Seatless pricing for certificate‑verified production
Start with a 7‑day guided pilot (security brief + controlled rollout). Reads, traces, and dry-runs are free. Platform fees cover in‑VPC deployment, SLAs, evidence bundles, and support. Usage is measured in Certified Writes (Action Certificates attached to each approved write) with transparent volume tiers. Optional % of model spend applies only when TrustPlane proxies inference and is capped.
Deployment runs in your VPC/VNet with BYOK/KMS, SCIM, and no training on your data unless you opt in.
No seat charges. Reads, traces, and dry-runs remain free across every plan.
Build
Includes 7-day guided pilot (security brief + controlled rollout). Prepaid Certified Writes unlock governed automations.
- 1 governed automation included
- Includes 25k Certified Writes / mo
- Volume tiers: $12 → $9 → $6 per 10k Certified Writes (0–1M / 1–5M / 5M+)
- Unlimited seats — approvers, builders, reviewers included
- Read-first connectors (Snowflake, Databricks, ServiceNow, Slack/Teams) *
- Policy-as-code gates, Learning Controls, rollback < 5 min
- Email support and evidence bundle starter pack
* Connector availability may vary by region. See docs for current list.
Operate
Includes 7-day guided pilot (security brief + controlled rollout). Prepaid Certified Writes unlock governed automations.
- Up to 5 governed automations
- Includes 250k Certified Writes / mo
- Volume tiers: $8 → $6 → $4 per 10k Certified Writes (0–1M / 1–5M / 5M+)
- Everything in Build plus production SLAs
- Action Certificates + transparency log options
- SSO/SAML & SCIM (Okta, Microsoft Entra ID, Ping)
- OpenTelemetry/SIEM exports and FinOps showback
- Priority Slack, 24×7 on-call, regulator evidence bundles
Enterprise
Custom pricing & deployment for regulated and large‑scale workloads
Platform from $250k/year • Includes 1M Certified Writes / mo • 10 governed automations (expandable)
- Multi-region in‑VPC deployment with dedicated SLA
- Extended evidence packs (EU AI Act, NIST AI RMF) and regulator briefings
- Procurement via AWS, Azure, and Google Cloud marketplaces
- In‑VPC deployment (AWS/GCP/Azure) & private networking
- Advanced governance & deterministic audit
- Priority on‑call • dedicated Slack
- Security review • procurement & marketplace
- MSA, DPA, data‑residency & BYOK/KMS options
Certified Write usage tiers
Included pools (25k / 250k / 1M per plan) are applied first each month. Additional usage draws from the tiers below; higher volume lowers marginal cost.
Global overage tiers (0–1M: $12/10k; 1–5M: $8/10k; 5M+: $5/10k). Operate plan includes discounted tiers ($8→$6→$4); when present, plan discounts override global tiers.
| Monthly volume band | List price | Effective per write |
|---|---|---|
| 0–1M Certified Writes / mo | $12 per 10k | $0.0012 per write |
| 1–5M Certified Writes / mo | $8 per 10k | $0.0008 per write |
| 5M+ Certified Writes / mo | $5 per 10k | $0.0005 per write |
Usage tiers reset monthly.
Annual prepay discounts apply to the platform component; additional volume discounts are negotiated via private offers.
What you unlock when traffic flows through TrustPlane
What’s in each plan
Build
- 1 governed automation
- Includes 25k Certified Writes / mo
- Read-first connectors
- Policy-as-code gates, Learning Controls, rollback < 5 min
Operate
- Up to 5 governed automations
- Includes 250k Certified Writes / mo
- Action Certificates + transparency log
- SSO/SAML & SCIM (Okta, Microsoft Entra ID, Ping)
- OpenTelemetry/SIEM export & FinOps showback
- Priority Slack + 24×7 on-call
Enterprise
- 10 governed automations (expandable via add-ons)
- In‑VPC deployment & multi-region with dedicated SLA
- Includes 1M Certified Writes / mo (expandable)
- Marketplace procurement
- Security review, regulator briefings & evidence packs
How Certified Writes are counted
1 Certified Write = one discrete, durable state change in a system of record. Each Action Certificate carries a fan_out_count; billing uses max(1, fan_out_count) so bulk updates price per impacted record or message.
