Lite
$0/month
Monthly only
1,000
requests a month
Hard limit
- Free sandbox, no card needed
- Hard limits, never billed
- Up to 100 stored card tokens
- 1 client ID
Choose the right plan for the data you protect.
Every product starts free or starts with a conversation. Card, Data and File Vault each start with a free Lite sandbox, NoPII protects your first million tokens a month at no cost, and Triplets comes back with a scoped proposal in two business days. What you are pricing against is the exposure you already carry.
Security is never a tier on any product. Every product is built on the Enigma Vault, which is PCI DSS Level 1 and SOC 2 Type II, and AES-256 encryption, per-customer keys, and full audit logging are the floor on every plan, including free.
Trust the data
Vault API pricing.
Each vault is priced independently, so you pay only for the data shapes you actually protect. Every vault starts with a free Lite sandbox.
Card Vault
Tokenize cards once, keep raw card data out of your systems, and pay per request.
Starter
$49/month
$550/yearSave $38 a year vs monthly billing
20,000
requests a month
then $0.02 per request
Everything in Lite, plus
- Overage instead of a hard limit
- Up to 10,000 stored card tokens, then moves up to Growth
- PCI AOC, SOC 2 Type II report and DPA
Growth
Popular$249/month
$2,700/yearSave $288 a year vs monthly billing
250,000
requests a month
then $0.01 per request
Everything in Starter, plus
- Custom CSS on hosted forms
- Twilio Pay
- Client certificates on the proxy
- 2 client IDs per subscription
- Up to 100,000 stored card tokens, then moves up to Business
EU data residency add-on, +$99/month
Business
$499/month
$5,500/yearSave $488 a year vs monthly billing
1,000,000
requests a month
then $0.007 per request
Everything in Growth, plus
- Raw card data access
- Unlimited client IDs
- Raw usage export
- Up to 1,000,000 stored card tokens; we contact you about Enterprise beyond that
EU data residency add-on, +$99/month
Compare all Card Vault featuresHide the Card Vault comparison
| Feature | Lite | Starter | Growth | Business |
|---|---|---|---|---|
| Price | ||||
| Monthly | $0/month | $49/month | $249/month | $499/month |
| Annual | Not available | $550/year save $38 | $2,700/year save $288 | $5,500/year save $488 |
| Usage | ||||
| Requests included a month | 1,000 requests | 20,000 requests | 250,000 requests | 1,000,000 requests |
| Requests beyond that | Hard limit | $0.02 per request | $0.01 per request | $0.007 per request |
| Request rate | 10 per second | Unlimited | Unlimited | Unlimited |
| Stored card tokens | 100, hard limit | 10,000, then Growth | 100,000, then Business | 1,000,000 |
| Features | ||||
| Custom CSS on hosted forms | ||||
| Twilio Pay | ||||
| Proxy client certificates (mTLS) | ||||
| Raw card data access | ||||
| Client IDs per subscription | 1 | 1 | 2 | Unlimited |
| Raw usage export | ||||
| EU data residency add-on | +$99/month | +$99/month | ||
| Compliance documents | ||||
| Sub-processor list | ||||
| PCI AOC and responsibility matrix | ||||
| SOC 2 Type II report | ||||
| Data processing agreement | ||||
Data Vault
Tokenize any sensitive field, in single calls or batches, and pay per request.
