Plans
Pay for pages, seats and a vault.
A rung buys standing journey pages, seats and a vault. Maker to Plant also include qualified tokens each month; Stand includes none. Every stamp asks two free, independent authorities at no charge, on any rung or none, up to the daily limits (security page). A free record binds to a public beacon; an independent timestamp adds evidence that the committed bytes existed by its stated time. Neither proves when a photo was taken or whether a supplier claim is true.
Checking is free for anyone, forever, with no account. Growers, farmers and cooperatives never pay: a buyer who asks for a hand-off pays for the grower's stamp. You pick a rung, put it in the cart, and sign in from your account. Change or cancel a live plan there without writing to anyone. This is a digital subscription, charged in euro on Stripe, with no physical shipping. Contact: pilot@openstamps.com.
Seven rungs you start yourself, and an eighth that is not a rung.
Prices exclude VAT; Stripe adds it at checkout. Every paid rung can be bought by the month or by the year, and a year is twelve months at the price of ten — two months free. The recommended start is Maker at €390 a year (€39 a month). Promo codes are entered on Stripe's pages, not here. An annual plan is paid once and still refills its included count every month of the year — the count below is a monthly allowance on either cadence. Charges of €10,000 and above (a Mill or Plant year, and the 100,000 block) are Revolut Pay on Stripe; everything below that is a card or Revolut Pay. The last card is the exception: Enterprise has no monthly price because a deployment is scoped before it is priced, and it is remote work — not a site visit.
That yearly discount is standing — not a countdown that resets. A promotion code, if you have one, is typed on Stripe's checkout after you sign in. The euro, dollar and pound switch in the header is display only: Stripe still charges euro.
Trial
€0
on sign-up · no card
No annual price: it is a grant, not a subscription.
one published journey page standing at a time — the public page a buyer scans
up to 10 qualified stamps, once, drawn while spare qualified supply exists
no card, no renewal
- one seat
- a 25 MB vault to try: the stamped file itself, encrypted on your device, kept five years beside its stamp, in EU-jurisdiction storage
- every tool, the desk and the farmer's page
- free stamps and checking are never held back, before, during or after the qualified stamps
- a qualified stamp is drawn only while this deployment's qualified supply has room to spare beyond what is already committed (paying plans and bought blocks, the nightly anchor, and trial stamps already drawn); when no room can be counted, a stamp closes on the two free authorities alone and says so, and the undrawn qualified stamps are kept
Stand
€290
a year · two months free
or €29 a month
ten published journey pages standing at a time — Maker's pages, without the qualified allowance
no qualified stamps included: without a block, every stamp is a free stamp, bracketed between a public beacon and two independent timestamps
a block's qualified tokens are drawn by every stamp until it runs out
- one seat
- a 250 MB vault: the stamped files themselves, encrypted on your device, kept five years beside their stamps, in EU-jurisdiction storage
- qualified tokens from any block, bought once and never expiring; five request-link sends a month by SMS or WhatsApp, which go out only once a messaging provider is connected to this site (none is yet) — until then, and always, any link can be copied or shared by hand
Recommended
Maker
€390
a year · two months free
or €39 a month
ten published journey pages standing at a time — withdraw one and its place is free
1,440 qualified stamps a year · 120 refill each month
27.1 cents a qualified stamp
- one seat
- a 250 MB vault: the stamped files themselves, encrypted on your device, kept five years beside their stamps, in EU-jurisdiction storage
- after the 120 qualified stamps, free timestamping remains available; renew the allowance or buy a block for more qualified tokens
Studio
€1,990
a year · two months free
or €199 a month
fifty published journey pages standing at a time, for each person on the team
8,400 qualified stamps a year · 700 refill each month
23.7 cents a qualified stamp
- five seats — a team on one balance, invited by address
- a 2 GB vault for the files, encrypted on your device, five years, in the EU
- a filing deployment can be scoped per legal entity; the conformance record for the adapter is not on file yet
- your brand on the journey page and the badge (name, logo, colour) — Studio and above
Works
€5,990
a year · two months free
or €599 a month
250 published journey pages standing at a time, for each person on the team
28,800 qualified stamps a year · 2,400 refill each month
20.8 cents a qualified stamp
- fifteen seats on one balance
- a 10 GB vault for the files, encrypted on your device, five years, in the EU
- a filing deployment can be scoped per legal entity; the conformance record for the adapter is not on file yet
- card or Revolut Pay on Stripe
Mill
€12,500
a year · two months free
or €1,250 a month
1,000 published journey pages standing at a time, for each person on the team
72,000 qualified stamps a year · 6,000 refill each month
17.4 cents a qualified stamp
- forty seats on one balance
- a 50 GB vault for the files, encrypted on your device, five years, in the EU
- a filing deployment can be scoped per legal entity; the conformance record for the adapter is not on file yet
- the year is Revolut Pay on Stripe; the month is a card or Revolut Pay
Plant
€25,000
a year · two months free
or €2,500 a month
2,500 published journey pages standing at a time, for each person on the team
168,000 qualified stamps a year · 14,000 refill each month
14.9 cents a qualified stamp
- a hundred seats on one balance
- a 200 GB vault for the files, encrypted on your device, five years, in the EU
- a filing deployment can be scoped per legal entity; the conformance record for the adapter is not on file yet
- the year is Revolut Pay on Stripe; the month is a card or Revolut Pay
Enterprise
Scoped
priced per engagement · remote only
Deployments start at €48,000, and the meter runs beside them
1,500 published journey pages standing at a time, for each person; more is a change to this site, priced in the written scope
11.9c a qualified stamp at the top of the meter, and lower with scale
no subscription to buy
- laptop work: env, a written scope, a call if you ask — no factory visit, no named engineer on a plane
- the same product as Plant; you are not buying a second codebase
- no SLA, no on-site, no custom software
What a qualified stamp is.
