Built in production,
open-sourced for everyone.

Why we built this

We run EDI operations. Every day, real purchase orders, invoices, and shipping notices flow through our systems — exchanged with trading partners like Amazon, Rithum, Target, and Mirakl over the AS2 protocol.

For years, this meant one of two choices: pay hundreds per month for commercial AS2 software, or wrestle with open-source tools that required constant babysitting — manual XML configs, certificate rotation fire drills, servers to patch, and scaling headaches.

We wanted a third option: deploy once, pay nothing at idle, scale automatically, manage everything through a UI, and never think about servers. So we built it on AWS Lambda, DynamoDB, and S3 — fully serverless, fully managed, zero maintenance.

It worked. We ran it in production for months. Then we open-sourced it, because nobody should have to rebuild this from scratch.

Who's behind it

ServerlessAS2 is built and maintained by the team at Windingflow. We process real EDI transactions daily across multiple industries.

ServerlessAS2 is the same AS2 infrastructure we run in our own production environment. When we fix a bug or add a feature, it's because we hit the problem first.

What we believe

• AS2 is infrastructure, not a product. You shouldn't pay monthly rent for a protocol that's been an open standard since 2002.
• You should own your gateway. It runs on your AWS account. Your data, your certificates, your S3 bucket. We never see your traffic.
• Open source means open. The code is GPL-3.0, inherited from the OpenAS2 engine. Read it, modify it, fork it. You're never locked in — the code is yours to run, inspect, and extend.
• Complexity is the enemy. One command to deploy. A web UI for everything. No XML configuration files. No Java processes to babysit.

Beyond AS2

AS2 is the transport layer — it delivers raw EDI documents securely between trading partners. But a raw 850 Purchase Order or 856 ASN isn't useful until it's translated, validated, and routed to your systems.