Free engine. Pay only for hosting or a license.
The FileMorph conversion engine is open source (AGPL-3.0) — self-host it free, forever, with no feature gates. The plans below are for our hosted instance and for embedding FileMorph in a closed-source product.
Using without an account: up to 30 MB per file · single file at a time · 10 requests/minute · no API access
Monthly call quotas are bucket sizes for spread-out use, not parallelism guarantees. Each tier has a per-key concurrency cap so one batch can't starve the whole worker pool — requests past the cap return
429
with a
Retry-After
hint. Large batches are processed sequentially inside the request.
Free
€0/mo
No credit card required
- up to 100 MB per file (vs. 30 MB anonymous)
- Batch upload: 10 files per request
- 30+ formats (images, docs, audio, video)
- API key — 1,000 calls / month, 1 concurrent, 10 req/min
- All smart-tech: compress-to-target, EXIF strip, PDF/A, integrity hash
Pro
€3/mo
Billed monthly, cancel anytime
- up to 250 MB per file
- Batch upload: 50 files per request
- 30+ formats incl. video
- 25,000 API calls / month, 3 concurrent, 10 req/min
- E-mail support
Business
€9/mo
Billed monthly, cancel anytime
- up to 500 MB per file
- Batch upload: 150 files per request
- 200,000 API calls / month, 6 concurrent, 10 req/min
- 30+ formats (images, docs, audio, video)
- Priority support (best effort)
Building a closed-source product, SaaS, or OEM integration on FileMorph? See licensing →
Behörden · Krankenhäuser · Kanzleien
Runs behind your firewall — citizen, patient and client data never leaves your infrastructure. EU vendor, German imprint.
- Self-hosted (on-prem / air-gap)
- Art. 28 GDPR DPA template
- Tamper-evident SHA-256 audit log
- PDF/A-2b (veraPDF CI gate)
- Signed releases + CycloneDX SBOM
- Commercial license on top of AGPL
Compare plans
| Feature | Free | Pro | Business | Compliance |
|---|---|---|---|---|
| Max file size | 100 MB | 250 MB | 500 MB | self-set |
| Batch / request | 10 | 50 | 150 | 250 |
| API calls / month | 1,000 | 25,000 | 200,000 | unlimited* |
| Concurrent slots | 1 | 3 | 6 | custom |
| All formats + smart-tech | ✓ | ✓ | ✓ | ✓ |
| Self-hosted | — | — | — | ✓ |
| Art. 28 DPA template | — | — | — | ✓ |
| Audit log + signed releases | — | — | — | ✓ |
| Commercial license | — | — | — | ✓ |
| Support | — | priority | SLA |
* Unlimited within your self-hosted infrastructure — you run the server.
What you can verify today
- EU hosting, German imprint
- Full source on GitHub (AGPLv3)
- GDPR + Art. 28 DPA template
- CycloneDX SBOM per release
- Signed releases (cosign + GPG)
- Tamper-evident audit log
Being transparent about what is not done yet: no external ISO 27001 certification and no external penetration test yet (both planned once a paying pilot justifies the cost), and no tagged release cut yet — the signing/SBOM pipeline is wired in CI and produces those artefacts on the first tag. Everything else above is in the repository today and auditable.
Kleinunternehmer gemäß §19 UStG — keine Umsatzsteuer ausgewiesen (no VAT charged, small-business rule, §19 German VAT Act). Payments processed by Stripe.