> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sovseal.com/llms.txt
> Use this file to discover all available pages before exploring further.

# sovseal Pricing Plans, Usage Quotas, and Billing

> Compare pricing tiers, understand Layer-A-only billing metrics, monitor live quota meters, upgrade your plan, and review SLA commitments per tier.

The sovseal Usage & Billing page gives you a live view of subscription status, seat allocations, and project quota consumption. Because sovseal is a zero-knowledge platform, the billing engine never needs or requests your decryption keys — all metering is computed strictly from **Layer A server-known metadata**: ciphertext byte counts, active agent seat count, and operation logs.

<Note>
  **Provenance Layer: Server-Known (Layer A)** — Billing metrics are derived exclusively from metadata the server is permitted to observe: plan tier, active seat count, aggregate ciphertext bytes stored, and sync operation counts. Your decryption keys and cleartext memory content are never required or accessed for billing purposes.
</Note>

## Pricing Tiers

sovseal operates under a 4-tier subscription structure managed by `@sovseal/pricing`. Basic local features are free forever, and cloud synchronization across devices and agent fleets is gated by plan:

| Tier                          | Plan Name  | Monthly           | Annual (20% off)       | Included Sync & Cloud Features                                                                                                   | Key Recovery Escrow                 | SLA         |
| :---------------------------- | :--------- | :---------------- | :--------------------- | :------------------------------------------------------------------------------------------------------------------------------- | :---------------------------------- | :---------- |
| **Local** (`hobby`)           | Local      | **\$0** / forever | —                      | 1 cloud agent · **30-day cloud sync trial** → 90-day grace mode. Unlimited local memory forever.                                 | Sovereign key custody (no recovery) | Best-effort |
| **Solo** (`starter`)          | Solo       | **\$19** / mo     | \$190 / yr             | 3 cloud agents · Unlimited devices · Sovereign cloud sync across all your tools.                                                 | Sovereign key custody (no recovery) | 99.9%       |
| **Business** (`growth`)       | Business   | **\$119** / mo    | \$1,190 / yr (\$99/mo) | 5 seats included (+\$25/mo extra seat) · 25 cloud agents · Shared memory graphs, PII redaction rules & retention TTL governance. | **Shamir-split escrow**             | 99.9%       |
| **Enterprise** (`enterprise`) | Enterprise | **Custom**        | Negotiated             | Unlimited seats & agents · SOC 2 / HIPAA signed BAA · SSO & SCIM 2.0 provisioning. Entered via Policy-Pass Pilot.                | **HSM-backed custody**              | 99.9%       |

<Note>
  **The 30-Day Trial & Grace Mode** — First-time local users receive **30 days of full cloud sync** (`TRIAL.freeSyncDays = 30`). After 30 days, cloud sync transitions into a **90-day grace mode** (`TRIAL.graceReadDays = 90`) where existing memories can be pulled and restored, but new cloud sync writes pause until upgrading. Your local on-device LanceDB database is never blocked or limited.
</Note>

## What Gets Metered

The billing engine tracks resource dimensions sourced exclusively from Layer A metadata tables:

<CardGroup cols={2}>
  <Card title="Cloud Sync Operations" icon="arrows-rotate">
    The count of background write and read replication calls against the edge endpoint (`v2-agent-state`). Paid plans operate under flat, unmetered pricing subject to a soft fair-use ceiling (Solo: 10k, Business: 50k monthly ops).
  </Card>

  <Card title="Encrypted Storage" icon="database">
    The cumulative byte size of ciphertext envelopes stored in `public.agent_state_snapshots` and the `sovseal-rom` storage bucket. Only opaque encrypted bytes count — the server measures envelope size, not content.
  </Card>

  <Card title="Active Team Seats" icon="users">
    The number of member seats allocated on Business and Enterprise plans. Business includes 5 seats. Additional seats are billed at \$25/month each.
  </Card>

  <Card title="API Project Sub-Keys" icon="key">
    The number of named `sov_proj_` and `sov_live_` agent tokens issued for your project. All tiers include unlimited devices and containers.
  </Card>
</CardGroup>

## Upgrading Your Plan

<Steps>
  <Step title="Open Usage & Billing">
    Navigate to **Plan** (`/plan`) in the dashboard navigation bar.
  </Step>

  <Step title="Select Your Plan">
    Choose monthly or annual billing (saving 20%) and click **Upgrade Plan** or **Start Business Plan**.
  </Step>

  <Step title="Complete Checkout via Polar.sh">
    You are redirected to the Polar-hosted checkout page. Polar acts as the merchant of record and handles PCI compliance — no payment credentials touch sovseal application servers.
  </Step>

  <Step title="Instant Activation">
    After payment, Polar emits a signature-verified webhook to the sovseal edge function, upgrading your plan status instantly in the database.
  </Step>
</Steps>

## Falsifiable Security Guarantees

* **The Packet-Capture Guarantee**: Run any network inspector (Wireshark, mitmproxy, tcpdump). If plaintext memory leaves your device, sovseal publishes the finding and your team keeps sovseal free forever (`security@sovseal.com`).
* **The Policy-Pass Pilot**: 90 days of sovseal Business tier, free, for 10 regulated teams to get security sign-off under honest solo-founder capacity (`enterprise@sovseal.com`).