoneInfo
 
 import requests
+import redis.exceptions
 from defusedxml import ElementTree as DET
 from django.conf import settings
 from django.core.exceptions import ImproperlyConfigured
 from django.core.files import File
-from django.db.models import Sum
+from django.db.models import Sum, F
 from django.db.models.functions import Coalesce
 from django.db.models.query import QuerySet
 from django.utils import timezone
@@ -28,8 +27,9 @@
 from django_redis import get_redis_connection
 from kobo_service_account.utils import get_request_headers
 from rest_framework import status
-from rest_framework.reverse import reverse
 
+from kobo.apps.subsequences.utils import stream_with_extras
+from kobo.apps.trackers.models import NLPUsageCounter
 from kpi.constants import (
     SUBMISSION_FORMAT_TYPE_JSON,
     SUBMISSION_FORMAT_TYPE_XML,
@@ -51,17 +51,20 @@
 from kpi.interfaces.sync_backend_media import SyncBackendMediaInterface
 from kpi.models.asset_file import AssetFile
 from kpi.models.object_permission import ObjectPermission
+from kpi.models.paired_data import PairedData
+from kpi.utils.django_orm_helper import UpdateJSONFieldAttributes
 from kpi.utils.log import logging
 from kpi.utils.mongo_helper import MongoHelper
 from kpi.utils.object_permission import get_database_user
 from kpi.utils.permissions import is_user_anonymous
-from kpi.utils.submission import get_attachment_filenames_and_xpaths
 from kpi.utils.xml import fromstring_preserve_root_xmlns, xml_tostring
 from .base_backend import BaseDeploymentBackend
 from .kc_access.shadow_models import (
+    KobocatAttachment,
     KobocatDailyXFormSubmissionCounter,
+    KobocatMonthlyXFormSubmissionCounter,
+    KobocatUserProfile,
     KobocatXForm,
-    KobocatAttachment,
     ReadOnlyKobocatInstance,
 )
 from .kc_access.utils import (
@@ -75,9 +78,6 @@
     KobocatDuplicateSubmissionException,
 )
 
-from kobo.apps.subsequences.utils import stream_with_extras
-from kobo.apps.trackers.models import NLPUsageCounter
-
 
 class KobocatDeploymentBackend(BaseDeploymentBackend):
     """
@@ -122,47 +122,21 @@ def calculated_submission_count(self, user: 'auth.User', **kwargs) -> int:
         )
         return MongoHelper.get_count(self.mongo_userform_id, **params)
 
-    def connect(self, identifier=None, active=False):
+    def connect(self, active=False):
         """
         `POST` initial survey content to KoBoCAT and create a new project.
         Store results in deployment data.
         CAUTION: Does not save deployment data to the database!
         """
-        # If no identifier was provided, construct one using
-        # `settings.KOBOCAT_URL` and the uid of the asset
-        if not identifier:
-            # Use the external URL here; the internal URL will be substituted
-            # in when appropriate
-            if not settings.KOBOCAT_URL or not settings.KOBOCAT_INTERNAL_URL:
-                raise ImproperlyConfigured(
-                    'Both KOBOCAT_URL and KOBOCAT_INTERNAL_URL must be '
-                    'configured before using KobocatDeploymentBackend'
-                )
-            kc_server = settings.KOBOCAT_URL
-            username = self.asset.owner.username
-            id_string = self.asset.uid
-            identifier = '{server}/{username}/forms/{id_string}'.format(
-                server=kc_server,
-                username=username,
-                id_string=id_string,
+        # Use the external URL here; the internal URL will be substituted
+        # in when appropriate
+        if not settings.KOBOCAT_URL or not settings.KOBOCAT_INTERNAL_URL:
+            raise ImproperlyConfigured(
+                'Both KOBOCAT_URL and KOBOCAT_INTERNAL_URL must be '
+                'configured before using KobocatDeploymentBackend'
             )
-        else:
-            # Parse the provided identifier, which is expected to follow the
-            # format http://kobocat_server/username/forms/id_string
-            kc_server, kc_path = self.__parse_identifier(identifier)
-            path_head, path_tail = posixpath.split(kc_path)
-            id_string = path_tail
-            path_head, path_tail = posixpath.split(path_head)
-            if path_tail != 'forms':
-                raise Exception('The identifier is not properly formatted.')
-            path_head, path_tail = posixpath.split(path_head)
-            if path_tail != self.asset.owner.username:
-                raise Exception(
-                    'The username in the identifier does not match the owner '
-                    'of this asset.'
-                )
-            if path_head != '/':
-                raise Exception('The identifier is not properly formatted.')
+        kc_server = settings.KOBOCAT_URL
+        id_string = self.asset.uid
 
         url = self.external_to_internal_url('{}/api/v1/forms'.format(kc_server))
         xlsx_io = self.asset.to_xlsx_io(
@@ -190,7 +164,6 @@ def connect(self, identifier=None, active=False):
             'POST', url, data=payload, files=files)
         self.store_data({
             'backend': 'kobocat',
-            'identifier': self.internal_to_external_url(identifier),
             'active': json_response['downloadable'],
             'backend_response': json_response,
             'version': self.asset.version_id,
@@ -237,8 +210,9 @@ def submission_count_since_date(self, start_date=None):
         if start_date:
             filter_args['date__range'] = [start_date, today]
         try:
-            # Note: this is replicating the functionality that was formerly in `current_month_submission_count`
-            # `current_month_submission_count` didn't account for partial permissions, and this doesn't either
+            # Note: this is replicating the functionality that was formerly in
+            # `current_month_submission_count`. `current_month_submission_count`
+            # didn't account for partial permissions, and this doesn't either
             total_submissions = KobocatDailyXFormSubmissionCounter.objects.only(
                 'date', 'counter'
             ).filter(**filter_args).aggregate(count_sum=Coalesce(Sum('counter'), 0))
@@ -812,7 +786,7 @@ def get_submissions(
 
         If `request` is provided, submission attachments url are rewritten to
         point to KPI (instead of KoBoCAT).
-        See `__rewrite_json_attachment_urls()`
+        See `BaseDeploymentBackend._rewrite_json_attachment_urls()`
         """
 
         mongo_query_params['submission_ids'] = submission_ids
@@ -850,21 +824,6 @@ def internal_to_external_url(url):
             string=url
         )
 