Lite
$0/month
Monthly only
1,500
requests a month
Hard limit
- Free sandbox, no card needed
- Hard limits, never billed
- Up to 100 stored data tokens
- 1 client ID
Starter
$49/month
$550/yearSave $38 a year vs monthly billing
30,000
requests a month
then $0.013 per request
Everything in Lite, plus
- Overage instead of a hard limit
- Up to 10,000 stored data tokens, then moves up to Growth
- PCI AOC, SOC 2 Type II report and DPA
Growth
Popular$249/month
$2,700/yearSave $288 a year vs monthly billing
400,000
requests a month
then $0.0065 per request
Everything in Starter, plus
- Custom CSS on hosted forms
- Batches of up to 5,000
- 2 client IDs per subscription
- Up to 100,000 stored data tokens, then moves up to Business
EU data residency add-on, +$99/month
Business
$499/month
$5,500/yearSave $488 a year vs monthly billing
2,000,000
requests a month
then $0.0045 per request
Everything in Growth, plus
- Unlimited client IDs
- Raw usage export
- Up to 1,000,000 stored data tokens; we contact you about Enterprise beyond that
EU data residency add-on, +$99/month
Compare all Data Vault featuresHide the Data Vault comparison
| Feature | Lite | Starter | Growth | Business |
|---|---|---|---|---|
| Price | ||||
| Monthly | $0/month | $49/month | $249/month | $499/month |
| Annual | Not available | $550/year save $38 | $2,700/year save $288 | $5,500/year save $488 |
| Usage | ||||
| Requests included a month | 1,500 requests | 30,000 requests | 400,000 requests | 2,000,000 requests |
| Requests beyond that | Hard limit | $0.013 per request | $0.0065 per request | $0.0045 per request |
| Request rate | 10 per second | Unlimited | Unlimited | Unlimited |
| Stored data tokens | 100, hard limit | 10,000, then Growth | 100,000, then Business | 1,000,000 |
| Features | ||||
| Custom CSS on hosted forms | ||||
| Batch size | 500 | 500 | 5,000 | 5,000 |
| Client IDs per subscription | 1 | 1 | 2 | Unlimited |
| Raw usage export | ||||
| EU data residency add-on | +$99/month | +$99/month | ||
| Compliance documents | ||||
| Sub-processor list | ||||
| PCI AOC and responsibility matrix | ||||
| SOC 2 Type II report | ||||
| Data processing agreement | ||||
File Vault
Store sensitive files behind the Vault and pay for storage, not requests.
Lite
$0/month
Monthly only
5 GB
of storage
Hard limit
- Free sandbox, no card needed
- Hard limits, never billed
- 1 client ID
Starter
$49/month
$550/yearSave $38 a year vs monthly billing
150 GB
of storage
Everything in Lite, plus
- Moves up to Growth at 150 GB, prorated
- PCI AOC, SOC 2 Type II report and DPA
Growth
Popular$249/month
$2,700/yearSave $288 a year vs monthly billing
1,000 GB
of storage
Everything in Starter, plus
- 2 client IDs per subscription
- Moves up to Business at 1,000 GB, prorated
Business
$499/month
$5,500/yearSave $488 a year vs monthly billing
5,000 GB
of storage
Everything in Growth, plus
- Unlimited client IDs
- Raw usage export
- Storage beyond 5,000 GB at $0.15 per GB-month
Compare all File Vault featuresHide the File Vault comparison
| Feature | Lite | Starter | Growth | Business |
|---|---|---|---|---|
| Price | ||||
| Monthly | $0/month | $49/month | $249/month | $499/month |
| Annual | Not available | $550/year save $38 | $2,700/year save $288 | $5,500/year save $488 |
| Usage | ||||
| Storage included | 5 GB | 150 GB | 1,000 GB | 5,000 GB |
| Storage beyond that | Hard limit | Moves up to Growth | Moves up to Business | $0.15 per GB-month |
| Request rate | 10 per second | Unlimited | Unlimited | Unlimited |
| Features | ||||
| Client IDs per subscription | 1 | 1 | 2 | Unlimited |
| Raw usage export | ||||
| Compliance documents | ||||
| Sub-processor list | ||||
| PCI AOC and responsibility matrix | ||||
| SOC 2 Type II report | ||||
| Data processing agreement | ||||
Beyond Business
Enterprise
Volume above Business, on an annual contract with custom terms and an SLA.
Business tops out at 1,000,000 stored tokens on Card Vault and Data Vault and 5,000 GB on File Vault. If your volume is above that, or you need commercial terms a card checkout cannot carry, Enterprise is the plan. It is quoted per product, like every other plan.