Qualified · what the money buys
The same closed bracket as a free stamp, plus one token from a qualified trust service provider on the EU Trusted List — the token that carries the eIDAS Article 41 presumption of accuracy. It concerns the committed record, not the capture date or truth of its contents.
Free · closed, not qualified
Beacon binding and two independent timestamps, for anyone, with no account, up to the daily limits. A real closed bracket that any reader checks — but neither free authority is a qualified trust service provider, so no Article 41 presumption may be read into it, by us or by anyone quoting us.
The drand beacon binds the new envelope to a public round. Older files can be included in a new envelope, so this does not date the original content. The RFC 3161 relay then asks two independent free authorities for a timestamp over the commitment, and — on a paid stamp — a qualified third. Every stamp is closed; issuance and renewal of the qualified token are what consume the allowance shown on these plans. Checking an existing stamp remains free.
A stamp made without balance is not blocked and not crippled. It seals, it gets the beacon and both free timestamps, it carries the same content id, and any reader checks it. What it lacks is the qualified token, and any reader sees that it does. Your account shows how many of yours came out that way. Only if no authority answers at all does a stamp seal one-sided — open at the top — and a reader says so rather than guessing.
Renewing a stamp's timestamps draws one qualified stamp from the same balance — one draw per renewal, however many authorities answer. The sealed file and its content id never change: the renewal is a chain of newer tokens carried beside the record, and a reader that never sees it still reads the stamp exactly as it was sealed.
The honest reason to pay.
OpenStamps’ furniture profile defines two floors. The pilot floor (F0) calls for a two-sided bracket at four events — harvest (S12), work order (S29), unit ordinal (S32) and filing hand-off (S48). Free authority tokens can supply its upper edge. The standard production floor (F1) adds that one timestamp should come from a qualified trust service provider. Plans with a qualified allowance fund that additional token; on Stand, a block does. These are OpenStamps profile choices, not a statutory four-stamp requirement. A qualified timestamp concerns time and bound-data integrity; it does not establish that the underlying origin claim is true.
See the profile: § 3.1 Floors, whose table names the four codes and both floors, and § 3.2 The bracket, and the ordering rule.
Side by side.