-    @staticmethod
-    def make_identifier(username, id_string):
-        """
-        Uses `settings.KOBOCAT_URL` to construct an identifier from a
-        username and id string, without the caller having to specify a server
-        or know the full format of KC identifiers
-        """
-        # No need to use the internal URL here; it will be substituted in when
-        # appropriate
-        return '{}/{}/forms/{}'.format(
-            settings.KOBOCAT_URL,
-            username,
-            id_string
-        )
-
     @property
     def mongo_userform_id(self):
         return '{}_{}'.format(self.asset.owner.username, self.xform_id_string)
@@ -893,21 +852,14 @@ def redeploy(self, active=None):
             'has_kpi_hook': self.asset.has_active_hooks
         }
         files = {'xls_file': ('{}.xlsx'.format(id_string), xlsx_io)}
-        try:
-            json_response = self._kobocat_request(
-                'PATCH', url, data=payload, files=files)
-            self.store_data({
-                'active': json_response['downloadable'],
-                'backend_response': json_response,
-                'version': self.asset.version_id,
-            })
-        except KobocatDeploymentException as e:
-            if hasattr(e, 'response') and e.response.status_code == 404:
-                # Whoops, the KC project we thought we were going to overwrite
-                # is gone! Try a standard deployment instead
-                return self.connect(self.identifier, active)
-            raise
-
+        json_response = self._kobocat_request(
+            'PATCH', url, data=payload, files=files
+        )
+        self.store_data({
+            'active': json_response['downloadable'],
+            'backend_response': json_response,
+            'version': self.asset.version_id,
+        })
         self.set_asset_uid()
 
     def remove_from_kc_only_flag(self,
@@ -942,6 +894,21 @@ def remove_from_kc_only_flag(self,
 
         ObjectPermission.objects.filter(**filters).delete()
 
+    def rename_enketo_id_key(self, previous_owner_username: str):
+        parsed_url = urlparse(settings.KOBOCAT_URL)
+        domain_name = parsed_url.netloc
+        asset_uid = self.asset.uid
+        enketo_redis_client = get_redis_connection('enketo_redis_main')
+
+        try:
+            enketo_redis_client.rename(
+                src=f'or:{domain_name}/{previous_owner_username},{asset_uid}',
+                dst=f'or:{domain_name}/{self.asset.owner.username},{asset_uid}'
+            )
+        except redis.exceptions.ResponseError:
+            # original does not exist, weird but don't raise a 500 for that
+            pass
+
     def set_active(self, active):
         """
         `PATCH` active boolean of the survey.
@@ -1251,6 +1218,7 @@ def xform(self):
                 )  # Avoid extra query to validate username below
                 .first()
             )
+
             if not (
                 xform
                 and xform.user.username == self.asset.owner.username
@@ -1277,6 +1245,71 @@ def timestamp(self):
         except KeyError:
             return None
 
+    @staticmethod
+    @contextmanager
+    def suspend_submissions(user_ids: list[int]):
+        KobocatUserProfile.objects.filter(
+            user_id__in=user_ids
+        ).update(
+            metadata=UpdateJSONFieldAttributes(
+                'metadata',
+                updates={'submissions_suspended': True},
+            ),
+        )
+        try:
+            yield
+        finally:
+            KobocatUserProfile.objects.filter(
+                user_id__in=user_ids
+            ).update(
+                metadata=UpdateJSONFieldAttributes(
+                    'metadata',
+                    updates={'submissions_suspended': False},
+                ),
+            )
+
+    def transfer_submissions_ownership(
+        self, previous_owner_username: str
+    ) -> bool:
+
+        results = settings.MONGO_DB.instances.update_many(
+            {'_userform_id': f'{previous_owner_username}_{self.xform_id_string}'},
+            {
+                '$set': {
+                    '_userform_id': self.mongo_userform_id
+                }
+            },
+        )
+
+        return (
+            results.matched_count == 0 or
+            (
+                results.matched_count > 0
+                and results.matched_count == results.modified_count
+            )
+        )
+
+    def transfer_counters_ownership(self, new_owner: 'auth.User'):
+
+        NLPUsageCounter.objects.filter(
+            asset=self.asset, user=self.asset.owner
+        ).update(user=new_owner)
+        KobocatDailyXFormSubmissionCounter.objects.filter(
+            xform=self.xform, user_id=self.asset.owner.pk
+        ).update(user=new_owner)
+        KobocatMonthlyXFormSubmissionCounter.objects.filter(
+            xform=self.xform, user_id=self.asset.owner.pk
+        ).update(user=new_owner)
+
+        KobocatUserProfile.objects.filter(user_id=self.asset.owner.pk).update(
+            attachment_storage_bytes=F('attachment_storage_bytes')
+            - self.xform.attachment_storage_bytes
+        )
+        KobocatUserProfile.objects.filter(user_id=self.asset.owner.pk).update(
+            attachment_storage_bytes=F('attachment_storage_bytes')
+            + self.xform.attachment_storage_bytes
+        )
+
     def _kobocat_request(self, method, url, expect_formid=True, **kwargs):
         """
         Make a POST or PATCH request and return parsed JSON. Keyword arguments,
@@ -1354,6 +1387,10 @@ def _last_submission_time(self):
         return last_submission_time(
             xform_id_string=id_string, user_id=self.asset.owner.pk)
 
+    @property
+    def _open_rosa_server_storage(self):
+        return default_kobocat_storage
+
     def __delete_kc_metadata(
         self, kc_file_: dict, file_: Union[AssetFile, PairedData] = None
     ):
@@ -1398,7 +1435,7 @@ def __get_submissions_in_json(
             mongo_cursor = stream_with_extras(mongo_cursor, self.asset)
 
         return (
-            self.__rewrite_json_attachment_urls(
+            self._rewrite_json_attachment_urls(
                 MongoHelper.to_readable_dict(submission),
                 request,
             )
@@ -1474,16 +1511,6 @@ def __kobocat_proxy_request(kc_request, user=None):
         session = requests.Session()
         return session.send(kc_request.prepare())
 
-    @staticmethod
-    def __parse_identifier(identifier: str) -> tuple:
-        """
-        Return a tuple of the KoBoCAT server and its path
-        """
-        parsed_identifier = urlparse(identifier)
-        server = '{}://{}'.format(
-            parsed_identifier.scheme, parsed_identifier.netloc)
-        return server, parsed_identifier.path
-
     @staticmethod
     def __prepare_as_drf_response_signature(
         requests_response, expected_response_format='json'
@@ -1586,47 +1613,13 @@ def prepare_bulk_update_response(kc_responses: list) -> dict:
             },
         }
 
