| Deployment model | A managed, multi-tenant API. No infrastructure to run — you call an HTTPS endpoint and PostGate operates the queues, workers, and delivery pipeline. | Open source (AGPL-3.0) and self-hostable for free — you run Postgres, Redis, and the app yourself (Docker, Railway, Hetzner, etc.) — or use Postiz's own managed cloud instead. |
| Starting price & free tier | Free sandbox plan, no card required. Paid plans start at $4.00/mo. See /pricing. | Self-hosting the open-source app costs nothing but your own infrastructure. Postiz's managed cloud starts at $29/mo (Standard, 5 channels), up to $99/mo (Ultimate, 100 channels) — there is no free cloud tier, only a trial. |
| Who owns platform app approval | On the white-label plan, bring your own Meta, TikTok, LinkedIn, and other provider app credentials per organization — your approval status and rate limits are yours alone. See /docs/environments. | Self-hosters must register and get their own developer apps approved with each platform — Postiz's own docs note Meta and YouTube review can take over a month. Cloud users post through Postiz's shared developer apps instead. |
| White-label branding & custom domain | Every embedded connection environment supports a branded logo, primary color, and a verified custom domain on every plan that enables white-label. See /docs/environments. | No hosted, verified white-label domain product for a connection flow — a self-hoster can put their own domain in front of their own deployment, but branding a multi-tenant customer connection experience is not a built-in feature. |
| Webhook delivery model | Signed events (HMAC-SHA256 over timestamp and raw body) for post.published, post.partial, and post.failed, plus a test-delivery endpoint. See /docs/webhooks. | Webhooks are listed as a feature on every Postiz cloud tier and in the open-source app; public docs don't detail a signature scheme or a per-target delivery evidence model. |
| SDK language coverage | Generated clients for six languages/runtimes — Node.js/TypeScript, Python, Go, Ruby, PHP, and .NET — from one OpenAPI contract. See /docs/sdks-mcp. | API access is included on every cloud tier and the self-hosted app exposes a REST API, but Postiz does not publish generated SDKs across multiple languages. |
| Idempotent retries | A stable Idempotency-Key makes a logical create-post request safe to retry for 72 hours — no accidental duplicate publishes. See /docs/idempotency. | Not documented as a public API contract. A duplicate-publish bug from a retried in-flight TikTok job was reported and fixed in the open-source repo (PR #1741), which is the kind of failure a documented idempotency key is designed to prevent by contract rather than by fixing each occurrence after the fact. |