Pricing
No plan gets you closer to a no.
Upgrading widens what two people can agree to, never what one person can do without the other. Every tier ships the same policy engine with the same immutable deny set — if you find a paid feature that weakens that, it is a vulnerability and we will pay you for it.
Vanilla
One subject, one partner, zero assumptions.
€0
forever
- 1 active consent policy
- 90-minute window ceiling
- 7 days of audit history
- Every hard limit, immutably enforced
Practitioner
People with a history and a spreadsheet of limits.
€19
per subject / month
- 50 active policies, 8-hour windows
- 180-day audit retention + signed export
- SAML & OIDC federation
- Step-up affirmation on critical scopes
Play Space
Clubs, munches and dungeons with duty rosters.
€79
per venue / month
- Unlimited subjects, 12 seats per venue
- Monitor rotations and emergency write
- Community enforcement & ban sharing
- Aftercare p95 inside 15 minutes
Coven
Federations that want the binary on their own metal.
Let's talk
annual
- Self-hosted, air-gapped propagation
- End-to-end encrypted policy store, your keys
- Contractual aftercare SLA, p95 4 minutes
- Named security engineer, on call, discreet
SOC 2 Type II · ISO/IEC 27001 · GDPR · and one standard nobody asked us to certify for, published anyway.
The whole comparison, including the rows where every plan is identical.
| Capability | Vanilla | Practitioner | Play Space | Coven |
|---|---|---|---|---|
| Consent | ||||
| Hard limits, non-overridableNot a tiered feature. It is the engine. | ✓ | ✓ | ✓ | ✓ |
| Active consent policies | 1 | 50 | Unlimited | Unlimited |
| Scope catalogue | Full | Full | Full | Full + custom scopes |
| Multi-Factor Affirmation | 2 factors | 2 factors | 3 factors | N factors |
| Continuous re-authorization floor | 15 min | 5 min | 1 min | Any interval |
| Sessions | ||||
| Window ceiling | 90 min | 8 h | 48 h | Policy-defined |
| Safeword propagation | <1ms | <1ms | <1ms | Air-gapped <1ms |
| Revocation reason field | — | — | — | — |
| Monitor duty rosters | — | — | ✓ | ✓ |
| Emergency write authority | — | — | ✓ | ✓ |
| Records & audit | ||||
| Audit retention | 7 days | 180 days | 3 years | Yours, forever |
| Signed policy export | — | ✓ | ✓ | ✓ |
| Encryption at rest | Managed | Managed | Managed | E2E, your keys |
| Field-level redaction control | — | ✓ | ✓ | ✓ |
| Ecosystem | ||||
| SAML / OIDC federation | — | ✓ | ✓ | ✓ |
| SCIM community sync | — | — | ✓ | ✓ |
| Cross-venue enforcement sharing | — | — | ✓ | ✓ |
| Aftercare SLA | Community | Best effort | p95 15 min | p95 4 min, contractual |
| Support | Docs | Docs + community | A human who is fine | Named engineer |
Annual is 10 for 12
You get two months free. You do not get a longer revocation window, a wider default scope set, or a grace period on anything.
Cancel by saying so
Account deletion is one command, takes effect immediately, and destroys the policy store — not the audit record of consent, which is anonymised and kept because it protects you.
Free for community venues
Non-profit dungeons, peer-education programmes and consent workshops get Play Space. Ask once, no paperwork, no case number.
Still comparing plans?
Build a policy first. Five minutes in the builder tells you more about whether this is for you than any pricing table ever has.