Private transcription server for calls, meetings and media: web UI, REST API and S3 batch folders, on EC2 or in your container platform. Runs inside your AWS account on CPU or GPU, so audio never leaves your VPC. $0.07 per hour.
Runs inside your own AWS account: audio is transcribed on an instance or
container you control, inside your VPC, and never leaves it.
This product provides a fully self-hosted speech-to-text server packaged as an
Amazon Machine Image (AMI) for AWS EC2 and as a container image. The server
converts audio files into text and exposes both a web interface and a simple
HTTP REST API. All processing occurs within the customer's AWS environment.
The AMI launches with a guided browser setup wizard over HTTPS (port 443).
You confirm ownership with the EC2 instance ID, create an administrator
account, pick a certificate option, and select a Whisper model. No SSH or
user-data editing is required for credentials. After setup, the admin
account can add users and issue API tokens from /admin - no need
to share one password for automation. HTTP Basic auth with any account
still works. GPU instances (for example g4dn.xlarge) enable CUDA
automatically; CPU instances still work.
The Marketplace container image authenticates with a PASSWORD environment
variable over HTTP on port 8080 and auto-detects a CUDA GPU at startup
(pass --gpus all to enable it), falling back to CPU otherwise.
A Batch tab handles whole folders rather than one file at a time. Point it
at an S3 bucket from /admin, and it becomes a file browser over that bucket:
upload audio, queue transcriptions, and get a sidecar transcript written
back beside each source file. Nothing leaves the instance and the bucket
stays in your account. Without a bucket configured, any writable directory
bind-mounted at /data works the same way.
Common use cases include call center transcription, media and meeting
transcription, bulk back-catalogue conversion, compliance-sensitive audio
processing, and private speech analytics pipelines.
Whisper models
base.en is the default and the only model baked into the image, so the
server transcribes English out of the box with no download. Sixteen
checkpoints are selectable in total - from the Model tab in /admin on the
AMI, or by running /app/scripts/download-ggml-model.sh into a mounted
/app/models volume and setting WHISPER_MODEL on the container. Models
ending in .en are English-only; the rest are multilingual.
tiny, tiny.en (39M, ~1 GB VRAM) - the smallest checkpoints; suited to
drafts and keyword spotting rather than final transcripts
base (74M, ~1 GB VRAM) - small multilingual, fine for short clips
base.en (74M, ~1 GB VRAM) - the default; good English accuracy, small
footprint, and the only model that needs no download
small, small.en (244M, ~2 GB VRAM) - noticeably better than base
small.en-tdrz (244M, ~2 GB VRAM) - small.en with tinydiarize speaker
turns; required for the Diarize option in the UI
medium, medium.en (769M, ~5 GB VRAM) - strong accuracy, needs a full GPU
large-v1, large-v2, large-v3 (1550M, ~10 GB VRAM) - the full-size
checkpoints; the largest and slowest of the set
large-v2-q5_0, large-v3-q5_0 (1550M quantized, ~6 GB VRAM) - most of the
quality at roughly half the disk and VRAM
large-v3-turbo (809M, ~6 GB VRAM) - close to large-v3 quality at
roughly half the parameters
Selecting any model other than base.en downloads it from huggingface.co, so
the instance or container needs outbound internet access at that point.
Transcription itself never sends audio anywhere.
Highlights
Transcribe calls, meetings and media with a web UI, a REST API and S3 batch folders, with users and revocable API tokens from /admin
Runs inside your own AWS account and VPC - audio never leaves it, HTTPS setup wizard, no shared password
Automatic GPU or CPU; $0.07 per hour software fee plus the instance charge, with a 5-day free trial
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
You pay an hourly software fee that is the same across every option, plus the standard AWS charge for the EC2 instance you pick. The dimensions are not feature tiers; they are instance choices. You select based on compute needs. CPU families include t3, t3a, c5, c6i, c7i, m5, m6i, m7i, r5, and r6i. GPU families include g4dn, g5, g6, g6e, and p3, which enable GPU acceleration automatically. Larger sizes within each family add vCPU, memory, or GPU capacity. Billing scales with the number of hours each instance runs.
Top-of-mind questions for buyers
What do I actually pay for each instance-hour I run?
You pay two charges per hour. The first is a flat software fee that stays the same across every instance choice. The second is the standard AWS rate for the EC2 instance type you launch. Larger instances carry a higher AWS charge, while the software fee does not change.
Am I charged the software fee when my instance is stopped?
The hourly software fee meters running time. A stopped instance does not run, so the software fee stops accruing. You may still pay AWS for attached storage on a stopped instance, but that is a separate AWS charge, not the software fee.
Why pick a GPU instance family like g4dn, g5, g6, g6e, or p3 over a CPU one?
