Same keys, same sealing, same EU storage on every plan. What changes is how many people share, and how much you can manage.
| PLAN | Personal | Team | Business | Enterprise |
|---|---|---|---|---|
| SEALING | ||||
| Sealed to hardware keys | ||||
| Reseals by itself after use | ||||
| Shared stores | ||||
| Resealing when someone leaves | ||||
| WHERE IT LIVES | ||||
| Storage | EU | EU | EU | EU, own region or on premises |
| Data processing agreement | Standard | Standard | Standard | Yours, negotiated |
| SIGN-IN AND PEOPLE | ||||
| Security key or passkey | ||||
| SAML and OIDC | ||||
| SCIM | ||||
| SHARING | ||||
| Cards, and fill-only sharing | Cards | |||
| Share with a link | ||||
| Send files, download once | [SIZE] MB | |||
| Emergency access | ||||
| Machine keys for CI | ||||
| ADMIN | ||||
| Groups and roles | ||||
| Policies | ||||
| Audit log | [DAYS] days | [DAYS] days, export | As agreed | |
| Support | Same day | Named engineer | ||
No. A vault opens the way you choose: a YubiKey, a password, your phone's fingerprint, or two of them together. A YubiKey is the strongest way in, and two are better: the second, kept somewhere safe, is how you get back in if the first is lost.
No, and that is the point. We never had what opens your vaults. Another way in, like your second key or the recovery sheet you printed at sign-up, gets you back. In a workspace, shared vaults come back to you the next time a colleague who has them open syncs.
In [REGION], in the EU, on every plan and from every country. Enterprise can have a region of its own, or an install on its premises.
On Enterprise, under a contract, where a regulator or a client requires it. We install it with you and keep operating it. Talk to us about what you need.
Yes, with the same account. The workspace's vaults appear beside yours. Your own vaults stay yours, and the workspace never sees them.
Prices are before VAT. Add a VAT ID to a workspace and EU invoices are reverse-charged.