-    def __rewrite_json_attachment_urls(
-        self, submission: dict, request
-    ) -> dict:
-        if not request or '_attachments' not in submission:
-            return submission
-
-        attachment_xpaths = self.asset.get_attachment_xpaths(deployed=True)
-        filenames_and_xpaths = get_attachment_filenames_and_xpaths(
-            submission, attachment_xpaths
-        )
-
-        for attachment in submission['_attachments']:
-            for size, suffix in settings.KOBOCAT_THUMBNAILS_SUFFIX_MAPPING.items():
-                # We should use 'attachment-list' with `?xpath=` but we do not
-                # know what the XPath is here. Since the primary key is already
-                # exposed, let's use it to build the url with 'attachment-detail'
-                kpi_url = reverse(
-                    'attachment-detail',
-                    args=(self.asset.uid, submission['_id'], attachment['id']),
-                    request=request,
-                )
-                key = f'download{suffix}_url'
-                try:
-                    attachment[key] = kpi_url
-                except KeyError:
-                    continue
-
-            # Retrieve XPath and add it to attachment dictionary
-            basename = os.path.basename(attachment['filename'])
-            attachment['question_xpath'] = filenames_and_xpaths.get(basename, '')
-
-        return submission
-
     def __save_kc_metadata(self, file_: SyncBackendMediaInterface):
         """
         Prepares request and data corresponding to the kind of media file
         (i.e. FileStorage or remote URL) to `POST` to KC through proxy.
         """
-        identifier = self.identifier
-        server, path_ = self.__parse_identifier(identifier)
-        metadata_url = self.external_to_internal_url(f'{server}/api/v1/metadata')
+        server = settings.KOBOCAT_INTERNAL_URL
+        metadata_url = f'{server}/api/v1/metadata'
 
         kwargs = {
             'data': {
@@ -1663,11 +1656,8 @@ def __update_kc_metadata_hash(
         """
         Update metadata hash in KC
         """
-        identifier = self.identifier
-        server, path_ = self.__parse_identifier(identifier)
-        metadata_detail_url = self.external_to_internal_url(
-            f'{server}/api/v1/metadata/{kc_metadata_id}'
-        )
+        server = settings.KOBOCAT_INTERNAL_URL
+        metadata_detail_url = f'{server}/api/v1/metadata/{kc_metadata_id}'
 
         data = {'file_hash': file_.md5_hash}
         self._kobocat_request('PATCH',
diff --git a/kpi/deployment_backends/mock_backend.py b/kpi/deployment_backends/mock_backend.py
index e1af4f8cb8..79f05cbd90 100644
--- a/kpi/deployment_backends/mock_backend.py
+++ b/kpi/deployment_backends/mock_backend.py
@@ -6,6 +6,7 @@
 import time
 import uuid
 from collections import defaultdict
+from contextlib import contextmanager
 from datetime import date, datetime
 from typing import Optional, Union
 try:
@@ -62,6 +63,12 @@ def attachment_storage_bytes(self):
             storage_bytes += sum([attachment.media_file_size for attachment in attachments])
         return storage_bytes
 
+    @property
+    def backend_response(self):
+        backend_response_ = self.get_data('backend_response', {})
+        backend_response_['formid'] = self.asset.uid
+        return backend_response_
+
     def bulk_assign_mapped_perms(self):
         pass
 
@@ -78,7 +85,6 @@ def generate_uuid_for_form():
 
         self.store_data({
             'backend': 'mock',
-            'identifier': 'mock://%s' % self.asset.uid,
             'active': active,
             'backend_response': {
                 'downloadable': active,
@@ -390,7 +396,10 @@ def get_submissions(
         self.current_submission_count = total_count
 
         submissions = [
-            MongoHelper.to_readable_dict(submission)
+            self._rewrite_json_attachment_urls(
+                MongoHelper.to_readable_dict(submission),
+                request,
+            )
             for submission in mongo_cursor
         ]
 
@@ -441,7 +450,7 @@ def mongo_userform_id(self):
 
     def redeploy(self, active: bool = None):
         """
-        Replace (overwrite) the deployment, keeping the same identifier, and
+        Replace (overwrite) the deployment, and
         optionally changing whether the deployment is active
         """
         if active is None:
@@ -454,6 +463,9 @@ def redeploy(self, active: bool = None):
 
         self.set_asset_uid()
 
+    def rename_enketo_id_key(self, previous_owner_username: str):
+        pass
+
     def set_active(self, active: bool):
         self.save_to_db({
             'active': bool(active),
@@ -621,11 +633,47 @@ def get_app_label_and_model_name(cls):
 
         return MockLoggerInstance
 
+    @staticmethod
+    @contextmanager
+    def suspend_submissions(user_ids: list[int]):
+        try:
+            yield
+        finally:
+            pass
+
     def sync_media_files(self, file_type: str = AssetFile.FORM_MEDIA):
         queryset = self._get_metadata_queryset(file_type=file_type)
         for obj in queryset:
             assert issubclass(obj.__class__, SyncBackendMediaInterface)
 
+    def transfer_counters_ownership(self, new_owner: 'auth.User'):
+        NLPUsageCounter.objects.filter(
+            asset=self.asset, user=self.asset.owner
+        ).update(user=new_owner)
+
+        # Kobocat models are not implemented, but mocked in unit tests.
+
+    def transfer_submissions_ownership(
+        self, previous_owner_username: str
+    ) -> bool:
+
+        results = settings.MONGO_DB.instances.update_many(
+            {'_userform_id': f'{previous_owner_username}_{self.xform_id_string}'},
+            {
+                '$set': {
+                    '_userform_id': self.mongo_userform_id
+                }
+            },
+        )
+
+        return (
+            results.matched_count == 0 or
+            (
+                results.matched_count > 0
+                and results.matched_count == results.modified_count
+            )
+        )
+
     @property
     def xform(self):
         """
@@ -633,6 +681,10 @@ def xform(self):
         """
         pass
 