| Trial | Stand | Maker | Studio | Works | Mill | Plant | Enterprise | |
|---|---|---|---|---|---|---|---|---|
| Published journey pages, standing | 1 | 10 | 10 | 50 | 250 | 1,000 | 2,500 | 1,500 |
| A month | €0 | €29 | €39 | €199 | €599 | €1,250 | €2,500 | not a subscription |
| A year | not sold by the year | €290 | €390 | €1,990 | €5,990 | €12,500 | €25,000 | scoped per engagement |
| Closed stamps a month | up to 10, once, from spare supply | 0 | 120 | 700 | 2,400 | 6,000 | 14,000 | metered, not allowanced |
| Closed stamps a year | not sold by the year | 0 | 1,440 | 8,400 | 28,800 | 72,000 | 168,000 | metered, not allowanced |
| Per qualified stamp, monthly | free | from a block | 32.5c | 28.4c | 25.0c | 20.8c | 17.9c | from 11.9c |
| Per qualified stamp, annual | free | from a block | 27.1c | 23.7c | 20.8c | 17.4c | 14.9c | no annual cadence to discount |
| What a year buys | twelve months of the included count for ten months' money — an annual plan is paid once and the count still refills every month; on Stand, twelve months of the pages, seat and vault | |||||||
| Seats | 1 | 1 | 1 | 5 | 15 | 40 | 100 | not counted, and not priced |
| Journey card on your page | with every standing page: one script tag on your own product page; the card checks the records in the viewer's browser and links through | |||||||
| Hangtag and badge | with every standing page: a 50 × 90 mm print tag with a 30 mm code, nine to an A4 sheet, and a badge that says checked in your browser, no account | |||||||
| Brand kit | no | no | no | included | included | included | included | included |
| Filing deployment | no | no | no | can be scoped per legal entity; the conformance record for the adapter is not on file yet | ||||
| How it is billed | nothing to bill | card or Revolut Pay | card or Revolut Pay | card or Revolut Pay | card or Revolut Pay | Revolut Pay on the year; card or Revolut Pay on the month | Revolut Pay on the year; card or Revolut Pay on the month | against a written scope, by transfer |
| Per qualified stamp after that | nothing — free timestamping continues; more qualified tokens need a refill or a block | |||||||
| One-sided stamps | unlimited and free on every rung, and without a plan | |||||||
| Checking a stamp | free for anyone, offline, no account, forever | |||||||
| Growers and cooperatives | never pay; the buyer's balance funds qualified tokens | |||||||
| Blocks | bought once on any rung, and on none at all; they never expire | |||||||
| API key | any account makes one, in the account, and it draws on that account's own balance | |||||||
| Receipts and signed webhook | on every rung: a receipt against a policy you declared first; sealing a receipt draws one qualified stamp; delivery by a signed webhook | |||||||
| Cooperative pack | on every rung: one funded request link per member, from this account's balance; the pack's page carries counts and never a name | |||||||
| Nightly anchor and proof | every night, every journal — the trial's too, drawn from no account; the root is public at /api/anchors and any entry's inclusion path is at /api/journal/{id}/proof |
|||||||
| Managed renewal (not API stamps) | by hand, from the desk | managed while a block holds stamps, one stamp each | managed, one stamp each | managed, one stamp each | managed, one stamp each | managed, one stamp each | managed, one stamp each | managed, one stamp each |
| The reader | free for whoever you hand a folder to: no account, offline after the first load, nothing leaves their device | |||||||
| Vault | 25 MB | 250 MB | 250 MB | 2 GB | 10 GB | 50 GB | 200 GB | 100 GB |
| Vault terms | 100 GB (€190) or 1 TB (€1,790) for a year, bought once on any rung; every file stored during the term is held five years | |||||||
| Request links a month | 5, once | 5 | 30 | 150 | 600 | 1,500 | 3,500 | 2,250 |
| Request-link blocks | 200 (€20) or 1,000 (€95), bought once on any rung and drawn after the month's count; Telegram, LINE, Viber, WeChat, Zalo and a copied link are never counted | |||||||
| Change or cancel | in your account, at any time, with no notice and no e-mail to us — on the six self-serve rungs. A deployment runs to the end of the term in its written scope | |||||||
| Enterprise, in one line | a scoped deployment, not a rung. The form on the enterprise page prices it on screen from your own scope; sending the scope is a choice at the end of that quiz | |||||||
For machines
A production line does not open a page. POST /api/stamp with an account's key in the x-osfp-key header takes a SHA-256 and returns the authorities' tokens unopened: one metered unit per stamp, drawn from that account's balance and put back when no qualified token comes back — the same balance the rungs above sell. Keys are made and revoked in the account; the ceilings are on the security page.
An agent uses the same door through the MCP server at /openstamps-mcp.mjs — one file, Node 20 or later, no dependencies — with five tools: stamp, verify, balance, anchors, list_company_profiles. Only the digest leaves the machine. verify reaches no network and is never metered; without a key an agent still seals, one-sided, and the answer says so. A stamp made through this door returns its tokens but leaves no envelope on our side, so the nightly renewal job does not renew it, and no renewal route for API stamps exists yet: keep the file and its tokens together.
Blocks that never expire.
Closed stamps bought once. They are not a subscription: they do not renew, they are not consumed by waiting, and they sit behind whatever rung you are on — or behind no rung at all. A month that runs hot draws on the block once the included count is spent. They are priced as overflow: dearer per stamp than a year on Works, and a rung topped up with blocks to the next rung's count always costs more than that rung, so Maker plus packs is not a cheaper next rung.
