Community
Freeno key needed
Everything a team needs to put agents to work and stay safe, on your own infrastructure.
- Unlimited seats
- The audit of the last 90 days in the app
- Conversations and files never purged by retention
Pricing
Pay for seats, never for runs.
Tinfirm comes in three editions from one image. Community is free, Pro is €15 a seat a month, and Enterprise is negotiated. Agents, sandboxes, triggers and runs are unlimited in every edition, and your models are billed by your own provider.
Tinfirm isn't released yet. These are the editions and prices it launches with.
Pro
€15a seat a month, billed yearly
For an organisation that depends on Tinfirm and has to prove what its agents did.
- €180 a seat a year
- 5 to 150 seats
- In euros
Enterprise
Talk to usa negotiated contract
For regulated firms and large organisations: legal holds, enterprise sign-in and air-gapped installs.
- Seats as the contract says
- Legal holds
- Several companies in one install
Free in every edition
What you never pay for.
An organisation that depends on Tinfirm pays. A team that needs to see its value, and to stay safe while it does, doesn't.
Unlimited work
Agents, sandboxes, triggers and runs are never limited or metered. They run on your hardware and cost us nothing.
Budgets and kill switches
Budgets per person, kill switches and suspension come with every edition. Nobody should pay to stop an agent.
Erasure
Erase a person’s content in any edition, so no company pays to meet the GDPR.
OIDC sign-in
Local accounts or your own identity provider over OIDC: Entra ID, Keycloak, Okta or any other.
The audit, always recorded
Every tool call, run and choice of authority is recorded and hash-chained in every edition. Proving it, with export and chain checks, is Pro.
No usage or token fees
You bring your own models through LiteLLM and pay your provider directly. Model traffic doesn’t pass through us.
Editions
What each edition includes.
One image runs as Community, Pro or Enterprise, by the licence key it holds. Upgrading is pasting a key; nothing is reinstalled.
| Feature | Community | Pro | Enterprise |
|---|---|---|---|
| Agents, conversations, questions, approvals and the inboxUnlimited agents, sandboxes, triggers and runs | Included | Included | Included |
| Every system and triggerJira, GitHub, GitLab, other git hosts, Slack, Teams, your MCP servers, webhooks, schedules | Included | Included | Included |
| Your own AI client over MCP, personal access tokens | Included | Included | Included |
| Models through LiteLLMBudgets per person, spend views and alerts | Included | Included | Included |
| Sandboxes, the outbound guard, kill switches and suspension | Included | Included | Included |
| Groups and service identities | Included | Included | Included |
| Local sign-in and OIDC | Included | Included | Included |
| Erasure of a person’s content (GDPR) | Included | Included | Included |
| The audit, recorded and hash-chained | Included | Included | Included |
| The audit in the app | The last 90 days | All of it | All of it |
| The audit’s filters, export, chain verification and daily checks | Not included | Included | Included |
| Retention | Everything kept | Your own periods | Your own periods |
| The Outlook add-inHand an email to an agent from Outlook | Not included | Included | Included |
| tinfirm-loreYour tickets, Confluence pages and FAQs, searchable by your agents | Not included | Included | Included |
| Legal holds | Not included | Not included | Included |
| SAML and SCIMPlanned | Not included | Not included | Included |
| The audit streamed to your SIEMPlanned | Not included | Not included | Included |
| Several companies in one install | Not included | Not included | Included |
| High availabilityPlanned | Not included | Not included | Included |
| Air-gapped installationPlannedAn offline bundle of every image and update, the runner images prebuilt | Not included | Not included | Included |
| Seats | Unlimited | 5 to 150 | As the contract says |
Planned: in the design, not built yet. Each edition’s features are checked by the server, never by the web app alone.
Seats
A seat follows the role.
In Pro, the people who run Tinfirm or work with agents take a seat. Everyone who only reads, or who meets an agent where they already work, is free.
- Owners, Admins and Members take a seat. Members talk to agents, define and share them, author triggers, and answer and decide.
- Viewers are free. They sign in, read the conversations and results shared with their groups, and see their inbox. They don’t start conversations, answer agents’ questions, edit agents or author triggers.
- People in channels and on issues are free. Whoever mentions the bot in a channel or answers an agent on an issue or in a thread needs no seat, and neither do service identities. Their runs are paid from the trigger’s budget.
- Nothing stops mid-work. Seats are counted when someone is given a role. Signing in never fails for want of a seat: a new user joins as a Viewer and your Admins are told.
- OwnerRuns the company’s settingsSeat
- AdminSystems, identities, budgetsSeat
- MemberTalks to agents, authors triggers, decidesSeat
- ViewerReads what is shared with their groupsFree
The licence key
A key you paste. No call home.
A licence is a signed text string. You paste it in the app, and the server checks it itself, offline, so it works air-gapped too.
- Text, not a file. It comes by email, or is carried into an air-gapped network as text, and is pasted on the licence page.
- Checked offline. The server verifies the signature with the public key it ships with. No call leaves your install.
- One key per install. Seats added during the year come as a new key with the new total and the same end date, and it replaces the old one. The added seats are priced for the rest of the year: 10 seats with 4 months left cost €600.
- Renew ahead of time. Paste the renewal key before the end date and it takes over on its start date, air-gapped too.
- On the audit. Each key added or removed is recorded.
- Edition
- Pro
- Seats
- 12 of 20 taken
- Valid until
- The end of the licence year
Paste a new licence keyReplace
When a licence ends
Paid features go. Your data and compliance stay.
Nothing is deleted when a licence ends, and a new key restores everything at once.
30 days before
Your Admins see a notice, and each Owner gets an item in their inbox.
30 days of grace
After the end date everything keeps working, with the notice.
Then Community
Work in progress and data stay. The roles stay as they are, and seats are no longer counted.
Compliance stays
Retention periods in force keep running, open legal holds stay in force, and the audit’s export stays for 90 days more.
The licence
An open core, all of it public.
The core is MIT. The paid features live in one directory, ee/, under a commercial licence. Both are public in one repository, so your security team can audit everything you run.
- The core is MIT. Everything outside
ee/, and all the code your browser receives. ee/is commercial. Use in production needs a subscription; reading it, and changing it to develop and test, is free.- One repository, one image. Every edition is the same build; the key decides which features are on.
The licence files ship with Tinfirm’s first public release.