+    @property
+    def xform_id_string(self):
+        return self.asset.uid
+
     @classmethod
     def __prepare_bulk_update_data(cls, updates: dict) -> dict:
         """
diff --git a/kpi/fields/file.py b/kpi/fields/file.py
new file mode 100644
index 0000000000..8ffe14b291
--- /dev/null
+++ b/kpi/fields/file.py
@@ -0,0 +1,57 @@
+import os
+import posixpath
+
+from django.db.models import FileField
+from django.db.models.fields.files import FieldFile
+from storages.backends.s3boto3 import ClientError, S3Boto3Storage
+
+
+class ExtendedFieldFile(FieldFile):
+
+    def move(self, target_folder: str):
+
+        old_path = self.name
+        filename = os.path.basename(old_path)
+        new_path = f'{target_folder}/{filename}'
+
+        if isinstance(self.storage, S3Boto3Storage):
+            copy_source = {
+                'Bucket': self.storage.bucket.name,
+                'Key': self.name
+            }
+            try:
+                self.storage.bucket.copy(copy_source, new_path)
+                self.storage.delete(old_path)
+            except ClientError:
+                return False
+
+            self.name = new_path
+            return True
+
+        upload_to = self.field.upload_to
+        # Temporary change `upload_to` - which is called internally by
+        # `self.save()` below - to new target folder
+        self.field.upload_to = lambda i, fn: posixpath.join(target_folder, fn)
+        success = False
+        try:
+            with self.storage.open(old_path, 'rb') as f:
+                self.save(filename, f, save=False)
+            self.storage.delete(old_path)
+            success = True
+        except FileNotFoundError:
+            pass
+        finally:
+            # Restore `upload_to`
+            self.field.upload_to = upload_to
+
+        return success
+
+
+class ExtendedFileField(FileField):
+
+    attr_class = ExtendedFieldFile
+
+
+class PrivateExtendedFileField(ExtendedFileField):
+
+    pass
diff --git a/kpi/management/commands/sync_kobocat_xforms.py b/kpi/management/commands/sync_kobocat_xforms.py
index 6493e2c985..f31d8094e7 100644
--- a/kpi/management/commands/sync_kobocat_xforms.py
+++ b/kpi/management/commands/sync_kobocat_xforms.py
@@ -261,8 +261,6 @@ def _sync_form_metadata(asset, xform, changes):
         kc_deployment = KobocatDeploymentBackend(asset)
         kc_deployment.store_data({
             'backend': 'kobocat',
-            'identifier': KobocatDeploymentBackend.make_identifier(
-                user.username, xform.id_string),
             'active': xform.downloadable,
             'backend_response': _get_kc_backend_response(xform),
             'version': asset.version_id
@@ -287,15 +285,6 @@ def _sync_form_metadata(asset, xform, changes):
         fetch_backend_response = True
         changes.append('ACTIVE')
 
-    if settings.KOBOCAT_URL not in asset.deployment.identifier:
-        # Issue #1122
-        asset.deployment.store_data({
-            'identifier': KobocatDeploymentBackend.make_identifier(
-                user.username, xform.id_string)})
-        fetch_backend_response = True
-        modified = True
-        changes.append('IDENTIFIER')
-
     # Check to see if the asset name matches the xform title. Per #857, the
     # xform title takes priority.  The first check is a cheap one:
     if asset.name != xform.title:
diff --git a/kpi/migrations/0011_explode_asset_deployments.py b/kpi/migrations/0011_explode_asset_deployments.py
index ee3026e3ff..2898198a70 100644
--- a/kpi/migrations/0011_explode_asset_deployments.py
+++ b/kpi/migrations/0011_explode_asset_deployments.py
@@ -1,4 +1,5 @@
 # coding: utf-8
+import sys
 from django.db import migrations
 
 from kpi.deployment_backends.kobocat_backend import KobocatDeploymentBackend
@@ -22,8 +23,6 @@ def explode_assets(apps, schema_editor):
         kc_deployment = KobocatDeploymentBackend(asset)
         kc_deployment.store_data({
             'backend': 'kobocat',
-            'identifier': kc_deployment.make_identifier(
-                asset.owner.username, deployment.xform_id_string),
             'active': deployment.data['downloadable'],
             'backend_response': deployment.data,
             # deployment.asset_version_id was mistakenly set to the id of the
diff --git a/kpi/mixins/object_permission.py b/kpi/mixins/object_permission.py
index 042f94becb..90034551d2 100644
--- a/kpi/mixins/object_permission.py
+++ b/kpi/mixins/object_permission.py
@@ -745,7 +745,7 @@ def __get_all_object_permissions(object_id):
         are needed several times in a row (within the same request).
 
         It will hit the DB once for this object. If object permissions are needed
-        for an another user, in subsequent calls, they can be easily retrieved
+        for another user, in subsequent calls, they can be easily retrieved
         by the returned dict keys.
 
         Args:
diff --git a/kpi/models/asset.py b/kpi/models/asset.py
index 1e5e83af12..1fadab8501 100644
--- a/kpi/models/asset.py
+++ b/kpi/models/asset.py
@@ -412,6 +412,7 @@ class Meta:
         PERM_ADD_SUBMISSIONS: 'report_xform',  # "Can make submissions to the form" in KC shell
         PERM_DELETE_SUBMISSIONS: 'delete_data_xform',  # "Can delete submissions" in KC shell
         PERM_VALIDATE_SUBMISSIONS: 'validate_xform',  # "Can validate submissions" in KC shell
+        PERM_DELETE_ASSET: 'delete_xform',  # "Can delete XForm" in KC shell
     }
     KC_CONTENT_TYPE_KWARGS = {'app_label': 'logger', 'model': 'xform'}
     # KC records anonymous access as flags on the `XForm`
diff --git a/kpi/models/asset_file.py b/kpi/models/asset_file.py
index 09ae111aaf..7a73e57185 100644
--- a/kpi/models/asset_file.py
+++ b/kpi/models/asset_file.py
@@ -5,10 +5,10 @@
 
 from django.db import models
 from django.utils import timezone
-from private_storage.fields import PrivateFileField
 from rest_framework.reverse import reverse
 
 from kpi.fields import KpiUidField
+from kpi.fields.file import PrivateExtendedFileField
 from kpi.interfaces import (
     OpenRosaManifestInterface,
     SyncBackendMediaInterface,
@@ -100,7 +100,9 @@ class AssetFile(models.Model, AbstractFormMedia):
     file_type = models.CharField(choices=TYPE_CHOICES, max_length=32)
     description = models.CharField(max_length=255)
     date_created = models.DateTimeField(default=timezone.now)
-    content = PrivateFileField(upload_to=upload_to, max_length=380, null=True)
+    content = PrivateExtendedFileField(
+        upload_to=upload_to, max_length=380, null=True
+    )
     metadata = models.JSONField(default=dict)
     date_deleted = models.DateTimeField(null=True, default=None)
     date_modified = models.DateTimeField(default=timezone.now)
@@ -232,7 +234,7 @@ def set_md5_hash(self, md5_hash: Optional[str] = None):
                                           prefix=True)
             else:
                 try:
-                    md5_hash = calculate_hash(self.content.file.read(), prefix=True)
+                    md5_hash = calculate_hash(self.content.read(), prefix=True)
                 except ValueError:
                     md5_hash = None
 
