Pricing

Honest pricing, stated up front.

One product in a fully isolated AWS account: same features, same FIPS 140-3 Level 3 modules, same isolation, for every account. You pay for exactly what you run: no tiers, no rounding up to the next bracket, no setup or account fees.

Build your price

Keys

Each key bundles 100K crypto ops/mo.

Extra 100K-ops blocks

Beyond what your keys bundle. Sold per 100K block, no separate overage SKU.

Base (1 key, 100K ops): $49
+ 2 extra keys × $12: $24
+ 0 ops blocks × $5: $0

$73/mo

or $803/yr billed annually (1 month free)

Start now

No setup fees. Cancel anytime. Annual terms run to the end of what you paid for.

Optional add-ons, when you need them

Enabled from your console after signup, never charged before. Mid-cycle additions are prorated: you pay for the remainder of the current period at the moment you add them, then they join your regular bill.

Additional key (bundles its own 100K ops/mo): $12/mo
Extra operations, per 100K block: $5/mo
Served region (live stack in a second region): $75/region/mo
Key placed in a region (own 100K ops there): $12/key/mo
Failover protection / DR (DNS health-check): $49/protected region/mo

Relocation (moving a key to a new region) is just the served-region fee; the key exists in one place, so no placement fee. Placed keys are active everywhere they live, not cold standbys.

Growing past 50 keys? Volume Pricing is a direct quote keyed to usage; accounts that grew with us are quoted more favorably than net-new volume entrants.

No lock-in. Ever.

Every account carries the Keyout Right: take the AWS account, with your keys and audit logs, out of our Organization and own it outright. It is yours alone to invoke, we never initiate it. The fee is a published formula, not a negotiation:

buyout = max($1,000, 24 × trailing-12-month average monthly bill)

Avg $49/mo (1 key, steady): $1,176
Avg $157/mo (10 keys): $3,768
Avg $637/mo (50 keys): $15,288

Based on historical billing, not your key count on the day you leave, so it can’t be gamed by deleting keys right before exit. Your keys are never hostage to your vendor, including us.

The fine print, in normal type

Evaluating first? The shared demo environment lets you explore the console and run real operations before you buy; demo accounts delete automatically after 14 days. Paid subscriptions start with a single key, billed from day one. Add more keys from your console at any time.
When you grow: keys and ops scale continuously : your bill is computed directly from what you run, never rounded up to a bracket. At a crypto-ops limit, operations return 429 until you add a prepaid block or your cycle resets, but listing, describing, and managing your keys is never blocked.
Leaving: two exits, your choice. Take your keys with you via the Keyout (account hand-off, formula above), or one-click cancel: a 30-day window to export your data, then keys and data are crypto-shredded, the account is closed, and we issue a destruction certificate.
Partitions: named compartments for your keys inside your account, each backed by its own access group. A user can only see and use keys in partitions they are a member of, so teams and workloads (say, payments-prod vs ci-signing) stay separated with their own audit trail. Every account starts with a default partition.
Account ownership: the AWS account is SanctiKey-owned and operated inside our Organization; you are its only tenant. Ownership transfers to you whenever you exercise the Keyout above.
Billing: handled entirely by Stripe. Your card details never reach a SanctiKey server; see payment security.