Cookies & Privacy
We respect your privacy. CarphaCom uses cookies and similar technologies to operate the site, secure your account, remember your preferences and analyse traffic. You can change your choice at any time from the link in the footer.
Strictly necessary
Required for the site to work — login, cart, checkout, security. These cannot be disabled.
Analytics
Help us understand which pages and features are useful, in aggregate. No identifying data is shared.
Marketing
Allow us to show you relevant offers on our site and via partners. Disabled by default.
Run CarphaCom in production without losing a night of sleep.
SLA-backed maintenance, 24/7 monitoring, and managed engineering hours for self-hosted CarphaCom deployments — billed monthly, 6-monthly, or annually.
Essential Care
Hands-off maintenance for a single self-hosted store.
- Weekly platform + plugin updates (tested in staging)
- Daily off-site encrypted backups, 30-day retention
- 24/7 uptime + SSL + cron monitoring
- Security patching within 24h of release
- P1 response within 24h, business hours (08–18 CET)
- 2 hours / month included for small fixes & tweaks
- Quarterly health report
Professional
SLA-backed support for revenue-critical single-site shops.
- Everything in Essential, plus:
- 4-hour P1 response SLA, 24/7
- 24/7 on-call engineer (PagerDuty rotation)
- Dedicated staging environment + automated visual diff
- Monthly performance & Core Web Vitals review
- 6 hours / month development & assistance
- Free plugin/theme installation from marketplace
- Stripe / PayU integration assistance
Business
For multi-site retailers and agencies running up to 5 stores.
- Everything in Professional, across up to 5 sites
- 4-hour P1 / 8-hour P2 SLA, 24/7/365
- 99.9% platform uptime SLA with credits
- 12 hours / month shared development pool
- Dedicated Customer Success Manager
- Quarterly business review + roadmap session
- One free site migration per year
- Custom alerting routes (Slack, PagerDuty, Teams)
- Annual penetration test summary
Enterprise
Custom contract for high-volume, regulated, or multi-region operations.
- Unlimited sites, multi-region, multi-tenant
- 1-hour P1 response SLA, 24/7/365
- 99.95% uptime SLA with financial credits
- Dedicated engineering team + named technical lead
- Custom development hour pool (40h+ / month)
- Private instances + DR + geo-failover
- On-prem / sovereign cloud deployment supported
- PCI-DSS / GDPR / ISO 27001 alignment assistance
- Custom commercial & legal terms (DPA, MSA)
Prices shown in EUR, exclude VAT. Hosting is billed by your infrastructure provider (Vultr, Hetzner, AWS, etc.) and is not part of these plans.
Feature comparison
All plans include tested updates, backups, monitoring, security patching, and incident response.
| Essential | Professional | Business | Enterprise | |
|---|---|---|---|---|
| Sites included | 1 | 1 | Up to 5 | Unlimited |
| Support coverage | 08–18 CET | 24/7 | 24/7/365 | 24/7/365 |
| P1 response SLA | 24 h | 4 h | 4 h | 1 h |
| Uptime SLA with credits | — | 99.5 % | 99.9 % | 99.95 % |
| Dev / assistance hours / mo | 2 h | 6 h | 12 h (pool) | 40 h+ (pool) |
| Tested updates & backups | ✓ | ✓ | ✓ | ✓ |
| Staging environment | — | ✓ | ✓ | ✓ (multi) |
| Dedicated CSM | — | shared | ✓ | ✓ + tech lead |
| Quarterly business review | — | — | ✓ | ✓ monthly |
| Migrations included | — | — | 1 / year | unlimited |
| Penetration test summary | — | — | annual | semi-annual |
| Security audit | — | — | — | included |
| Custom legal terms (MSA, DPA) | — | — | — | ✓ |
Response-time SLAs
We commit to first response time, not just acknowledgement. P1 means a real engineer is actively investigating within the window. BD = business day, NBD = next business day.
| Severity | Essential | Professional | Business | Enterprise |
|---|---|---|---|---|
| P1 — Service down / checkout broken | 24h | 4h | 4h | 1h |
| P2 — Major feature degraded | NBD | 8h | 8h | 4h |
| P3 — Minor bug / non-blocking issue | 3 BD | 1 BD | 1 BD | 4h |
| P4 — Question / change request | 5 BD | 2 BD | 2 BD | 1 BD |
Add-ons
Stackable on any plan. One-off or recurring.