diff --git a/kpi/serializers/v1/asset.py b/kpi/serializers/v1/asset.py
index a134df524d..2551f61d31 100644
--- a/kpi/serializers/v1/asset.py
+++ b/kpi/serializers/v1/asset.py
@@ -29,7 +29,6 @@ class Meta(AssetSerializerV2.Meta):
                   'has_deployment',
                   'deployed_version_id',
                   'deployed_versions',
-                  'deployment__identifier',
                   'deployment__links',
                   'deployment__active',
                   'deployment__data_download_links',
@@ -84,7 +83,6 @@ class Meta(AssetSerializer.Meta):
                   'version_id',
                   'has_deployment',
                   'deployed_version_id',
-                  'deployment__identifier',
                   'deployment__active',
                   'deployment__submission_count',
                   'permissions',
diff --git a/kpi/serializers/v2/asset.py b/kpi/serializers/v2/asset.py
index 011bfe9f2d..ebe0b9576d 100644
--- a/kpi/serializers/v2/asset.py
+++ b/kpi/serializers/v2/asset.py
@@ -3,6 +3,7 @@
 
 import json
 import re
+from typing import Optional
 
 from constance import config
 from django.conf import settings
@@ -329,7 +330,6 @@ class AssetSerializer(serializers.HyperlinkedModelSerializer):
         # request more than the first page
         default_limit=100
     )
-    deployment__identifier = serializers.SerializerMethodField()
     deployment__active = serializers.SerializerMethodField()
     deployment__links = serializers.SerializerMethodField()
     deployment__data_download_links = serializers.SerializerMethodField()
@@ -346,6 +346,7 @@ class AssetSerializer(serializers.HyperlinkedModelSerializer):
     access_types = serializers.SerializerMethodField()
     data_sharing = WritableJSONField(required=False)
     paired_data = serializers.SerializerMethodField()
+    project_ownership = serializers.SerializerMethodField()
 
     class Meta:
         model = Asset
@@ -367,7 +368,6 @@ class Meta:
                   'has_deployment',
                   'deployed_version_id',
                   'deployed_versions',
-                  'deployment__identifier',
                   'deployment__links',
                   'deployment__active',
                   'deployment__data_download_links',
@@ -403,6 +403,7 @@ class Meta:
                   'access_types',
                   'data_sharing',
                   'paired_data',
+                  'project_ownership',
                   )
         extra_kwargs = {
             'parent': {
@@ -578,10 +579,6 @@ def get_deployed_version_id(self, obj):
         else:
             return obj.deployment.version_id
 
-    def get_deployment__identifier(self, obj):
-        if obj.has_deployment:
-            return obj.deployment.identifier
-
     def get_deployment__active(self, obj):
         return obj.has_deployment and obj.deployment.active
 
@@ -688,6 +685,34 @@ def get_permissions(self, obj):
             queryset.all(), many=True, read_only=True, context=context
         ).data
 
+    def get_project_ownership(self, asset) -> Optional[dict]:
+        pass
+
+    def get_project_ownership(self, asset) -> Optional[dict]:
+        if not (transfer := asset.transfers.order_by('-date_created').first()):
+            return
+
+        request = self.context.get('request')
+        user = get_database_user(request.user)
+
+        # Do not provide info if user is not concerned by last invite
+        if not (
+            transfer.invite.sender_id == user.pk
+            or transfer.invite.recipient_id == user.pk
+        ):
+            return
+
+        return {
+            'invite': reverse(
+                'project-ownership-invite-detail',
+                args=(transfer.invite.uid,),
+                request=self.context.get('request', None),
+            ),
+            'sender': transfer.invite.sender.username,
+            'recipient': transfer.invite.recipient.username,
+            'status': transfer.status
+        }
+
     def get_exports(self, obj: Asset) -> str:
         return reverse(
             'asset-export-list',
@@ -946,7 +971,6 @@ class Meta(AssetSerializer.Meta):
                   'version_id',
                   'has_deployment',
                   'deployed_version_id',
-                  'deployment__identifier',
                   'deployment__active',
                   'deployment__submission_count',
                   'deployment_status',
diff --git a/kpi/serializers/v2/deployment.py b/kpi/serializers/v2/deployment.py
index 7929daaf27..956568c228 100644
--- a/kpi/serializers/v2/deployment.py
+++ b/kpi/serializers/v2/deployment.py
@@ -7,7 +7,6 @@
 
 class DeploymentSerializer(serializers.Serializer):
     backend = serializers.CharField(required=False)
-    identifier = serializers.CharField(read_only=True)
     active = serializers.BooleanField(required=False)
     version_id = serializers.CharField(required=False)
     asset = serializers.SerializerMethodField()
@@ -32,7 +31,7 @@ def create(self, validated_data):
         backend_id = validated_data.get('backend',
                                         settings.DEFAULT_DEPLOYMENT_BACKEND)
 
-        # asset.deploy deploys the latest version and updates that versions'
+        # `asset.deploy()` deploys the latest version and updates that versions'
         # 'deployed' boolean value
         asset.deploy(backend=backend_id,
                      active=validated_data.get('active', False))
diff --git a/kpi/tests/api/test_api_environment.py b/kpi/tests/api/test_api_environment.py
index 2328b21307..3fd75cb825 100644
--- a/kpi/tests/api/test_api_environment.py
+++ b/kpi/tests/api/test_api_environment.py
@@ -12,10 +12,10 @@
 from django.urls import reverse
 from django.utils import timezone
 from markdown import markdown
-from hub.models.sitewide_message import SitewideMessage
 from model_bakery import baker
 from rest_framework import status
 
+from hub.models.sitewide_message import SitewideMessage
 from hub.utils.i18n import I18nUtils
 from kobo.apps.accounts.mfa.models import MfaAvailableToUser
 from kobo.apps.constance_backends.utils import to_python_object
@@ -117,6 +117,7 @@ def setUp(self):
             'custom_password_localized_help_text': markdown(
                 I18nUtils.get_custom_password_help_text()
             ),
+            'open_rosa_server': settings.KOBOCAT_URL,
             'terms_of_service__sitewidemessage__exists': False,
         }
 
diff --git a/kpi/tests/api/v1/test_api_submissions.py b/kpi/tests/api/v1/test_api_submissions.py
index e592156918..2504f6a128 100644
--- a/kpi/tests/api/v1/test_api_submissions.py
+++ b/kpi/tests/api/v1/test_api_submissions.py
@@ -126,6 +126,10 @@ def test_delete_submission_shared_as_anotheruser(self):
     def test_delete_submission_with_partial_perms_as_anotheruser(self):
         pass
 
