Pricing
Four plans, one monthly event counter, no seats. Every feature is on every plan; the tiers differ only in monthly events, payload retention, anchor cadence and support. The verifier runs with our servers off.
Self-host
Free AGPL
- Events
- Unlimited
- Retention
- Your disk
- Anchor
- You set it
- Support
- GitHub issues
Free
$0 forever
- Events
- 10k / month
- Retention
- 30 days
- Anchor
- Daily
- Support
Pro
$49 per month
- Events
- 500k / month
- Retention
- 1 year
- Anchor
- Every 5 min
- Support
Business
$199 per month
- Events
- 5M / month
- Retention
- 3 years
- Anchor
- Every minute
- Support
- Priority email
Every plan, including Free, has the same features
Plans differ only in monthly events, payload retention, anchor cadence and support. Nothing below is gated by plan.
- Signed receipts
- Rekor + OpenTimestamps anchors
- Client-side signing
- Crypto-shredding erasure
- JSONL export + offline verifier
- Viewer tokens
- MCP connector
Retention is payload retention: hashes, signatures and anchors are kept so old exports still verify. Billing through Stripe Checkout; no seats, no metering beyond a monthly event counter. Prices in USD. [OWNER: confirm Stripe prices]
What you are paying for
Anchor cadence
How often your tenants' roots are written to Rekor and OpenTimestamps. Shorter cadence means a shorter window between "acknowledged with a signed receipt" and "in a public log".
Payload retention
How long the payload body stays readable. Headers, hashes, signatures and anchors are kept regardless, so exports from years ago still verify.
Volume
Events per calendar month, counted on write. Reads, proofs, verifies and exports are not metered.
Questions
Which features do I get on Free?
All of them: signed receipts, public anchoring, client-side signing, crypto-shredding erasure, JSONL export and the offline verifier, viewer tokens, the MCP connector. The server gates three numbers by plan (monthly events, payload retention days, anchor interval) and nothing else; paid plans buy volume, retention, cadence and support.
What counts as an event?
One call to POST /v1/events, one item in a bulk call, or one log_event over MCP. Idempotent replays (duplicate: true) do not count twice. Reads, proofs, verifies and exports are free.
What happens at the limit?
Writes return 429 plan_limit until the month rolls over or you upgrade. Reads, proofs, verify and export keep working. Nothing is dropped silently.
What does retention mean here?
Payload retention. After the window, payloads are crypto-shredded (payload and salt deleted). Event headers, hashes, signatures, roots and anchor receipts are kept, so an old export still verifies and still shows who did what, when; only the payload body is gone.
What is the window before an event is publicly anchored?
Up to one anchor interval: a day on Free, 5 minutes on Pro, 1 minute on Business. In that window the event is already hash-chained and you hold a signed receipt, so later omission is provable; what is not yet there is the public-log entry.
Why no SIEM streaming?
Deliberate. WorkOS charges $125 per month per stream; every plan has the JSONL export API (GET /v1/export, read scope) and the same file is what the verifier reads. Pull it into your SIEM on your schedule.
Can I pay yearly, by invoice, or in EUR?
Stripe Checkout, monthly, USD, card. [OWNER: confirm whether yearly/invoice billing is offered]