Reads, traces, evals, and dry-runs are free. The table below publishes integration-specific counting rules.
| Integration | What counts as 1 Certified Write |
|---|---|
| ServiceNow | Per ticket create/update (per record written to ServiceNow) |
| Snowflake | Per row write or MERGE that reaches production tables |
| Jira / Atlassian | Per issue create/update (including field, status, or comment changes) |
| Slack / Teams | Per message or file posted by an automation |
| Databricks / Lakehouse | Per job run that persists results to governed storage |
Additional integrations follow the same principle: durable state change per record. Fan-out is declared in the certificate payload and auditable downstream.
Add-ons (published list prices)
Add five additional governed automations beyond plan entitlements.
Multi-region SRE & residency support with dedicated runbooks.
EU AI Act & NIST AI RMF templates, mappings, and automation playbooks.
Discounts follow the same commercial terms as platform commits. Private offers welcome.
Proxy-of-record (optional)
When TrustPlane proxies inference, usage can be pegged to a percentage of model spend with guardrails: floor $5k/mo, rate 5% of model spend, capped at $20k/mo. Certified Write metering still applies for downstream state changes.
Example invoices
Sanity-check the math buyers perform during procurement.
- 250k pool included → no usage overage
- Annual platform = $120k
- 250k included → 350k over
- 35 blocks in 0–1M band @ $12 = $420/mo ($5,040/yr)
- Total = $125,040/yr
- 1M included → 1.4M overage
- First 1M @ $12 = $1,200/mo
- Next 0.4M @ $8 = $320/mo
- Usage $1,520/mo ($18,240/yr)
- Platform from $250k → ~$268,240/yr
Usage pricing shown before any private-offer discounts. Platform fees include governance, audit, and support entitlements.
Enterprise outcomes (why F500 buy)
- Policy‑gated writes; rollback in < 5 min
- Cost/showback per team
- Auditable approvals (security & finops)
- Read‑first to production data
- Action Certificates on updates
- SIEM export for audit/IR
- Snowflake/Databricks read‑first connectors
- DLP/PII controls by policy
- SLOs & budgets as code
Examples are illustrative; impact varies by baseline and scope.
FAQ
What counts as a “Certified Write”?
A write that passed policy gates, minted an Action Certificate, and can be verified before any side-effects. Each certificate declares a fan_out_count; billing uses max(1, fan_out_count) so bulk updates price per impacted record or message. Reads, traces, evals, and dry-runs are free.
Who pays for access?
There are no seat charges. Roles (builders, operators, approvers, reviewers) are included. Billing is usage-based: Certified Writes sold in prepaid blocks with volume tiers.
How does usage factor in?
Usage is metered by Certified Writes—each Action Certificate minted on promotion/writes. After the included pool, volume tiers apply: $12 → $8 → $5 per 10k Certified Writes (0–1M / 1–5M / 5M+ per month). Enterprise may optionally peg usage to a % of model spend when TrustPlane proxies inference (floor $5k/mo, rate 5%, cap $20k/mo).
What about automation packs, regions, or compliance add-ons?
Add-ons are published list prices: +5 governed automations for $25k/year, each additional region or environment for $60k/year, and compliance evidence packs (EU AI Act, NIST AI RMF) for $20k/year. Discounts align with platform commits.
How do downstream systems verify a Certified Write?
Use the /verify sandbox or @trustplane/sdk helpers to validate COSE signatures, policy hashes, approvals, and rollout scope before any write executes.
Do you run inside our VPC?
Yes—deployment is in your cloud account so data & compute stay within your perimeter.
Can we buy through cloud marketplaces?
Yes—Enterprise can transact via AWS/GCP/Azure marketplaces for streamlined procurement.
What happens after the trial?
Convert to monthly or annual anytime. If you don’t subscribe, your environment is deactivated without data leaving your account.