GPU families enable CUDA acceleration automatically, which speeds transcription for larger speech models. CPU families like t3, c5, or m5 still run the server without a GPU. Both carry the same flat software fee; GPU instances carry a higher AWS instance charge. Choose based on model size and speed needs.
www.sigmodata.com
Helpful?
Vendor refund policy
Refunds are handled in accordance with AWS Marketplace refund policies. Buyers may request a refund within 48 hours of initial purchase or launch if the product does not function as described on supported EC2 instance types. To request a refund or support, contact support@sigmodata.com
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Security update: fixes CVE-2026-111497 (Brotli decoder buffer overflow) by rebuilding on patched Amazon Linux 2023 and Ubuntu 24.04 Brotli packages. Includes the latest operating system security updates.
Additional details
Usage instructions
Launch g4dn.xlarge (recommended) with inbound TCP 443 and 22.
CPU alternatives: t3.xlarge, m7i.xlarge.
Open https://<instance-address>/ in a browser. The certificate is
self-signed at this point, so your browser will warn you once.
Enter the instance ID shown in the EC2 console to confirm ownership.
Complete the setup wizard: administrator account, certificate option,
Whisper model (default base.en), optional S3 bucket for the Batch tab.
Transcribe at https://<instance-address>/, or POST /inference with
an API token (create one at /admin -> API access; recommended for
scripts and CI) or HTTP Basic auth with any account.
Optional Batch tab: set an S3 bucket at /admin -> Storage
(IAM instance role).
Port 80 is not required. Let's Encrypt validation uses port 443.
Manage the instance, users, and tokens later at
https://<instance-address>/admin.
Where your data is stored
Accounts and API tokens: /etc/sigmodata-stt/identity.sqlite3. Passwords and
tokens are stored hashed, never in clear text.
Service configuration: /etc/sigmodata-stt/
TLS certificate and private key: /var/lib/sigmodata-stt/certs/
Audio you upload and the transcripts written beside it: the S3 bucket you
set at /admin -> Storage, or /data when no bucket is configured.
All of it stays on the instance EBS volume in your own AWS account. Nothing is
sent to Sigmodata.
Encryption
In transit: HTTPS on port 443, self-signed by default or Let's Encrypt from
the setup wizard.
At rest: AWS Marketplace requires the published AMI snapshot to be
unencrypted. If you need encryption at rest, enable EBS encryption when you
launch (Advanced details -> EBS encryption) or launch from an encrypted
copy. The product needs no change either way.
Rotation
The TLS certificate renews automatically on a systemd timer. Renew it or
switch certificate type on demand at /admin.
Revoke and re-issue account passwords and API tokens at /admin at any time.
Rotate any credential that may have been exposed.
Checking that the product is healthy
In the EC2 console, choose Instances, select this instance, and check the
Status checks tab for passed system and instance checks.
Request https://<instance-address>/_gw/healthz for the service state.
On the instance, run: sudo systemctl status sigmodata-stt
and sudo journalctl -u sigmodata-stt for logs.
Backup and recovery
Take EBS snapshots of the instance volume for full-instance recovery.
Transcripts in your S3 bucket are covered by that bucket's own versioning
and lifecycle rules, which you control.
Service quotas and cost
GPU instances (g4dn/g5/g6) draw on the "Running On-Demand G and VT
instances" vCPU quota, which is 0 on a new AWS account. Request an
increase in Service Quotas -> Amazon EC2 before you launch.
You pay the AWS Marketplace hourly charge for this product plus the AWS
resources it uses: EC2 instance hours, the EBS root volume, any S3 storage
you configure, and data transfer out.
Support description:
Email support@sigmodata.com or https://www.sigmodata.com/contact. We help with AMI launch, the HTTPS wizard, GPU or CPU operation, the web UI, REST API, and batch transcription. We reply within one business day, Monday through Friday, US Pacific time.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Private transcription server for calls, meetings and media: web UI, REST API and S3 batch folders, on EC2 or in your container platform. Runs inside your AWS account on CPU or GPU, so audio never leaves your VPC. $0.07 per hour.
Private text-to-speech server for IVR prompts, narration and voice apps: web UI and REST API with Chatterbox Turbo. Models and voices are baked into the AMI, so it runs inside your AWS account with no downloads at boot. GPU recommended.
Deepgram is the leading voice AI platform for enterprise use cases, offering speech-to-text (STT), text-to-speech (TTS), and full speech-to-speech (STS) capabilities. 200,000+ developers build with Deepgrams voice-native foundational models due to our unmatched accuracy, low latency, and pricing. Having processed over 50,000 years of audio and transcribed over 1 trillion words, there is no organization in the world that understands voice better than Deepgram.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.