Two choices. Free forever, or everything unlocked for €10 a month per device. Your compute runs on your hardware — we never throttle what you own.
Free
Apache-2.0 open source on GitHub
€10
per device / per month
€0.33 per day · cancel anytime
Secure checkout via Paddle · VAT included
Every feature, every limit — no surprises.
| Feature | Community | Member Licensed |
|---|---|---|
| Voice & Messaging Bridges | ||
| Discord bridgeSlash commands, voice notes, file attachments | ✓ | ✓ |
| WhatsApp bridgeMessages, media, voice memos | ✓ | ✓ |
| Telegram bridgeBot API, inline commands | ✓ | ✓ |
| Slack bridgeEvents API, threaded replies | ✓ | ✓ |
| Speech-to-TextOpenAI Whisper + local faster-whisper fallback | ✓ | ✓ |
| Text-to-SpeechPiper TTS + ElevenLabs, Listener profile tuning | ✓ | ✓ |
| Per-chat personasCustom personas per channel / chat | ✓ | ✓ |
| Engine Layer | ||
| Claude (Sonnet / Opus / Haiku)Full tool-use, hooks, skills, mid-stream inject | ✓ | ✓ |
| Codex CLIOpenAI Codex, MCP tool support | ✓ | ✓ |
| OpenCodeProvider-agnostic open-source CLI | ✓ | ✓ |
| Hermes (local Ollama)Zero network egress, CONFIDENTIAL-tier classification | ✓ | ✓ |
| GitHub Copilotcopilot -p, zero incremental cost for Copilot subscribers | ✓ | ✓ |
| Adaptive OS modelAuto-selects Haiku ≤60K ctx, Sonnet above | ✓ | ✓ |
| Engine delegationOS layer delegates to worker engines via MCP | ✓ | ✓ |
| Per-chat engine pinning/engine command to pin worker engine per session | ✓ | ✓ |
| Agentic Compute | ||
| Autonomous Compute Shell (ACS)5-gate quality chain: plan → decompose → execute → review → synthesize | ✓ | ✓ |
| Human-Approval Compute (HAC)Checkpoint gates requiring explicit approval | ✓ | ✓ |
| Compute strategiesGrid search, random search, Bayesian optimisation | ✓ | ✓ |
| Compute jobs per day | 1 | Unlimited |
| Compute result streamingToken-level streaming to console & bridge | ✓ | ✓ |
| Compute graph exportVisual execution graph downloadable as PNG/SVG | ✓ | ✓ |
| Pipelines & Workflows | ||
| Concurrent workflows | 1 | Unlimited |
| Multi-agent orchestrationFan-out, pipeline, parallel patterns | ✓ | ✓ |
| Loop-driven iterationUp to K=5 inner loops with auto-gradient diagnosis | ✓ | ✓ |
| Scheduled cloud agentsCron-triggered routines via /schedule | ✓ | ✓ |
| /btw mid-stream injectionPush notes into a running agent stream side-channel | ✓ | ✓ |
| Dialectic reasoning engineThesis/antithesis/synthesis for every recommendation | ✓ | ✓ |
| Database & Data Connections (DSI v1) | ||
| PostgreSQL adapterLive query, schema introspection | ✓ | ✓ |
| MySQL / MariaDB adapter | ✓ | ✓ |
| SQLite adapter | ✓ | ✓ |
| Custom data source adaptersBaseDataSourceAdapter ABC for any external source | ✓ | ✓ |
| Concurrent database connections | 1 | Unlimited |
| Large-data snapshotsSchema + stats + PII-redacted sample via MCP | ✓ | ✓ |
| Strict anonymisationk-Anonymity k=5, Laplace noise on rowcount, PII scan | ✓ | ✓ |
| Compute ↔ datasource injectionDSI connections exposed to ACS workers at spawn time | ✓ | ✓ |
| A2A Networks (Agent-to-Agent) | ||
| A2A peer connections (max) | 1 | Unlimited |
| Inbound remote triggersHMAC-SHA256 signed TaskEnvelope, nonce replay-proof | ✓ | ✓ |
| Outbound remote triggersSigned ResponseEnvelope, result-schema filtering | ✓ | ✓ |
| Binary attachments (Protocol v3)Up to 16 attachments, 1 MiB total, sha256-verified | ✓ | ✓ |
| Instance identity attestationUUID4 instance pin per endpoint, swap-proof | ✓ | ✓ |
| Network membership attestation ()RS256 trust anchor, cryptographic membership credentials | ✓ | ✓ |
| Prompt-injection framing blockStructural defence: NFKC + 16 KB cap + instruction wrapper | ✓ | ✓ |
| Deterministic Compute EngineCSV → chart pipeline, reproducible outputs via A2A | ✓ | ✓ |
| Organizations & Multi-Tenant | ||
| Tenants | 1 | Unlimited |
| Role-based access controlowner → admin → member → observer hierarchy | ✓ | ✓ |
| Per-tenant engine policiesallowed_engines / forbid_engines per tenant config | ✓ | ✓ |
| Per-tenant data residency zonesEU_PRODUCTION preset: Ollama-only or HTTP allowlist | ✓ | ✓ |
| Per-user quota managementDaily message budgets per role | ✓ | ✓ |
| SSO / OIDCAvailable on enterprise tier | — | — |
| Runtime Extensions | ||
| Forge (runtime tool generation)Schema-bound sandboxed MCP tools, hot-reloaded policy | ✓ | ✓ |
| Skill-Forge (runtime skill generation)Markdown skills injected into future sessions, promotion ladder | ✓ | ✓ |
| Session artifact memoryPDFs, images, CSVs — auto-registered, FTS5-searchable | ✓ | ✓ |
| Conversation recallFTS5 SQLite recall.db, PII-redacted, GDPR Art. 17 /forget | ✓ | ✓ |
| User modelingDistilled every 50 turns, injected as <user_context> | ✓ | ✓ |
| ImageGen MCPDALL-E 3, Flux, Imagen — reuses OpenAI key | ✓ | ✓ |
| Auto-routingHeuristic or LLM-based persona routing per message | ✓ | ✓ |
| Compliance & Security | ||
| EU AI Act 2026 — Bot disclosureOne-time AI-nature card per user, structurally locked | ✓ | ✓ |
| GDPR Art. 6/7 — Consent gatePer-user, deny-by-default, TTL-capped, no override | ✓ | ✓ |
| GDPR Art. 17 — Erasure orchestratorCross-layer right-to-deletion, pseudonymised audit chain | ✓ | ✓ |
| Hash-chained tamper-evident audit logHMAC-linked events, daily verify, fail-closed | ✓ | ✓ |
| Path-gate sandboxing (L10)Fail-closed FS-write protection on all sensitive paths | ✓ | ✓ |
| Secret vault (capability split)Secrets as env-var names only, never in LLM context | ✓ | ✓ |
| Data classification (data classification)PUBLIC / INTERNAL / CONFIDENTIAL / SECRET × engine matrix | ✓ | ✓ |
| Network egress lockdown (egress control)Declarative allowlist/denylist per tenant | ✓ | ✓ |
| Voice transcribe — metadata onlyTranscript text never stored in audit chain | ✓ | ✓ |
| Audit export & compliance reports | — | ✓ |
| Audit & Storage | ||
| WORM archiveCompliance-grade sealed audit segments | — | ✓ |
| Audit-at-rest encryptionage or GPG sealed segments, rotation by size & age | ✓ | ✓ |
| RFC 3161 TSA timestampingOptional external proof of audit event time | ✓ | ✓ |
| EU data residency enforcement | — | ✓ |
| SLA dashboardUptime, latency, error-rate metrics per tenant | — | ✓ |
| 7-year audit retentionDefault 7-year retention with rotation + sealing | — | ✓ |
Is €10 per user or per device?
Per device — one license per CorvinOS installation. Run it on three machines, pay €30/month total.
What does "unlimited compute" mean?
Compute jobs run via Hermes and local Ollama on your own hardware. Unlimited means no artificial cap in the license. Your actual limit is your machine.
Does my data leave my server?
Only a license fingerprint for token validation. All voice data, audit logs, agent conversations, database queries, and compute jobs stay on your machine.
What's the difference between ACS and HAC?
ACS (Autonomous Compute Shell) runs a full 5-gate quality chain without interruption. HAC (Human-Approval Compute) pauses at checkpoints and waits for your explicit go-ahead before continuing.
Can I connect my own PostgreSQL / MySQL database?
Yes. DSI v1 supports PostgreSQL, MySQL, and SQLite out of the box. The Community tier allows 1 concurrent connection; Member Licensed allows unlimited.
Is the Community tier really free forever?
Yes. CorvinOS is Apache-2.0 open source. No credit card, no trial expiry, no phone-home.