Kirimana is free, forever.

Every shipped feature of Kirimana is Apache-2.0 open source. Install it, fork it, run it in production. This is a documented, irrevocable commitment — not open-core with BSL carve-outs, not a “community version” with the good parts removed.

What that means concretely

No feature paywalls. The AI Gateway, the compliance generators (DORA, EU AI Act, GDPR), Data Vault patterns, federation, incident dispatch, MCP server — all in the Apache-2.0 core.
No upgrade tiers. There is no “Pro” or “Enterprise” build of Kirimana to graduate to. The platform you self-host is the same platform every other operator runs.
No telemetry-gated features. Run it air-gapped. The product doesn’t phone home to enable anything.
No relicensing risk. Apache-2.0 is the license, on every commit, forever. We borrow the Confluent / GitLab / HashiCorp playbook and explicitly reject the Elastic / MongoDB “open core but the good bits are paid” trap.

Why this model

We don’t believe the thing that decides who can read what, what AI agents are allowed to touch, and who signs off on a redaction should sit behind a vendor paywall. Governance tooling has to be auditable by everyone, not just the vendor.

That’s also the founder’s promise to the community. If you ever see “advanced governance product path” or “enterprise tier features locked behind a paywall” on this page, call us out. It would be a violation of why this project exists.

Specialist commercial offerings

Some teams need curated, certified, calendar-maintained accelerators on top of the OSS core — for specific migration scenarios, regulated verticals, or managed deployments. Those live as separate offerings on a separate site. More information coming soon.

For now, the kirimana.io product surface is OSS only. If you have a specific need (migration off a legacy tool, regulated-industry templates, hands-on deployment help), email hello@kirimana.io and we’ll route you appropriately.

OSS

GitHub — issues, discussions, pull requests welcome.