Pricing
Free where it should be. Paid where it matters.
Single-tenant, single-region deployments are free for any organization under $10M USD annual revenue. Multi-tenant, multi-region, and every deployment at organizations above that revenue threshold use the Commercial subscription. Same code path either way — a five-person Community startup and a hundred-thousand-employee Commercial multinational run the same platform.
Community
Single-tenant, single-region. Free for any organization, any size — read the source, run it, modify it for your use. Pick up your free license key from the website during install.
- Single-tenant deployment
- Single-region deployment
- Full ingestion + retrieval surface (connectors, ACL projection, query coordinator, MCP)
- Audit warehouse + Iceberg analytics path
- Privacy substrate optional (passthrough binding default)
- Apache 2.0 components included (Vespa OpenFGA plugin)
- Community support via GitHub issues + discussions
- Multi-tenant — provisioning a second tenant requires a Commercial license
- Multi-region — vault-mediated federation across regions requires a Commercial license
Commercial
Required for scale-outRequired for multi-tenant or multi-region deployments, and for organizations above $10M USD annual revenue. Identical platform — features unlock per your license.
- Everything in Community
- Multi-tenant — provision unlimited tenants under one cluster
- Multi-region — vault-mediated federation across geographies
- Direct engineering support, named technical account manager
- Air-gap mirror pipeline + signed releases
- Compliance support (SOC 2, ISO 27001, regional certifications as you need them)
- Security-vulnerability disclosure pipeline + private patch channel
When you need a Commercial license
The license unlocks specific capabilities at runtime. There are three triggers — any one of them moves you from Community to Commercial:
You need multi-tenant
Running more than one tenant in a single cluster — typical for service providers, MSPs, or larger orgs that segregate by business unit, brand, or jurisdiction.
You need multi-region
Subject-level data residency across two or more geographies, with vault-mediated federation. Required when you have data subjects in jurisdictions whose privacy laws don't allow pooling — GDPR, APAC localization, US sectoral laws, etc.
Your organization is above $10M USD annual revenue
Above $10M USD in annual revenue, every deployment — even single-tenant single-region — takes out a Commercial subscription. The Community grant is intentionally generous so smaller teams ship without negotiating; the Commercial subscription is how larger organizations contribute back to the platform that runs their search.
No artificial gates
Connector breadth, ACL fidelity, audit, observability, and every other base capability are identical across both tiers. The Commercial license unlocks scale-out features when you need them — it doesn't lock away features that single-tenant users would benefit from.
About the license
Moʻolelo is published under the Business Source License v1.1 with an Additional Use Grant. In plain terms:
- Read the source, run it, modify it for in-house use. The Community grant covers single-tenant single-region production use at any organization under $10M USD annual revenue, with a free license key — no employee cap and no corpus cap (Moʻolelo is designed to scale to petabyte-class corpora and hundreds of thousands of employees on the same code path).
- Every deployment — Community or Commercial — boots with a valid license key. The key carries the entitlements; no key means no boot.
- You can't redistribute it as a competing managed service during the BSL period.
- Each release reverts to Apache 2.0 four years after publication, so today's Moʻolelo becomes fully open source on a known schedule.
- The Vespa OpenFGA plugin is Apache 2.0 from day one, in a clearly isolated subdirectory.
Every deployment requires a valid license key — Community and Commercial. Community keys are free, issued instantly from this website with a one-year term that you renew from your account dashboard.
The renewal model is the air-gap-correct revocation lever: the platform never phones home in steady state. When a license needs to be turned off, we decline to issue its renewal; the deployed envelope expires on its own; the platform's signature-verifying validator rejects post-expiry envelopes locally. Air-gap operators receive renewals through the same secure channel they use for every other artifact (image mirrors, ML weights, etc.).