Extra Dev Pack
10-hour pack of senior engineering time, used within 6 months.
One-off Migration
Migrate from Shopify, WooCommerce, Magento, or another Medusa instance.
Security Audit
Independent OWASP review, dependency scan, infra hardening report.
Training Day (remote)
Half-day or full-day workshop for your operations & dev team.
Custom Theme
Branded storefront theme built on the CarphaCom design system.
Embedded Engineer
Part-time engineer dedicated to your roadmap (min 3 months).
How onboarding works
- 01
Discovery call
30-min review of your stack, traffic, and concerns. Fully scoped quote within 48h.
- 02
Audit & onboarding
50-point health check, baseline metrics, runbook, on-call routing setup. ~5 business days.
- 03
Stabilize & monitor
Backup + monitoring + alerting wired to PagerDuty/Slack. Critical fixes prioritised in first sprint.
- 04
Operate & evolve
Monthly hours used for fixes, tweaks, perf, integrations. Quarterly reviews keep us aligned.
What you get with every plan
Uptime, SSL, certs, cron jobs, queues, disk, error rates. We see incidents before your customers do.
Every platform, plugin, and theme update is regression-tested in staging before touching production.
Daily encrypted off-site backups with monthly restore drills. RPO < 24h, RTO < 4h on Business+.
CVEs in CarphaCom or its dependencies are triaged, tested, and patched within 24h.
Major version upgrades, infra migrations, theme refreshes — handled by the same engineers who know your setup.
No first-line scripts. Every ticket lands on an engineer who has shipped to a CarphaCom production system.
Frequently asked questions
Is the CarphaCom platform free?
Yes. The CarphaCom platform is free, open-source, and one-click deployable from the Vultr Marketplace. These maintenance plans are an optional, dedicated service for businesses that need guaranteed support, SLA-backed response times, and managed operations.
What's the difference between this and the marketplace?
The marketplace at carphacom.com sells plugins, themes, and integrations as one-off or subscription products that you install yourself. Maintenance plans on this page cover human ongoing care — operations, support, monitoring, and engineering hours.
How is a 'site' defined?
One CarphaCom installation per Vultr instance (or equivalent VM). Multi-tenant marketplace tenants count as one site as long as they share infrastructure. Multi-region deployments count separately.
What counts toward 'development hours'?
Bug fixes, plugin installation & configuration, content updates, theme tweaks, integration assistance, performance tuning. Net-new features over 1 day of work are quoted separately or drawn from an Extra Dev Pack.
How do unused hours work?
Up to 50% of monthly hours roll over for one month. Beyond that they expire — to keep us proactive instead of saving them for a rainy day. Annual contracts have a flexible quarterly accounting.
What's the contract length?
Monthly is rolling and cancellable with 30 days notice. 6-month and annual contracts get the discount and lock the rate; cancellation mid-term is refundable pro-rata minus the applied discount.
Do you offer 24/7 phone support?
Business plans get 24/7 chat + email + on-call. Phone hotline access is included with Enterprise. All P1 alerts are routed to a real engineer within the SLA window — no first-line scripts.
Where is the team based?
EU-based engineering team (Romania + Netherlands), with a follow-the-sun on-call rotation for Business and Enterprise customers. Data and ops stay inside the EU unless you instruct otherwise.
Ready to take CarphaCom off your ops team's plate?
Tell us about your setup — we'll send a tailored quote within 48 hours. No sales calls required to get a real number.