# fremforge

> EU-sovereign Git hosting with CI/CD included. €30 per seat, per month
> (15% annual discount available, effective €25.50/seat/month on a 12-month commitment).
> Hosted in Germany (Biere/Magdeburg, eu-de) on Deutsche Telekom's T Cloud Public. Everything exportable.

## Status

Generally available. Self-serve signup is open at https://frem.sh/_app/signup
(30-day free trial: 1 seat, 10 repositories, 500 runner-minutes pooled across the
trial; €0 card authorisation at signup, cancel any time before day 30). The
marketing site is `www.frem.sh`; the product runs at `frem.sh`.

## What it is

- Upstream Forgejo (GPL v3+), run with a small MFA/OIDC patch set (API and data
  model unmodified), shared multi-tenant instance with org-per-tenant isolation.
  Migration off is a standard Forgejo export.
- Hosted CI runners included - single-use VM per job on T Cloud Public ECS
  (not a shared pool), 1,000 minutes/seat/month pooled at org level, up to 30
  concurrent jobs per org (fair use). Overage metered at €0.010/min. Runners
  resolve npm, PyPI, Go, Docker, and Actions from in-region caches - zero direct
  upstream from customer CI.
- Supply chain security included, not an add-on SKU: pre-receive secret scanning,
  push protection, dependency + license + image + malware scanning, SAST
  (OpenGrep), signed commits, SLSA provenance, SBOM per build. Optional keyless
  commit signing via self-hosted Sigstore (Fulcio + TSA, eu-de; no Rekor fan-out).
- Enterprise access controls: SSO (OIDC/SAML) with real step-up MFA (acr_values
  passthrough + amr-claim verification), SCIM 2.0 provisioning, SSH CA,
  WebAuthn-only 2FA, IP allowlist, email-domain allowlist, per-org max PAT lifetime.
- Public REST API (OpenAPI 3.1) - every admin action is a documented endpoint;
  PAT + OAuth 2.0 client credentials. AI-agnostic + BYOK (Anthropic, OpenAI,
  Mistral, Vertex Gemini, or any OpenAI-compatible URL). No forge-level AI lock-in.
- Storage: 5 GB repo + 5 GB LFS + 5 GB packages pooled at org level (15 GB/seat
  total). Storage overage €0.20/GB/month. Package-registry egress soft cap
  100 GB/seat/month, hard cap at 3× (throttles, no overage charge).
- Single flat plan at €30 per seat per month. No sovereignty-behind-paywall upsell.
- Parent company: **fremverk** (Danish cloud consultancy). See https://www.fremverk.com.

## Where it runs

- Forgejo UI · Git · API · registry: T Cloud Public CCE, Biere/Magdeburg (eu-de)
- Hosted CI runners: T Cloud Public ECS (single-use VM per job), eu-de
- Sovereign package caches (npm, PyPI, Go, OCI, Actions): T Cloud Public CCE + SWR, eu-de
- Control plane (billing, metering, SSO middleware, audit chain): T Cloud Public CCE, eu-de
- Audit-chain WORM anchor + cross-region DR replica: T Cloud Public OBS (primary eu-de, replica eu-nl)
- Marketing site · docs · status: Bunny CDN, EU PoPs only
- Email (transactional outbound): Lettermint B.V. (Netherlands)
- Email (inbound shared mailboxes): mailbox.org (Germany)
- Payments: Mollie (Netherlands)
- Accounting integration: Visma Dinero (Denmark, fremverk side only - no Customer Personal Data path)

## Domains

- `frem.sh` - the product (Forgejo + app at `/_app`)
- `www.frem.sh` - marketing surface (this site)
- `docs.frem.sh` - documentation
- `status.frem.sh` - public status page
- `fremforge.com` · `fremforge.eu` · `fremforge.dk` - brand-redirect to `www.frem.sh`

## Contact

- Sign up / trial: https://frem.sh/_app/signup
- General: hello@frem.sh
- Security: security@frem.sh (see https://www.frem.sh/.well-known/security.txt)

## Formats

- Any page is available as raw Markdown by appending `/index.md` to the path
  (e.g. `https://www.frem.sh/pricing/index.md`, `https://www.frem.sh/legal/dpa/index.md`).
- Whole-site Markdown dump for LLM context: https://www.frem.sh/llms-full.txt

## License

Content © fremverk. Forgejo itself is GPL v3+; we ship it unmodified.