---
title: "Pricing"
description: "From $12/year. Personal, Family, Teams, Mid-Market, Enterprise. Same vault, same encryption, every tier."
lang: en
url: https://clavitor.ai/en/pricing
markdown: https://clavitor.ai/en/pricing.md
authoritative: true
translations: [de, fr, es, it, pt, nl, pl, sv, da, no, fi, uk, ru, tr, ja, ko, zh, hi, th, vi, id]
publisher: Clavitor LLC
---

# Pricing: Price for life. No surprises.

The rate you sign up at is the rate you keep — forever.

**What that means:** the price you subscribe at today is locked in. If we raise our list prices next year, your subscription stays at the original rate. As long as you stay active, it never goes up. It's a commitment, not a promo.

> Live content (`plans`) — see the [HTML version of this page](https://clavitor.ai/en/pricing).

## Compare every feature: Everything, laid out.

No hidden limits. What you see here is what you get.

| Feature | Free | Individual | Family | Teams | Mid-Market | Enterprise |
|---|---|---|---|---|---|---|
| **Users & agents** | | | | | | |
| Users (People with their own login) | 1 | 1 | Up to 6 | Scales | Scales | Scales |
| AI agents (Claude Code, Codex, custom) | 1 | 3 | 18 (3/user) | 3/user | 3/user | 3/user |
| Entries | 10 | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| Cross-vault sharing (Add your hardware key to another vault) | No | No | Yes | Yes | Yes | Yes |
| **Encryption tiers** | | | | | | |
| Vault Encryption (Entire vault encrypted at rest, AES-256-GCM) | Yes | Yes | Yes | Yes | Yes | Yes |
| Credential Encryption (API keys, OAuth tokens, TOTP, passwords) | Yes | Yes | Yes | Yes | Yes | Yes |
| Identity Encryption (WebAuthn PRF, server cannot decrypt) | Yes | Yes | Yes | Yes | Yes | Yes |
| **Agents & integrations** | | | | | | |
| CLI + SDKs | Yes | Yes | Yes | Yes | Yes | Yes |
| HTTPS Proxy (Credential injection at network layer) | Yes | Yes | Yes | Yes | Yes | Yes |
| Claude Code · Codex · OpenClaw | Yes | Yes | Yes | Yes | Yes | Yes |
| Scoped agent tokens (Per-agent, per-entry access) | Yes | Yes | Yes | Yes | Yes | Yes |
| TOTP generation for agents | Yes | Yes | Yes | Yes | Yes | Yes |
| **Clients** | | | | | | |
| Browser extension (Chrome, Firefox, Safari, Edge, Brave) | Yes | Yes | Yes | Yes | Yes | Yes |
| Mobile apps (iOS and Android) | Yes | Yes | Yes | Yes | Yes | Yes |
| Password generator | Yes | Yes | Yes | Yes | Yes | Yes |
| Import (From 14 sources) | Yes | Yes | Yes | Yes | Yes | Yes |
| **Admin & network** | | | | | | |
| Admin console | No | No | Yes | Yes | Yes | Yes |
| Role-based access control | No | No | No | Yes | Yes | Yes |
| Group-based rotation (Rotate keys for a team, not an individual) | No | No | No | No | Yes | Yes |
| Primary POP choice (Point of Presence — pick your region; your vault lives there) | Yes | Yes | Yes | Yes | Yes | Yes |
| Encrypted geo-redundant replication (Automatic fail-over copy on the opposite side of the world) | Yes | Yes | Yes | Yes | Yes | Yes |
| Geo-distributed writes (Writes replicate across regions, continue from failover) | No | No | No | No | No | Yes |
| **Security & compliance** | | | | | | |
| Audit log retention | 7 days | 30 days | 90 days | 90 days | 1 year | Indefinite |
| SSH certificate issuance | No | No | No | No | Yes | Yes |
| SSO (SAML / OIDC) | No | No | No | No | Yes | Yes |
| SCIM provisioning | No | No | No | No | Yes | Yes |
| SIEM pull endpoint (JSON / NDJSON, cursor-based) | No | No | No | No | Yes | Yes |
| Real-time SIEM streaming | No | No | No | No | No | Yes |
| HMAC-signed webhooks (SOAR / Slack / Teams) | No | No | No | No | Yes | Yes |
| Tamper-proof audit signing | No | No | No | No | No | Yes |
| 4-eyes recovery (Two-admin approval for vault recovery) | No | No | No | No | No | Yes |
| SOC 2 / ISO-aligned controls (Self-assessed; formal attestation when an enterprise engagement requires it) | No | No | No | No | No | Yes |
| HIPAA BAA / DPA | No | No | No | No | No | Yes |
| Virtual appliance / Docker (Run Clavitor inside your own perimeter) | No | No | No | No | No | Yes |
| **Support** | | | | | | |
| Email support | Community | 72h | 48h | 24h | 24h | 4h |
| Priority channel (Slack Connect) | No | No | No | Yes | Yes | Yes |
| Dedicated account manager | No | No | No | No | No | Yes |
| Named solutions engineer | No | No | No | No | No | Yes |

