Pricing
Priced on proof, not seats
You pay for the agent identities you run and the actions they sign — the two things that actually scale. Every plan includes the full identity stack; the tiers differ on volume, deployment control and how deep the compliance features go.
- No per-user fees
- Metered from the audit trail
- Overage never blocks a workflow
Pilot
Signed record of one live workflow on your stack, plus a readout for security and audit.
one fixed price, 90 days
- 90-day engagement, one workflow
- Up to 10 agent identities
- Signed actions included
- X.509 agent certificates, mutual TLS
- OpenID Connect single sign-on
- 12-month audit trail retention
Growth
Multiple workflows in production, with the compliance evidence to match.
per month, billed annually
- Up to 10 workflows and 100 agent identities
- 2 million signed actions a month
- OIDC and SAML 2.0, plus SCIM provisioning
- SPIFFE / SPIRE workload identity
- 24-month retention with SIEM export
- FIDO2 / WebAuthn for human approvers
- Priority support, 99.9% uptime commitment
Enterprise
Regulated environments, your own trust anchors, your own residency rules.
annual agreement, volume based
- Unlimited workflows and agent identities
- Volume-based signed actions, committed annually
- Bring your own CA and your own keys
- Data residency choice, VPC or on-premise deployment
- Verifiable Credentials and Decentralized Identifiers
- 7-year audit retention for regulated retention rules
- Named customer success manager, custom DPA and SLA
How it meters
Two numbers, both auditable
Billing is driven by the same audit trail you use for compliance, so an invoice can be reconciled against the record rather than taken on trust. If the numbers ever disagree, the signed trail wins.
Agent identity
One credentialed agent, however many times it runs. Identities you revoke stop counting at the end of that billing month.
Signed action
One write, approval or state change committed to a downstream system and signed. Reads, retries and failed authorisations are not billed.
Going over
Nothing stops. Overage is billed at the plan's published rate and flagged in your dashboard before the invoice, so a busy quarter never breaks a workflow.
Pricing questions
Talk to us. A proof of concept on a single non-production workflow is usually a short engagement rather than a subscription, and it exists so you can see a signed record before committing budget.
Workflows keep running. Overage is billed at the plan’s published rate and surfaced in your dashboard before the invoice arrives. We would rather you find out from a dashboard than from finance.
Yes, at a premium to the annual rate. Most enterprise buyers take the annual agreement because it is what procurement and the DPA process are built around.
No. Approvers, reviewers and administrators are unlimited on every plan. Charging per human would push you toward shared logins, which is precisely the practice this product exists to eliminate.
The full signed record of every action, its authoriser and its policy, queryable and exportable for that period. Longer retention is available on Enterprise where a regulator requires it.
On Enterprise, yes — in your own VPC or on-premise, with your own certificate authority and keys. Ask us for the deployment architecture during the demo.
Not sure which plan fits?
Tell us the workflow and roughly how often it runs. We will size it with you — and say so if a pilot is the honest answer.