+    @pytest.mark.skip(reason='Rewrite should be used only with v2')
+    def test_attachments_rewrite(self):
+        pass
+
 
 class SubmissionEditApiTests(test_api_submissions.SubmissionEditApiTests):
 
diff --git a/kpi/tests/api/v2/test_api_attachments.py b/kpi/tests/api/v2/test_api_attachments.py
index 13db9e5cbe..cf5614f2d6 100644
--- a/kpi/tests/api/v2/test_api_attachments.py
+++ b/kpi/tests/api/v2/test_api_attachments.py
@@ -1,4 +1,3 @@
-# coding: utf-8
 import uuid
 
 from django.contrib.auth.models import User
diff --git a/kpi/tests/api/v2/test_api_submissions.py b/kpi/tests/api/v2/test_api_submissions.py
index e8777c5edf..318659feb3 100644
--- a/kpi/tests/api/v2/test_api_submissions.py
+++ b/kpi/tests/api/v2/test_api_submissions.py
@@ -17,13 +17,14 @@
 import responses
 from dict2xml import dict2xml
 from django.conf import settings
-from django.contrib.auth.models import User
+from django.contrib.auth import get_user_model
 from django.urls import reverse
 from django_digest.test import Client as DigestClient
 from rest_framework import status
 
 from kobo.apps.audit_log.models import AuditLog
 from kpi.constants import (
+    ASSET_TYPE_SURVEY,
     PERM_CHANGE_ASSET,
     PERM_ADD_SUBMISSIONS,
     PERM_CHANGE_SUBMISSIONS,
@@ -46,6 +47,8 @@
     enketo_view_instance_response,
 )
 
+User = get_user_model()
+
 
 def dict2xml_with_encoding_declaration(*args, **kwargs):
     return '<?xml version="1.0" encoding="utf-8"?>' + dict2xml(
@@ -902,6 +905,155 @@ def test_delete_submission_with_partial_perms_as_anotheruser(self):
             response.data['count'], anotheruser_submission_count - 1
         )
 
+    def test_attachments_rewrite(self):
+        """
+        Test:
+        - xpath detections for repeated group, nested group and non-latin
+          characters at the same
+        - attachment endpoints related to KPI domain name
+        """
+        content = {
+            'survey': [
+                {
+                    'name': 'group_ec9yq67',
+                    'type': 'begin_group',
+                    '$kuid': 'zo3lt68',
+                    'label': ['3 levels'],
+                    'required': False,
+                },
+                {
+                    'name': 'group_dq8as25',
+                    'type': 'begin_repeat',
+                    '$kuid': 'mg3vt38',
+                    'label': ['Repeated group - Upper level'],
+                    'required': False,
+                },
+                {
+                    'name': 'group_xt0za80',
+                    'type': 'begin_repeat',
+                    '$kuid': 'pp7xz89',
+                    'label': ['Repeated group - Nested'],
+                    'required': False,
+                },
+                {
+                    'type': 'image',
+                    '$kuid': 'ra2ti71',
+                    'label': ['my_attachment'],
+                    'required': False,
+                },
+                {'type': 'end_repeat', '$kuid': '/pp7xz89'},
+                {'type': 'end_repeat', '$kuid': '/mg3vt38'},
+                {'type': 'end_group', '$kuid': '/zo3lt68'},
+            ],
+            'settings': {},
+            'translated': ['label'],
+            'translations': [None],
+        }
+
+        asset = Asset.objects.create(
+            content=content,
+            owner=self.anotheruser,
+            asset_type=ASSET_TYPE_SURVEY,
+        )
+
+        asset.deploy(backend='mock', active=True)
+        asset.save()  # create version
+        v_uid = asset.latest_deployed_version.uid
+
+        submission = {
+            '_id': 1000,
+            '__version__': v_uid,
+            '_xform_id_string': asset.uid,
+            'formhub/uuid': 'formhub-uuid',
+            '_uuid': 'submission-uuid',
+            'group_ec9yq67/group_dq8as25': [
+                {
+                    'group_ec9yq67/group_dq8as25/group_xt0za80': [
+                        {
+                            'group_ec9yq67/group_dq8as25/group_xt0za80/my_attachment': 'IMG_4266-11_38_22.jpg'
+                        },
+                        {
+                            'group_ec9yq67/group_dq8as25/group_xt0za80/my_attachment': 'كوبو-رائع-10_7_41.jpg'
+                        },
+                    ]
+                },
+                {
+                    'group_ec9yq67/group_dq8as25/group_xt0za80': [
+                        {
+                            'group_ec9yq67/group_dq8as25/group_xt0za80/my_attachment': 'Screenshot 2024-02-14 at 18.31.39-11_38_35.png'
+                        }
+                    ]
+                },
+            ],
+            '_attachments': [
+                {
+                    'download_url': 'http://kc.testserver/1.jpg',
+                    'download_large_url': 'http://kc.testserver/1.jpg',
+                    'download_medium_url': 'http://kc.testserver/1.jpg',
+                    'download_small_url': 'http://kc.testserver/1.jpg',
+                    'mimetype': 'image/jpeg',
+                    'filename': 'anotheruser/attachments/formhub-uuid/submission-uuid/IMG_4266-11_38_22.jpg',
+                    'instance': 1,
+                    'xform': 1,
+                    'id': 1,
+                },
+                {
+                    'download_url': 'http://kc.testserver/2.jpg',
+                    'download_large_url': 'http://kc.testserver/2.jpg',
+                    'download_medium_url': 'http://kc.testserver/2.jpg',
+                    'download_small_url': 'http://kc.testserver/2.jpg',
+                    'mimetype': 'image/jpeg',
+                    'filename': 'anotheruser/attachments/formhub-uuid/submission-uuid/كوبو-رايع-10_7_41.jpg',
+                    'instance': 1,
+                    'xform': 1,
+                    'id': 2,
+                },
+                {
+                    'download_url': 'http://kc.testserver/3.jpg',
+                    'download_large_url': 'http://kc.testserver/3.jpg',
+                    'download_medium_url': 'http://kc.testserver/3.jpg',
+                    'download_small_url': 'http://kc.testserver/3.jpg',
+                    'mimetype': 'image/jpeg',
+                    'filename': 'anotheruser/attachments/formhub-uuid/submission-uuid/Screenshot_2024-02-14_at_18.31.39-11_38_35.png',
+                    'instance': 1,
+                    'xform': 1,
+                    'id': 3,
+                },
+            ],
+        }
+
+        asset.deployment.mock_submissions([submission])
+        asset.deployment.set_namespace(self.URL_NAMESPACE)
+
+        self._log_in_as_another_user()
+        url = asset.deployment.get_submission_detail_url(submission['_id'])
+
+        response = self.client.get(url, {'format': 'json'})
+        self.assertEqual(response.status_code, status.HTTP_200_OK)
+
+        attachments = response.data['_attachments']
+
+        expected_question_xpaths = [
+            'group_ec9yq67/group_dq8as25[1]/group_xt0za80[1]/my_attachment',
+            'group_ec9yq67/group_dq8as25[1]/group_xt0za80[2]/my_attachment',
+            'group_ec9yq67/group_dq8as25[2]/group_xt0za80[1]/my_attachment'
+        ]
+        expected_new_download_urls = [
+            'http://testserver/api/v2/assets/'
+            + asset.uid
+            + '/data/1000/attachments/1/?format=json',
+            'http://testserver/api/v2/assets/'
+            + asset.uid
+            + '/data/1000/attachments/2/?format=json',
+            'http://testserver/api/v2/assets/'
+            + asset.uid
+            + '/data/1000/attachments/3/?format=json',
+        ]
+
+        for idx, attachment in enumerate(attachments):
+            assert attachment['download_url'] == expected_new_download_urls[idx]
+            assert attachment['question_xpath'] == expected_question_xpaths[idx]
+
 
