Pricing

Price for life. No surprises.

The rate you sign up at is the rate you keep — forever.

What that means: the price you subscribe at today is locked in. If we raise our list prices next year, your subscription stays at the original rate. As long as you stay active, it never goes up. It's a commitment, not a promo.

Individual

For solo users and their AI agents.

$1/mo

with annual plan — locked for life

Get individual plan

1 user
3 agents
All three encryption tiers
CLI + SDKs

Family

Share with your household.

$3/mo

with annual plan — locked for life

Get family plan

6 users
18 agents (3 per user)
Shared + private vaults
Household trust boundaries

Most picked

Teams

For teams and small businesses.

$3/user / mo

with annual plan — locked for life

Get teams plan

Scales with team size
3 agents per user
Admin console + role-based access
Audit log (90 days)

Enterprise

Advanced security and compliance.

$5/user / mo

with annual plan — locked for life

Contact sales

Scales with team size
3 agents per user
SSO · SCIM · SOC 2
Custom SLAs, HIPAA BAA

Prices shown in

🇺🇸 United States USD

Compare every feature

Everything, laid out.

No hidden limits. What you see here is what you get.

Feature	Individual	Family	Teams	Enterprise
Users & agents
UsersPeople with their own login	1	6	Scales with seats	Scales with seats
AI agentsClaude Code, Codex, custom	3	18 (3/user)	3 per user	3 per user
Shared vaults
Encryption tiers
Tier 1 · CredentialAPI keys, OAuth tokens, TOTP
Tier 2 · SecretNotes, env blocks, scoped data
Tier 3 · IdentityWebAuthn-PRF, server cannot decrypt
Agents & integrations
CLI + SDKs
Claude Code · Codex · OpenClaw
Scoped agent tokensPer-agent, per-entry access
Webhooks
Admin & network
Admin console
Role-based access control
Primary POP choicePick your region — your vault lives there
Encrypted geo-redundant replicationAutomatic backup to Calgary or Zürich
Uptime SLA	99.9%	99.9%	99.95%	99.99%+
Security & compliance
Audit log retention	30 days	90 days	1 year	Unlimited
SSO (SAML / OIDC)
SCIM provisioning
SOC 2 Type II report
HIPAA BAA / DPA
Support
Email support	72h	48h	24h	4h
Priority channel (Slack Connect)
Named solutions engineer
	Get individual plan	Get family plan	Get teams plan	Contact sales

Flat pricing

What you see is what you pay.

No per-action fees, no token counting, no vault-size tiers. Individual is $12/year. Family is $24. Teams and Enterprise are per-user flat rates.

No lock-in

Export anytime, cancel in one click.

Vault contents export as a signed JSON bundle. Cancel and your data is deleted within 30 days.

Billing in arrears

We invoice on the 1st, for the previous month.

Vaults added mid-month are not on that invoice. So everything you use until the 1st of next month is effectively free. Cancel before then and you are never billed.

Frequently asked questions

What counts as an "agent"?

Any distinct automated identity that authenticates against your vault — Claude Code running on your laptop, a Codex session on a server, a custom MCP tool. Humans aren't agents; they're users.

What's the difference between Family and Teams?

Family is a flat $24/yr for up to 6 users and 18 agents — priced for a household who shares trust. Teams is per-user with unlimited users and agents, plus an admin console and role-based access. If you're a team of 2, Family is cheaper. Past 6 users, Teams is the right fit.

Why not store credentials locally?

Because your AI agent is too smart for that.

The reason is distance. A vault only protects you if it sits outside your agent's reach. If credentials live on the same machine — encrypted in a local vault, stored in .env files, saved in your browser's password manager — the agent can bypass them entirely. It can read environment variables, parse config files, and probe local services. At that point the vault is theater.

Clavitor runs on separate infrastructure with a separate trust boundary. Your agent only sees a narrow issuance API — it gets exactly the credentials it's scoped to, nothing more. That distance is the security model.

Do agents count against the user limit?

No. Users and agents are tracked separately, with their own caps per plan.

What happens if I exceed a plan limit?

Nothing automatic — we won't downgrade you or start charging overages. We'll email you at 90% of a limit and walk you through either upgrading or cleaning up. Your agents keep working.

Can I switch between monthly and annual?

Yes, at any time. Switching to annual prorates your remaining months and drops you to the annual rate immediately. Switching from annual to monthly takes effect at renewal.

Do you offer a free trial?

Effectively, yes — because of how we bill. We invoice on the 1st of each month, in arrears, for vaults that existed on the 1st of the previous month. Anything you add mid-month isn't on that invoice. So if you sign up today, everything you use until the 1st of next month is free, and your first invoice the month after only covers what was live on that earlier cutoff. Cancel before then and you're never billed.

How does Enterprise pricing work?

The published per-user rate is the floor. Add-ons — HIPAA BAA, custom SLAs above 99.99%, named solutions engineer — are scoped in a single call. Typical deals close in under 30 days of procurement.

Put your credentials out of reach of your agents.

Clavitor keeps vaults at a distance: separate infrastructure, separate trust boundary, geo-redundant replication. Your agents call a narrow API — they never hold the keys.

Get started See plans