Firmex

Best Self Hosted Alternatives to Firmex

A curated collection of the 3 best self hosted alternatives to Firmex.

Cloud-based virtual data room for secure storage, sharing and management of sensitive documents. Offers granular permissions, watermarking, access controls and audit activity tracking to support M&A, due diligence, audits, litigation and board reporting.

Alternatives List

#1
Papermark

Papermark

Open-source DocSend alternative for secure document sharing and data rooms, with custom domains, access controls, and viewing analytics.

Papermark screenshot

Papermark is an open-source document sharing platform and virtual data room alternative to DocSend. It lets teams upload documents, share them via secure links, and track engagement with built-in analytics and branding controls.

Key Features

  • Secure shareable document links with revocation and access controls
  • Custom domains and branding for viewer experience
  • Document tracking and engagement analytics (including page-by-page insights)
  • Data room-style organization for sharing multiple documents
  • Authentication features such as 2FA and SSO (availability depends on deployment/plan)

Use Cases

  • Sales and partnerships: share decks and proposals and measure engagement
  • Fundraising and investor relations: run a data room with controlled access
  • Secure client document delivery with branded links and audit-friendly tracking

Limitations and Considerations

  • Some analytics and integrations may rely on third-party services depending on configuration
  • Requires external object/blob storage and a PostgreSQL database for typical deployments

Papermark is a strong fit for teams that want DocSend-style sharing with more control over hosting, branding, and data. It combines link-based document delivery with practical analytics for understanding how recipients engage with shared files.

8kstars
1.1kforks
View Details
#2
Gokapi

Gokapi

Lightweight self-hosted Firefox Send alternative for secure, expiring file shares with user roles, optional S3-compatible storage, and REST API.

Gokapi screenshot

Gokapi is a lightweight, self-hosted file sharing server designed for sharing files via expiring download links. It focuses on controlled uploads (no public upload) and supports encryption and optional S3-compatible storage for flexible deployments.

Key Features

  • Expiring file shares based on time and/or number of downloads
  • User management with role-based permissions; only registered users can upload
  • Built-in encryption support, including end-to-end encrypted uploads
  • File deduplication to reduce storage usage for identical uploads
  • Optional storage backend support for AWS S3 and S3-compatible providers
  • OpenID Connect (OIDC) authentication integration for SSO
  • REST API for automation and integration
  • Customizable web UI via custom CSS and JavaScript

Use Cases

  • Secure one-off file delivery with automatic link and file expiration
  • Internal team file drop for controlled sharing without public uploads
  • Automated file distribution workflows using the REST API

Limitations and Considerations

  • Designed for simple file sharing rather than full sync/collaboration (not a cloud drive)
  • Some advanced features (S3 backends, SSO) require additional configuration

Gokapi is a strong choice when you need an easy-to-run, privacy-focused file sharing service with expiring links and modern authentication options. Its lightweight Go-based implementation and optional S3 storage make it suitable for both homelabs and small teams.

2.5kstars
116forks
View Details
#3
Enclosed

Enclosed

Self-hostable, end-to-end encrypted note and file sharing with zero-knowledge storage, optional passwords, expiration (TTL), and delete-after-reading links.

Enclosed screenshot

Enclosed is a minimalistic web application for sending private notes and file attachments using end-to-end encryption. Notes are encrypted in the browser so the server stores only ciphertext and cannot read the content.

Key Features

  • Client-side end-to-end encryption with AES-GCM and keys derived via PBKDF2
  • Zero-knowledge storage: server only receives encrypted payloads plus limited metadata
  • Optional password protection in addition to the secure link key
  • Expiration (TTL) and delete-after-reading (self-destruct) options
  • Secure file attachments alongside notes
  • Optional email/password authentication for creating notes
  • Responsive minimal UI with dark mode and internationalization
  • CLI for creating and viewing notes from the terminal

Use Cases

  • Securely share credentials, recovery codes, or sensitive snippets with expiring links
  • Send confidential one-time notes to teammates or clients
  • Share private files quickly without giving the server access to contents

Limitations and Considerations

  • Losing the note link (and password, if set) makes the content unrecoverable by design
  • The service stores metadata such as TTL and whether a note is password-protected

Enclosed is well-suited for teams or individuals who need quick, secure, ephemeral sharing with a simple interface. Its zero-knowledge design and optional self-destruct controls help reduce exposure when exchanging sensitive information.

1.9kstars
158forks
View Details

Why choose an open source alternative?

  • •Data ownership: Keep your data on your own servers
  • •No vendor lock-in: Freedom to switch or modify at any time
  • •Cost savings: Reduce or eliminate subscription fees
  • •Transparency: Audit the code and know exactly what's running