 class SubmissionEditApiTests(BaseSubmissionTestCase):
 
diff --git a/kpi/tests/test_deployment_backends.py b/kpi/tests/test_deployment_backends.py
index 64612e9277..9763691edc 100644
--- a/kpi/tests/test_deployment_backends.py
+++ b/kpi/tests/test_deployment_backends.py
@@ -63,10 +63,6 @@ def setUp(self):
         self.asset.deploy(backend='mock', active=False)
         self.asset.save()
 
-    def test_deployment_creates_identifier(self):
-        _uid = self.asset.uid
-        self.assertEqual(self.asset.deployment.identifier, 'mock://%s' % _uid)
-
     def test_deployment_starts_out_inactive(self):
         self.assertEqual(self.asset.deployment.active, False)
 
@@ -102,18 +98,16 @@ def test_delete(self):
 
     def test_get_not_mutable_deployment_data(self):
         deployment_data = self.asset.deployment.get_data()
-        original_identifier = deployment_data['identifier']
-        deployment_data['identifier'] = 'mock://test'
+        original_version = deployment_data['version']
+        deployment_data['version'] = 'undefined_version'
         # self.asset._deployment_data should have been touched
 
         # Check that original identifier still the same
-        self.assertEqual(self.asset.deployment.identifier,
-                         original_identifier)
+        self.assertEqual(self.asset.deployment.version_id, original_version)
 
         # Check that identifier has not been altered in deployment data
         other_deployment_data = self.asset.deployment.get_data()
-        self.assertEqual(other_deployment_data['identifier'],
-                         original_identifier)
+        self.assertEqual(other_deployment_data['version'], original_version)
 
     def test_save_to_db_with_quote(self):
         new_key = 'dummy'
diff --git a/kpi/tests/test_extended_file_field.py b/kpi/tests/test_extended_file_field.py
new file mode 100644
index 0000000000..1ffa3982e2
--- /dev/null
+++ b/kpi/tests/test_extended_file_field.py
@@ -0,0 +1,38 @@
+from django.core.files.base import ContentFile
+from django.core.files.storage import default_storage
+from django.test import override_settings, TestCase
+
+from kpi.models.asset import Asset
+from kpi.models.asset_file import AssetFile
+
+
+class ExtendedFileFieldTestCase(TestCase):
+
+    fixtures = ['test_data']
+
+    def test_move_file(self):
+        # Use AssetFile but could not any model which uses `ExtendedFileField`
+        asset = Asset.objects.get(pk=1)
+        asset_file = AssetFile(
+            asset=asset, user=asset.owner, file_type=AssetFile.FORM_MEDIA
+        )
+        asset_file.content = ContentFile(b'foo', name='foo.txt')
+        asset_file.save()
+        path = f'someuser/asset_files/{asset.uid}/form_media/foo.txt'
+        new_path = f'__pytest_moved/foo.txt'
+
+        try:
+            assert default_storage.exists(path)
+            assert not default_storage.exists(new_path)
+            asset_file.content.move('__pytest_moved')
+            assert not default_storage.exists(path)
+            assert default_storage.exists(new_path)
+
+            with default_storage.open(new_path, 'r') as f:
+                assert f.read() == 'foo'
+        finally:
+            # Clean-up
+            if default_storage.exists(path):
+                default_storage.delete(path)
+            if default_storage.exists(new_path):
+                default_storage.delete(new_path)
diff --git a/kpi/tests/test_utils.py b/kpi/tests/test_utils.py
index 2131cea3be..c7982358ee 100644
--- a/kpi/tests/test_utils.py
+++ b/kpi/tests/test_utils.py
@@ -304,94 +304,6 @@ def test_allow_choice_duplicates(self):
             == 'no'
         )
 
-    def test_question_xpaths(self):
-        # TODO Move this test to `api/v2` and make it work with mockbackend
-        #   when kpi#4743 is merged
-        content = {
-            'survey': [
-                {
-                    'name': 'group_ec9yq67',
-                    'type': 'begin_group',
-                    '$kuid': 'zo3lt68',
-                    'label': ['3 levels'],
-                    'required': False,
-                },
-                {
-                    'name': 'group_dq8as25',
-                    'type': 'begin_repeat',
-                    '$kuid': 'mg3vt38',
-                    'label': ['Repeated group - Upper level'],
-                    'required': False,
-                },
-                {
-                    'name': 'group_xt0za80',
-                    'type': 'begin_repeat',
-                    '$kuid': 'pp7xz89',
-                    'label': ['Repeated group - Nested'],
-                    'required': False,
-                },
-                {
-                    'type': 'image',
-                    '$kuid': 'ra2ti71',
-                    'label': ['my_attachment'],
-                    'required': False,
-                },
-                {'type': 'end_repeat', '$kuid': '/pp7xz89'},
-                {'type': 'end_repeat', '$kuid': '/mg3vt38'},
-                {'type': 'end_group', '$kuid': '/zo3lt68'},
-            ],
-            'settings': {},
-            'translated': ['label'],
-            'translations': [None],
-        }
-
-        user = get_user_model().objects.create(username='johndoe')
-        asset = Asset.objects.create(content=content, owner=user)
-        attachment_xpaths = asset.get_attachment_xpaths(deployed=False)
-        submission = {
-            'group_ec9yq67/group_dq8as25': [
-                {
-                    'group_ec9yq67/group_dq8as25/group_xt0za80': [
-                        {
-                            'group_ec9yq67/group_dq8as25/group_xt0za80/my_attachment': 'IMG_4266-11_38_22.jpg'
-                        },
-                        {
-                            'group_ec9yq67/group_dq8as25/group_xt0za80/my_attachment': 'كوبو-رائع-10_7_41.jpg'
-                        },
-                    ]
-                },
-                {
-                    'group_ec9yq67/group_dq8as25/group_xt0za80': [
-                        {
-                            'group_ec9yq67/group_dq8as25/group_xt0za80/my_attachment': 'Screenshot 2024-02-14 at 18.31.39-11_38_35.png'
-                        }
-                    ]
-                },
-            ]
-        }
-
-        attachment_basenames = [
-            'IMG_4266-11_38_22.jpg',
-            'كوبو-رايع-10_7_41.jpg',
-            'Screenshot_2024-02-14_at_18.31.39-11_38_35.png'
-        ]
-
-        expected_question_xpaths = [
-            'group_ec9yq67/group_dq8as25[1]/group_xt0za80[1]/my_attachment',
-            'group_ec9yq67/group_dq8as25[1]/group_xt0za80[2]/my_attachment',
-            'group_ec9yq67/group_dq8as25[2]/group_xt0za80[1]/my_attachment'
-        ]
-
-        filenames_and_xpaths = get_attachment_filenames_and_xpaths(
-            submission, attachment_xpaths
-        )
-
-        for idx, att_basename in enumerate(attachment_basenames):
-            assert (
-                filenames_and_xpaths.get(att_basename)
-                == expected_question_xpaths[idx]
-            )
-
 
