Skip to main content

Free. On our server or on your own.

Our server costs nothing: it processes your files with fair limits — or you run the open-source engine yourself, with no feature gates.

On our server

€0

Files are deleted immediately after processing.

  • Without an account: up to 30 MB per file · single file at a time · API access without a key
  • With a free account: up to 100 MB per file
  • Batch upload: 10 files per request
  • API key — 1,000 calls / month, 1 concurrent
  • All formats + smart-tech
Get started free

On your own server

€0

Open source (AGPL-3.0), no feature gates

  • One-command Docker deploy
  • Self-hosted: no data processing on your behalf, no DPA needed
  • Signed releases + CycloneDX SBOM
  • Tamper-evident SHA-256 audit log
Self-hosting guide ↗

Fair use for everyone: a concurrency cap per account (per IP address without an account) keeps one batch from starving the server — requests past the cap return 429 with a Retry-After hint, and large batches are processed one file after another. All requests share the server's parallel slots, and the per-minute rate limit is the same for everyone — for example 10 requests per minute to convert or compress a file.

For public authorities, hospitals and law firms

Internal use is already free under AGPL-3.0. Why → If you need a contract behind it — a commercial license, a named contact, agreed response times — ask us.
See the Compliance Edition →

Questions about cost and limits

Will there be paid plans?

Not at the moment. If that changes, it will be announced here in advance — never as a surprise.

What do I need an account for?

For larger files, batch uploads of several files and an API key. Single files work without an account — on the website and via the API.

What if my file is too large?

With a free account our server takes files up to 100 MB. For larger files, run FileMorph on your own server — there you set the limits.

What you can verify today

  • Server at Hetzner in the EU, connections via Cloudflare (USA) — privacy policy § 4
  • Full source on GitHub (AGPLv3)
  • EU vendor with German imprint
  • CycloneDX SBOM per release
  • Signed releases (cosign + GPG)
  • Tamper-evident audit log

Being transparent about what is not done yet: no external ISO 27001 certification and no external penetration test yet (both planned once a paying pilot justifies the cost). The newest signed release on GitHub carries a CycloneDX SBOM and an image digest; changes since then ship in the continuously built image ahead of the next tag. Everything else above is in the repository today and auditable.