100,000 qualified stamps
€22,900
22.9 cents a stamp
The one a purchase order can be raised against. Paid with Revolut Pay on Stripe — €22,900 is above the €10,000 line.
The 100,000 block is deliberately not a subscription. A compliance department can raise one purchase order against a number that never renews, cannot dun anybody and cannot be cut off, which is also what the product already is: you bought closing edges, you hold the results, and nothing we do later can reach back into a stamp that is already made.
A block is overflow stock you hold. A rung is an allowance that refills every month whether you draw on it or not, and the rung is what carries the seats and the option to scope a filing deployment. If you need Studio's count every month, buy Studio — Maker plus blocks is priced not to be a shortcut. Blocks are added to the cart, and every invoice is in the billing portal. The account is where you sign in.
More seats, more vault — on the rung you have.
Seats are an add-on at the rung's own cadence, added and removed from the account page once a plan is running; Stripe prorates the change on the next invoice. Vault capacity is sold differently: as a term, bought once for a year, because a month's payment cannot fund five years of storage — every file you store during a paid term is held for five years from the day it is stored, whether or not you renew.
5 more seats
€59 /mo
€590 a year · €11.80 a seat a month
Five more people on one balance, each with the rung's allowances. Up to twenty units. Studio and above.
100 GB of vault for a year
€190
a prepaid term · bought once
Files beside their stamps, encrypted on your device, in EU-jurisdiction storage. Every file stored during the term is held five years from the day it is stored, whether or not you renew. Bought from the account page on any rung.
1 TB of vault for a year
€1,790
a prepaid term · bought once
The same promise, by the terabyte: every file stored during the term is held five years from the day it is stored.
Request links to a phone
A buyer's request link delivered to the phone at the plot by SMS or WhatsApp costs a provider fee, so each rung includes a monthly count: Stand 5 · Maker 30 · Studio 150 · Works 600 · Mill 1,500 · Plant 3,500 · Enterprise 2,250 · the trial 5, once. Telegram, LINE, Viber, WeChat, Zalo and a copied link are not counted. Beyond the count, a block — bought once, never expiring:
A send needs a messaging provider that delivers SMS or WhatsApp on this deployment. While none is configured, the checkout refuses these blocks, the included count cannot be spent, and a request link is copied or shared by hand, which costs nothing; the blocks go on sale by themselves the day one is.
200 request links
€20
10 cents a link
WhatsApp, or SMS to the country codes this deployment allows. Drawn after the month's count.
1,000 request links
€95
9.5 cents a link
The same, by the thousand.
A vault term is a yearly promise about the files stored under it; it is not sold by the month, because a month's payment cannot fund five years of storage. Seats, vault and standing published pages are the allowances a bigger rung buys more of — and pages are the one with no add-on, so the only way to more of them is a rung that includes more; the add-ons let a desk that is right for its stamp count grow in people or in files without moving rung. Prices exclude VAT. The add-on's cadence is the rung's: on a yearly rung it is billed yearly at ten months' price.
Questions.
What is a stamp?
One sealed record — a plot, a harvest, a mill intake, a finished unit. It fixes the exact bytes you declared, names the records before it, and binds the record to a beacon and, when available, a signed timestamp. It is not a certificate and it does not say the declaration is true.
Why are the plans named Maker, Studio, Works, Mill and Plant?
The names are volume rungs — a bench, a room, a floor, a site, a factory — not furniture job titles. A coffee mill, a steel mill and a sawmill buy the same Mill plan. Furniture is the first live profile; the meter is the same product on every industry guide.
What does a qualified stamp cost on each rung?
The relay posts the same imprint to up to two free authorities, and the upper edge is the earliest token that comes back (a stamp no authority answers is one-sided); those two are not metered, so every stamp asks both for its closing edge whether or not it is paid for, up to the daily limits. What a paid stamp adds, and what the meter counts, is one token from a qualified trust service provider on the EU Trusted List — the token carrying the Article 41 presumption.
Bought monthly, the rungs run from 32.5 down to 17.9 cents an included qualified stamp, each rung cheaper per stamp than the one below it; by the year, from 27.1 down to 14.9. Overflow blocks run from 33.0 down to 22.9 cents, above a year on Works, and a rung plus blocks never undercuts the next rung, so blocks do not become a cheaper next rung.
What happens when my included stamps run out?
You keep stamping using the free authorities, subject to availability and abuse limits. More qualified tokens need the next refill or a block. A stamp is one-sided if no timestamp authority answers. There is no automatic overage charge.
Monthly or annual?
Both, on every paid rung, and you choose in the cart. A year is twelve months at the price of ten: €290, €390, €1,990, €5,990, €12,500 and €25,000. Maker at €390 a year is the recommended start. A year also turns twelve charges into one. Mill and Plant years, and the 100,000 block, are Revolut Pay on Stripe; Works year at €5,990 is a card or Revolut Pay. An account that already has a subscription changes cadence on the billing pages, not with a second checkout.
The included count is a monthly allowance on either cadence: an annual plan is paid once and refills its included count every month of the year, twelve times, exactly as the monthly one does. That is why the annual rate is the year's price spread over twelve refills — 27.1c on Maker rather than 32.5c — and it is the one thing about this page's arithmetic worth saying out loud.
Do blocks expire?
No. A block is bought once and stays on the account until it is drawn down. It survives a plan change, a cancellation and a quiet quarter. The included count on a rung is the part that resets each month; a block is not.
Should I stay on Maker and buy blocks?
Not if you need the next rung's count every month. Maker includes 1,440 qualified stamps a year, Studio 8,400, Works 28,800, Mill 72,000, Plant 168,000. Blocks are priced so topping up a cheaper rung to the next one's year costs more than buying that rung. Buy a block when a month runs hot, or when a purchase order cannot be a subscription.
What does renewing a stamp cost?
One qualified stamp — the same draw as making one, from the same included count or block, and once per renewal however many authorities answer. The holder of the record renews it, from the desk, where every sealed record shows the date it stops being independently checkable and offers to renew it before then. A renewal preserves checkability, never truth: it adds newer timestamps beside the record, and the sealed bytes, the content id and what the record says are exactly what they were.
Can I change plan?
Yes, in your account, whenever you like. Up or down, monthly or annual. The first plan goes through the cart; a change to a live subscription goes through the billing portal and takes effect on the rung you pick; nobody has to approve it.
What if I cancel?
The account keeps working. After the paid period, free timestamping remains available without a qualified token; any unused block balance follows its published terms. Checking files you already hold stays free and needs no account.
Do farmers pay?
No. When a grower's phone uses a buyer's request, the buyer funds the qualified token. Without a funded request, free timestamping remains available when the authorities answer. The grower can still share files and queue work offline, with no paid account.
Is checking free?
Always. It runs in the reader, offline, against the open format. It reaches no server of ours, so there is nothing for us to meter and nothing for us to see. We will not put a price on it.
What is Enterprise, now that the card carries no price?
A scoped remote deployment rather than a rung — and not a bigger monthly allowance. The work that exists today is laptop work: a written scope from the quiz, environment keys if you already hold Information System credentials, and a call if you ask. There is no factory visit, no named engineer on a plane, and no second product. If Plant at €25,000 a year covers the count, buy Plant. The quiz prices a deployment from €48,000 with the meter running beside it, and it buys no different evidence: the format, the reader and the four floors are identical on every rung and on none.
The enterprise page is a stepped quiz that prices the scope on screen. At the last step you can send that scope to us (it becomes a Lead in the CRM we operate), download it, or open it in your own mail program. Nothing is sent until you choose one of those.
How do I pay, and what about VAT?
You put a rung or a block in the cart, sign in, and pay on Stripe's own pages. Below €10,000 that is a card or Revolut Pay — including Works year at €5,990. From €10,000 it is Revolut Pay only: a Mill year, a Plant year, and the 100,000 block. Stripe is the processor; this site is not a Revolut merchant. Prices exclude VAT; Stripe adds it on the payment page from your country and your VAT number, and every invoice and receipt is in the billing portal. An EU business with a VAT number is reverse-charged. In the United Kingdom OpenStamps is sold to businesses only: a GB VAT number is required on the payment page, and a UK address without one is refused after payment and the money returned. Where a deployment has no payment keys configured, checkout says so and nothing can be bought there.
A scoped deployment is the one thing no checkout here sells. It is invoiced against a written scope, by transfer, outside this software — and no code in this repository has ever raised that invoice, which is worth knowing before you plan a quarter around it.
Refunds?
You cancel in the account and the subscription runs to the end of the period you paid for. Block stamps do not expire, so they are not consumed by waiting. Full text: cancellation and refunds.
What is an API key?
A secret string your own systems send with a stamp request, so a production line draws on your balance without a browser session. You make one in your account and it is shown once; we keep only its hash. Revoke it there and it stops working.
Is a plan required to try this?
No. The desk, the tools, the chain reader and the farmer's page all run without an account. Making one starts the trial: up to 10 qualified stamps, drawn only while spare qualified supply exists beyond what is already committed. Free stamps and checking are never held back, and no card is asked for.