 class XmlUtilsTestCase(TestCase):
 
diff --git a/kpi/urls/router_api_v2.py b/kpi/urls/router_api_v2.py
index ee62573c73..fa375b2aca 100644
--- a/kpi/urls/router_api_v2.py
+++ b/kpi/urls/router_api_v2.py
@@ -8,6 +8,7 @@
 from kobo.apps.hook.views.v2.hook_signal import HookSignalViewSet
 from kobo.apps.languages.urls import router as language_router
 from kobo.apps.organizations.views import OrganizationViewSet
+from kobo.apps.project_ownership.urls import router as project_ownership_router
 from kobo.apps.project_views.views import ProjectViewViewSet
 from kpi.views.v2.asset import AssetViewSet
 from kpi.views.v2.asset_counts import AssetCountsViewSet
@@ -155,6 +156,7 @@ def get_urls(self, *args, **kwargs):
 
 # Merge django apps routers with API v2 router
 # All routes are under `/api/v2/` within the same namespace.
+router_api_v2.registry.extend(project_ownership_router.registry)
 router_api_v2.registry.extend(language_router.registry)
 router_api_v2.registry.extend(audit_log_router.registry)
 
diff --git a/kpi/utils/mailer.py b/kpi/utils/mailer.py
new file mode 100644
index 0000000000..e627e636f7
--- /dev/null
+++ b/kpi/utils/mailer.py
@@ -0,0 +1,92 @@
+from __future__ import annotations
+
+from typing import Union
+from smtplib import SMTPException
+
+from constance import config
+from django.core.mail import send_mail, EmailMultiAlternatives, get_connection
+from django.template.loader import get_template
+from django.utils.translation import activate, gettext as t
+
+from kpi.utils.log import logging
+
+
+class EmailMessage:
+
+    def __init__(
+        self,
+        to: Union[str, list],
+        subject: str,
+        plain_text_content_or_template: str,
+        template_variables: dict = None,
+        html_content_or_template: str = None,
+        language: str = None,
+        from_: str = None,
+    ):
+        self.to = to
+        if isinstance(to, str):
+            self.to = [to]
+
+        self.from_ = config.SUPPORT_EMAIL if not from_ else from_
+
+        if language:
+            # Localize templates
+            activate(language)
+
+        self.subject = t(subject)
+
+        if template_variables is None:
+            self.text_message = plain_text_content_or_template
+        else:
+            self.text_message = get_template(
+                plain_text_content_or_template
+            ).render(template_variables)
+
+        self.html_message = None
+
+        if html_content_or_template:
+            self.html_message = (
+                html_content_or_template
+                if not template_variables
+                else get_template(html_content_or_template).render(
+                    template_variables
+                )
+            )
+
+    def to_multi_alternative(self):
+        message = EmailMultiAlternatives(
+            self.subject, self.text_message, self.from_, self.to
+        )
+        if self.html_message:
+            message.attach_alternative(self.html_message, 'text/html')
+        return message
+
+
+class Mailer:
+
+    @classmethod
+    def send(cls, email_messages: Union[EmailMessage, List[EmailMessage]]) -> bool:
+        if isinstance(email_messages, EmailMessage):
+            try:
+                send_mail(
+                    email_messages.subject,
+                    email_messages.text_message,
+                    email_messages.from_,
+                    email_messages.to,
+                    html_message=email_messages.html_message,
+                    fail_silently=False,
+                )
+            except SMTPException as e:
+                logging.error(str(e), exc_info=True)
+                return False
+        else:
+            # Django `send_mass_mail()` does not support HTML
+            email_messages = [em.to_multi_alternative() for em in email_messages]
+            try:
+                with get_connection() as connection:
+                    connection.send_messages(email_messages)
+            except SMTPException as e:
+                logging.error(str(e), exc_info=True)
+                return False
+
+        return True
diff --git a/kpi/views/environment.py b/kpi/views/environment.py
index 2b71fd052d..5970a928aa 100644
--- a/kpi/views/environment.py
+++ b/kpi/views/environment.py
@@ -193,6 +193,9 @@ def process_other_configs(request):
 
         return data
 
+    def static_configs(self, request):
+        return {'open_rosa_server': settings.KOBOCAT_URL}
+
     def get(self, request, *args, **kwargs):
         data = {}
         data.update(self.process_simple_configs())
@@ -203,4 +206,5 @@ def get(self, request, *args, **kwargs):
         data.update(self.process_project_metadata_configs(request))
         data.update(self.process_user_metadata_configs(request))
         data.update(self.process_other_configs(request))
+        data.update(self.static_configs(request))
         return Response(data)
diff --git a/kpi/views/v2/asset.py b/kpi/views/v2/asset.py
index 3f1ea5a18a..36845e5401 100644
--- a/kpi/views/v2/asset.py
+++ b/kpi/views/v2/asset.py
@@ -452,18 +452,8 @@ def deployment(self, request, uid):
         serializer_context = self.get_serializer_context()
         serializer_context['asset'] = asset
 
-        # TODO: Require the client to provide a fully-qualified identifier,
-        # otherwise provide less kludgy solution
         if 'identifier' not in request.data and 'id_string' in request.data:
-            id_string = request.data.pop('id_string')[0]
-            backend_name = request.data['backend']
-            try:
-                backend = DEPLOYMENT_BACKENDS[backend_name]
-            except KeyError:
-                raise KeyError(
-                    'cannot retrieve asset backend: "{}"'.format(backend_name))
-            request.data['identifier'] = backend.make_identifier(
-                request.user.username, id_string)
+            raise NotImplementedError
 
         if request.method == 'GET':
             if not asset.has_deployment: