Provenance Layer: Server-Known (Layer A) — Billing metrics are derived exclusively from metadata the server is permitted to observe: plan tier, active seat count, aggregate ciphertext bytes stored, and sync operation counts. Your decryption keys and cleartext memory content are never required or accessed for billing purposes.
Pricing Tiers
sovseal operates under a 4-tier subscription structure managed by@sovseal/pricing. Basic local features are free forever, and cloud synchronization across devices and agent fleets is gated by plan:
The 30-Day Trial & Grace Mode — First-time local users receive 30 days of full cloud sync (
TRIAL.freeSyncDays = 30). After 30 days, cloud sync transitions into a 90-day grace mode (TRIAL.graceReadDays = 90) where existing memories can be pulled and restored, but new cloud sync writes pause until upgrading. Your local on-device LanceDB database is never blocked or limited.What Gets Metered
The billing engine tracks resource dimensions sourced exclusively from Layer A metadata tables:Cloud Sync Operations
The count of background write and read replication calls against the edge endpoint (
v2-agent-state). Paid plans operate under flat, unmetered pricing subject to a soft fair-use ceiling (Solo: 10k, Business: 50k monthly ops).Encrypted Storage
The cumulative byte size of ciphertext envelopes stored in
public.agent_state_snapshots and the sovseal-rom storage bucket. Only opaque encrypted bytes count — the server measures envelope size, not content.Active Team Seats
The number of member seats allocated on Business and Enterprise plans. Business includes 5 seats. Additional seats are billed at $25/month each.
API Project Sub-Keys
The number of named
sov_proj_ and sov_live_ agent tokens issued for your project. All tiers include unlimited devices and containers.Upgrading Your Plan
1
Open Usage & Billing
Navigate to Plan (
/plan) in the dashboard navigation bar.2
Select Your Plan
Choose monthly or annual billing (saving 20%) and click Upgrade Plan or Start Business Plan.
3
Complete Checkout via Polar.sh
You are redirected to the Polar-hosted checkout page. Polar acts as the merchant of record and handles PCI compliance — no payment credentials touch sovseal application servers.
4
Instant Activation
After payment, Polar emits a signature-verified webhook to the sovseal edge function, upgrading your plan status instantly in the database.
Falsifiable Security Guarantees
- The Packet-Capture Guarantee: Run any network inspector (Wireshark, mitmproxy, tcpdump). If plaintext memory leaves your device, sovseal publishes the finding and your team keeps sovseal free forever (
security@sovseal.com). - The Policy-Pass Pilot: 90 days of sovseal Business tier, free, for 10 regulated teams to get security sign-off under honest solo-founder capacity (
enterprise@sovseal.com).