Contact us- 01
Volume above Business
Allowances, overage rates and storage sized to your traffic rather than a published slab.
- 02
Annual contract
A signed agreement with a fixed term in place of a monthly card subscription.
- 03
Custom terms and SLA
Contractual commitments on uptime and support response, plus the terms your procurement and security teams need.
What you keep from Business
Every Business feature, including:
- Unlimited client IDs
- Raw usage export
- Raw card data access on Card Vault
- PCI AOC and responsibility matrix
- SOC 2 Type II report
- Data processing agreement
- Sub-processor list
Tax is calculated at checkout from your billing address where it applies. Card Vault and Data Vault requests beyond the allowance are billed at the end of each month. Automatic upgrades at the stored-token or storage limits take effect at once, prorated. File Vault storage beyond the Business allowance is billed per GB-month, based on the average of daily stored-GB readings over the month, less the allowance, in whole GB.
Also priced by engagement
Customer Vault pricing
Secure intake deployment, priced by engagement. A turnkey Customer Vault tenant with branding, staff onboarding, and secure-link setup. No API integration is required.
Contact salesAgent Vault pricing
A fixed-scope eight-week operational engagement for card-on-file migration, built for aviation, cruise, clubs, dental, and home services. Priced by engagement.
Contact salesVault pricing FAQ
01Getting started
Is Lite really free?
Yes. Lite is a free sandbox for development and testing. There is no card to enter, limits are hard, and you are never billed. Card Vault Lite includes 1,000 requests a month and 100 stored card tokens, Data Vault Lite includes 1,500 requests a month and 100 stored data tokens, and File Vault Lite includes 5 GB of storage.
How do I subscribe?
Sign in to the developer portal, open Billing, pick a product and a plan, and pay at a secure checkout run by Stripe. Your client ID and client secret appear on the portal dashboard within a minute of subscribing.
Do I need a separate subscription for each Vault?
Yes. Card Vault, Data Vault and File Vault are each priced on their own, per subscription. Prices are in US dollars and exclude tax.
How can I pay?
By card, by card wallet such as Apple Pay or Google Pay, with Link, or in some countries with a local payment method offered at checkout. Payment details are entered on the checkout page only and never reach Enigma Vault.
Who is the seller on my invoice?
The subscription is sold through Link, Stripe’s checkout service, which is the seller of record. The invoice comes from Link, and Link calculates and collects any tax from your billing address where it applies.
02Usage and overage
What counts as a request?
Every authenticated call to the product’s API counts toward the allowance, whichever endpoint it hits. Allowances are per subscription, so if several client IDs belong to one subscription their requests are pooled. Allowances reset at the start of each billing period and unused requests do not carry over.
What happens when I go over my allowance?
On Lite, the API stops at the limit and returns a 429 allowance_exhausted response until the period resets. On Starter, Growth and Business, Card Vault and Data Vault requests beyond the allowance are billed at the plan’s per-request rate on the invoice issued at the end of the period. Usage is metered hourly, so the last hour of a period can appear on the following invoice.
What happens when I hit the stored-token or storage limit?
On Lite the limit is hard: Card Vault and Data Vault stop at 100 stored tokens and File Vault at 5 GB. On paid plans, reaching the limit moves you up to the next plan automatically, at once and prorated. Starter moves to Growth at 10,000 stored tokens or 150 GB, Growth moves to Business at 100,000 stored tokens or 1,000 GB. Business holds up to 1,000,000 stored tokens, and we contact you about Enterprise beyond that. File Vault storage beyond 5,000 GB on Business is billed at $0.15 per GB-month.
How is File Vault storage overage calculated?
Per GB-month: the average of the daily stored-GB readings over the month, less the allowance, in whole GB.
Will I be warned before Lite runs out?
Yes. When a Lite subscription reaches 80% of its allowance, and again at 100%, the portal and an email suggest a paid plan for production traffic.