### Flat pricing

**What you see is what you pay.** No per-action fees, no token counting, no vault-size tiers. Individual is $1/mo, Family is $3/mo.
Teams is $3 per seat; Mid-Market is $6 per seat.
Enterprise is $12 per seat, billed monthly. Prices exclude tax.

### No lock-in

**Export anytime, cancel in one click.** Vault contents export as a signed JSON bundle. Your data is deactivated at the end of your billing period and deleted after 30 days.

### No-surprise guarantee

**7 days to undo any charge.** After any transaction — signup, renewal, or monthly invoice — you can cancel and get a full refund. Self-service, instant, no questions asked.

## How billing works

Individual and Family pay once a year — $12 and $36 respectively. Teams, Mid-Market, and Enterprise pay monthly per seat, based on the number of active seats on the 1st of each month. Every plan charges at signup. Your billing cycle starts on the 1st of the following month, and the partial month in between is on us.

**Price for life.** Your rate is locked the moment you sign up. We may raise prices for new customers. Yours never changes. Not after a year, not after five. We absorb inflation, exchange rate changes, and infrastructure costs. Cancel or stop paying, and the lock is forfeited.

## Frequently asked questions

### What counts as an "agent"?

Any distinct automated identity that authenticates against your vault — Claude Code running on your laptop, a Codex session on a server, a custom agent. Humans aren't agents; they're users.

### What's the difference between Family and Teams?

Family is $3/mo ($36/yr) for up to 6 users and 18 agents — priced for a household that shares trust. Teams is $3/seat/mo with an admin console and role-based access. If you're a team of 2, Family is cheaper. Past 6 users, Teams is the right fit.

### When should I pick Mid-Market over Teams?

Teams covers the credential basics — vault, agents, admin console, RBAC. Mid-Market adds the integrations that growing orgs and MSP-managed customers expect: SCIM provisioning from your IdP, SSH certificate issuance, a SIEM pull endpoint, HMAC-signed webhooks, group-based rotation, and a longer audit retention (1 year vs 90 days). If your team has Azure AD, Okta, or any SAML/OIDC provider — and a SIEM you want events in — Mid-Market is the right fit.

### When should I pick Enterprise over Mid-Market?

Enterprise adds geo-distributed writes (writes continue from failover during a regional outage), 4-eyes recovery (two admins must approve any vault recovery), indefinite audit retention with real-time SIEM streaming and tamper-proof signing, HIPAA BAA / DPA, and the option to deploy as a virtual appliance inside your own perimeter. Controls are self-assessed and aligned with SOC 2 / ISO 27001 — we do not hold those attestations or certificates today; formal attestation is a commitment when engagement requires it. Plus a dedicated account manager and 4-hour incident response.

### Why not store credentials locally?

Because your agent isn't local. It runs on a server, in a container, across devices. Local storage can't issue scoped tokens, can't replicate across regions, and can't enforce field-level encryption tiers. A vault gives your agent a narrow API surface — it never holds the keys.

### Do agents count against the user limit?

No. Users and agents are tracked separately, with their own caps per plan.

### What happens if I exceed a plan limit?

Nothing automatic — we won't downgrade you or start charging overages. We'll email you at 90% of a limit and walk you through either upgrading or cleaning up. Your agents keep working.

### Do you offer a free trial?

The free tier is the trial — 10 entries, full encryption, all features, no credit card. When you're ready to upgrade, you pay at signup and your billing cycle starts on the 1st of the following month. The partial month in between is free.

### How does Mid-Market and Enterprise pricing work?

Mid-Market is $6/seat/mo, Enterprise is $12/seat/mo — published, same for everyone, no quote-only opacity. Both are usage-based and billed monthly in arrears against actual active seats on the 1st of each month (6-seat minimum). For Enterprise, add-ons like virtual appliance deployment and custom SLA terms are scoped in a single call.

## Put your credentials out of reach of your agents.

Clavitor keeps vaults at a distance: separate infrastructure, separate trust boundary, geo-redundant replication. Your agents call a narrow API — they never hold the keys.
[Get started](https://clavitor.ai/en/checkout)