We don't show data.
We show what actually happens to it.

Because 4 tiers cover 99% of buyers cleanly. Free for tasting the product. Pro Team ($29/user/mo) for individuals and small offices up to 25 users. Capsule Pro ($14K (Reveal) / $28K (Full)/yr per protected tenant) for companies that cross the 25-user mark — at which point per-tenant flat is cheaper than per-seat AND adds proof layer. Enterprise (Continuum + Sovereign) for organizations whose obligation is proof or liability, not just control.

Because corporates buy boundaries, not seats. A 250-broker insurance agency is one procurement decision, not 250. Charging $29/user there forces stack-overload pricing AND inflates the deal beyond CISO discretionary thresholds. Per-tenant lets us price by the boundary that needs protection, which is also our architectural unit. Individuals and small teams still buy by seat because that is how they think about cost.

The full envelope catalog (view + try), the in-browser viewer, the public chain, the burn switch, watermarks, and Bitcoin-anchored proof. Limits when the Free-tier gate is active: 10 wraps/month, 7-day TTL max, time-lock up to 24h, 1 user / 1 device. Enough to test the product end to end, send a real wrapped file, and see the proof on chain. Free quotas are designed to push you to Pro Team when you actually start using the product daily.

Because the difference between "1 lawyer who sends 50 contracts/month" and "5 lawyers who each send 10 contracts/month" is administrative, not architectural. Both want unlimited wraps, all 7 envelopes, M365 integration, AI agent identity, content signing, Hebrew/Israeli ID patterns. Charging them differently was a marketing surface complication; a single $29/user/mo tier is honest and lets you self-add seats as your team grows.

The math is mechanical: at 30 users × $32/u/mo × 12 ≈ $11,520/yr, you are already paying close to Capsule Pro · Reveal ($14K/yr) — but per-seat gives you control PER USER, not org-wide visibility into how data actually moves. Reveal at $14K replaces seat-counting with a reality gap report no per-user license can produce. Once you see the gap and want to act on it, Full ($28K/yr) flips on enforcement + court-defensible proof.

Capsule Pro is one billing tier with two operational modes. Reveal ($14K/yr) maps your data flow continuously and shows the reality gap between your written policy and what is actually happening — no enforcement. Full ($28K/yr) flips on enforceable control + court-defensible proof of every event. You start in Reveal because you do not yet know what you do not know. Once Reveal surfaces real gaps, you upgrade to Full with one click in your console — no sales call, no new contract, just a flag flip.

When obligation crosses from "control" into "evidence" or "liability". Continuum ($40K/yr) is for organizations under audit pressure — SOC 2, Big-4, regulator, internal legal — where you need court-defensible evidence bundles ready when something happens. Sovereign ($180K+/yr) is for environments where outsourcing custody itself is not an option — government, regulated banking, eIDAS QEL, on-prem chain of custody that holds up in front of a judge. Capsule Pro Full gives you control. Continuum proves what happened. Sovereign proves it in your perimeter, under your law.

Yes. Every receipt is signed with an Ed25519 key whose public counterpart is published at /api/chain/pubkey. A regulator, an auditor, or any recipient can verify any chain with a five-line script in any language. We do not hold the keys to your trust.

No. The wrap key never leaves the boundary your contract permits. Your environment for self-hosted, our HSM for hosted Continuum, an env-pinned key for Capsule. We control the wrapper. We never see what is inside.