Penpot Self-Hosted vs Cloud Support and Licensing Terms — what do I need to change?
Choose Penpot deployment mode based on current open-source licensing, enterprise support boundaries, and collaboration tradeoffs that have shifted since older comparisons.
Blockers
- requires_version: capability/penpot-self-hosted-professional → runtime/linux-server
- requires_version: capability/penpot-self-hosted-professional → framework/docker
- requires_version: capability/penpot-self-hosted-professional → capability/self-managed-deployment
- Lock-in via capability/shared-saas-environment
- Lock-in via capability/shared-saas-environment
- requires_version: capability/penpot-self-hosted-enterprise → capability/penpot-self-hosted-professional
Who this is for
- cost-sensitive
- enterprise
- compliance
- small-team
Candidates
Penpot Cloud Professional or Unlimited
As of 2026-03-19, Penpot Cloud keeps collaboration in Penpot's shared SaaS environment. The default Professional plan is "$0 / user / month" and includes up to 8 team members, unlimited viewers, 10GB storage, 7 days of autosaved versions, and 7 days of deleted file recovery. If you outgrow that shared-cloud baseline, Cloud Unlimited is "$7 / user / month" with a capped monthly bill of "$175", 25GB storage, and 30 days for autosaved versions and deleted file recovery. Penpot's source repository remains under the "MPL-2.0" license, but the SaaS convenience and support boundaries are governed by the hosted plans rather than self-managed open-source operations.
When to choose
Use this when "low-ops" and fast team onboarding matter more than infrastructure control. It is the default choice for small teams or product teams that want hosted collaboration without taking on Linux, Docker, backups, and upgrade operations.
Tradeoffs
Fastest setup and least operational burden, but free cloud has clear member and storage limits and paid cloud adds ongoing per-user or flat-plan costs. You also accept hosted-plan storage/version ceilings unless you move up to higher tiers.
Cautions
If you need stronger isolation or managed dedicated infrastructure, Penpot lists a separate "Private Server" plan at "$50k / year" rather than treating that as part of standard shared cloud plans. Older comparisons that framed Penpot as simply "free cloud vs free self-host" are outdated because hosted pricing now has formal Professional, Unlimited, and Enterprise packaging.
Penpot on Elestio
As of 2026-03-19, Penpot's official self-host guide includes Elestio as an official deployment option and describes it as a fully managed service for dedicated Penpot instances. Penpot says this path can deploy a dedicated instance in about 3 minutes and offloads DNS configuration, SMTP, backups, SSL certificates, OS upgrades, and Penpot upgrades. This is the managed dedicated option if shared SaaS is too limited but fully DIY self-hosting would create too much operational work.
When to choose
Use this when you need a dedicated Penpot environment with less internal ops burden than running Docker or Kubernetes yourself. It fits teams that still want infrastructure separation or provider choice but prefer a managed deployment workflow.
Tradeoffs
You get a dedicated instance and managed operations, but this is still a self-host-style deployment through a partner platform rather than Penpot's default shared cloud. Costs, regions, sizing, and support terms depend on the managed provider you choose.
Cautions
Do not treat this like Penpot's own shared SaaS plans: you still need to choose a provider, region, service plan, and support level. If you need Penpot's enterprise support boundaries, SSO, or compliance add-ons, evaluate those separately from the managed hosting layer.
Penpot Self-Hosted Professional
As of 2026-03-19, Penpot Self-host Professional is "Free, forever" and is positioned for teams with their own technical infrastructure. The official self-host pricing page says it includes complete control over data and infrastructure, unlimited users, teams and files, all design and prototyping features, community support, and "100% open-source" operation. Penpot's public repository is licensed under "MPL-2.0", which is the key licensing fact if you need an open-source deployment baseline. The official self-host guide also says self-hosted Docker images can arrive a few days after new releases, so version parity with cloud is not always same-day.
When to choose
Use this when "cost-sensitive" plus "compliance" or data-control requirements outweigh the value of hosted convenience. It is the right fit when your team can operate Linux and Docker and wants unlimited users/files without Penpot SaaS seat economics.
Tradeoffs
You avoid Penpot hosting charges and keep control of data, scale, and continuity, but you own deployment, upgrades, monitoring, backups, and user-support overhead. Collaboration features stay available, but reliability and admin experience depend on your own operations maturity.
Cautions
Official requirements explicitly include a Linux server, Docker knowledge, and self-managed deployment. Do not assume immediate release parity with cloud, because Penpot states self-hosted Docker images are intentionally published slightly later than release announcements.
Penpot Self-Hosted Enterprise
As of 2026-03-19, Penpot Self-host Enterprise is "$950 / organization per month" and includes everything in Self-host Professional plus dedicated deployment support, enterprise SSO and access controls, certified plugins, guaranteed response times, and priority feature requests. Penpot also lists paid add-ons for audit logs and activity monitoring, security compliance support for "SOC2, HIPAA", air-gapped deployment support, custom plugins or integrations, and roadmap fast-tracking. The pricing page separately notes "Two factor authentication" as "coming soon", so that capability should not be treated as generally available yet. This tier keeps the self-hosted control model while drawing a clearer boundary around what paid enterprise support actually adds.
When to choose
Use this when you need self-hosting for security, compliance, or air-gapped reasons but cannot rely on community support alone. The decisive factor is whether enterprise support, SSO, and compliance-oriented add-ons justify a fixed vendor relationship on top of the open-source core.
Tradeoffs
You keep data and infrastructure control while getting formal vendor backing, but you still operate the environment yourself and may need additional paid add-ons for audit/compliance needs. It is materially more expensive than free self-hosting, though still flat-priced per organization rather than per editor.
Cautions
Do not over-assume the enterprise bundle: audit logs, compliance support, and air-gapped deployment are explicitly listed as add-ons, and "Two factor authentication" is still marked "coming soon" as of 2026-03-19. If you want Penpot-managed dedicated hosting instead of running your own servers, that is a different offering from self-host Enterprise.
Try with your AI agent
$ npm install -g pocketlantern $ pocketlantern init # Restart Claude Code, Cursor, or your MCP client, then ask: # "Penpot Self-Hosted vs Cloud Support and Licensing Terms — what do I need to change?"