03Annual billing
How does annual billing work?
Starter, Growth and Business can be paid yearly in the developer portal: $550 a year for Starter, $2,700 for Growth and $5,500 for Business, per product. The year is charged at checkout and renews every year until you cancel. Lite is monthly only.
Do allowances change on an annual plan?
No. Allowances stay monthly and overage is still invoiced monthly at the plan’s rate, so an annual subscription receives one overage invoice a month, usually $0, in addition to the yearly invoice.
04Changing plans
Can I change plans?
Yes, under Change plan in the developer portal. On a monthly subscription the change takes effect at the next renewal with no proration; the current period stays on the current plan. Choosing your current plan again before renewal cancels a pending change.
How do plan changes work on an annual subscription?
A higher plan takes effect within the hour with a prorated charge for the rest of the annual term, and you receive an email stating the amount. A lower plan, or a switch to monthly billing, takes effect at the annual renewal. A switch from monthly to annual takes effect at the next monthly renewal, when the first year is charged.
05Cancellation and payments
How do I cancel?
From Manage billing in the developer portal. Cancellation takes effect at the end of the current period, or at the end of the paid year on an annual plan. You keep access until then, the client ID is deactivated when the period ends, and overage used in the final month is billed on the final invoice.
Are annual fees refundable?
Annual fees already paid are not refunded, except where the law requires it. Full terms are in the Terms of Service.
What happens if a payment fails?
You receive an email from Enigma Vault and from the payment processor, and the payment is retried over the following three weeks. Service continues during the retries. If every retry fails, the subscription is cancelled and the client ID deactivated. Paying the open invoice, or adding a working card in Manage billing, settles it.
Where do I find invoices and receipts?
They are emailed to the portal account's address and listed under Manage billing. For anything about an invoice, write to support@enigmavault.io.
06Features and compliance
Which features need a higher plan?
Custom CSS on hosted forms and Data Vault batches over 500 plaintexts need Growth or Business. Twilio Pay capture on Card Vault needs Growth or Business. Raw card data access and the raw usage export need Business. The API tells you: a refused request returns a JSON body naming the limit, your plan, the plan that removes it and a link to the Billing page.
Which compliance documents are included?
The sub-processor list is included on every plan. The PCI AOC and responsibility matrix, the SOC 2 Type II report and the data processing agreement are included on Starter, Growth and Business.
How many client IDs do I get?
One on Lite and Starter, two on Growth, and unlimited on Business. Requests from all client IDs on one subscription are pooled against the same allowance.
07AWS Marketplace
Can I buy through AWS Marketplace instead?
Yes. Subscriptions bought through AWS Marketplace keep their own plans and features, which differ from the developer portal plans shown on this page. Custom pricing on Card Vault, Data Vault and File Vault is available through AWS Marketplace until February 15, 2027.
How do I change or cancel an AWS Marketplace subscription?
Plan changes and cancellation for subscriptions bought through AWS Marketplace are made in the AWS console, not the developer portal.
Trust the input
NoPII pricing.
Protection for AI traffic should not need a procurement cycle to try. The free tier is real, and it does not expire.
Lite
$0/month
Monthly only
For developers getting started with PII protection.
1M
protected tokens a month
Hard cap
- All LLM providers supported
- PII detection and tokenization
- Full audit trail
- 1-day token retention
- 1 workspace, 1 user
- No credit card required
- 7-day log history
- 25 custom terms
- 60 requests/min per key
Starter
$49/month + tax
$550/year + taxSave $38 a year vs monthly billing
For developers shipping PII-safe AI to production.
50M
protected tokens a month
then $1.00 per million tokens
Everything in Lite, plus
- 30-day token retention
- 1 workspace, 1 user
- 30-day log history
- Browser SDK client API
- 100 custom terms
- 120 requests/min per key
Growth
Most popular$249/month + tax
$2,700/year + taxSave $288 a year vs monthly billing
For teams running production AI workloads.
500M
protected tokens a month
then $0.80 per million tokens
Everything in Starter, plus
- Token retention up to permanent
- Multiple workspaces
- 5 users with admin and member roles
- 90-day log history
- CSV log export
- Langfuse integration
- 250 custom terms
- 300 requests/min per key
Business
$499/month + tax
$5,500/year + taxSave $488 a year vs monthly billing
For organizations scaling AI across teams.
2B
protected tokens a month
then $0.60 per million tokens
Everything in Growth, plus
- Unlimited users
- Single sign-on (SSO)
- 365-day log history
- Reveal grants, device enrollment and staff access log
- 500 custom terms
- 500 requests/min per key
- Custom commit and token band
- Overage negotiated or waived
- Custom token retention
- Multiple workspaces, unlimited users, SSO
- NoPII Cloud, or the self-hosted edition under an annual license with no token meter
- Dedicated account manager
- SLA guarantees
- Gateway header requirements
- Custom rate limits
NoPII pricing FAQ
What counts as a protected token?
All input and output processed through the proxy: user prompts, model responses, and full API content. If it flows through NoPII, it is protected and it is counted.
Is the free tier a trial?
No. Lite gives you one million protected tokens a month free indefinitely, with every LLM provider, PII detection and tokenization, and the full audit trail included. It exists so you can prove the architecture on your own traffic before anyone signs anything.
What happens when I exceed my plan?
On Lite, one million protected tokens a month is a hard cap, and you will be prompted to upgrade; upgrading requires no re-integration. On Starter, Growth and Business, tokens beyond the allowance are metered at $1.00, $0.80 and $0.60 per additional million, with no hard stop. On Enterprise, overage is negotiated or waived.
Are all providers available on every plan?
Yes. All 9+ supported model providers are available on every plan, including Lite. Provider access is never a paywall.
Do you offer a BAA?
Yes, for healthcare workloads on NoPII Enterprise and on the Vault, with the audit trail HIPAA programs expect.
Trust the output
Triplets pricing.
Triplets is not priced from a rate card, because the two things that drive cost are yours: the size and shape of your evidence corpus, and the engagement model you need. The 48-hour Trust Baseline, a certified evidence corpus for a full therapeutic area, and embedded certification under your brand are scoped differently, so the honest answer starts with a conversation.
How it works. Tell us about your corpus and the decisions you cannot afford to get wrong. We come back with a scoped proposal, typically within two business days. The Baseline requires no integration work on your side, and the certificate is yours either way.
Talk to us about Triplets pricing
We respond within two business days. Prefer email? hello@enigmavault.io.
Triplets pricing FAQ
Why is there no price list?
Because scope drives the number. A Baseline on a focused corpus and continuous certification across a full therapeutic area are different engagements, and quoting one number for both would mislead in one direction or the other. A scoped proposal is faster than it sounds: two business days from your form to our number.
What determines the cost?
Corpus size and entity volume, the engagement model, and whether certification is one-time or continuous. Continuous certification is an annual subscription because the certificate has to be kept green as evidence changes.
Is there a way to evaluate before committing?
Yes, and it is the recommended path. The Trust Baseline is a fixed-scope, 48-hour engagement on a representative slice of your corpus, with no integration work on your side. Nobody fails a Baseline; its output is a map of your evidence boundary, and the report is yours either way.
Is any of the architecture tier-gated?
No. The full architecture, including the tri-state partition, provenance, and reproducible certificates, is present in every engagement. Scope changes the corpus covered, never the machinery.
How does the cost compare to what we spend today?
One manual systematic review costs roughly $141,000 in labor, and large research organizations run dozens to over a hundred per year. A certified corpus is scoped to cost less than one manual review while de-risking all of them, and we will show that math in your proposal.
Not sure which product you are pricing?
Start with the exposure that worries you most. AI answers you cannot verify: Triplets. Sensitive data in AI prompts: NoPII. Sensitive data at rest: the Vault. Or request a demo and we will map all three to your stack in one conversation.