Pricing
Evidence you can defend. Priced for the stakes.
The independent, out-of-band forensic witness for AI and automated decisions – zero-knowledge infrastructure outside your organisation's systems. You own the evidence and the key; your auditors verify offline with no account and no trust in the platform. Pricing is an annual licence plus metered per-decision usage, scoped per engagement – contact sales for a quote.
Enterprise
We operate the vault. You own the evidence.
Custom – contact sales
The independent, out-of-band forensic witness for AI and automated decisions – zero-knowledge infrastructure that sits outside your organisation's systems. Hosted, backed-up, monitored and supported by Decision Keep. You own the evidence and the key; your auditors verify offline on your key with no account and no trust in the platform. Scoped per engagement around volume, recording model, region and required compliance controls across AU, US, UK and European markets.
Recording models
- ✓ Operator-signs – we sign on your behalf, outside your systems
- ✓ Custodian – we host, you seal payloads to your key (zero-knowledge: we never see plaintext)
- ✓ Client-signs – you sign in your own environment (zero-knowledge: private key never leaves your environment)
Included
- ✓ Signed with your own key + offline verification (no account, no trust in the platform)
- ✓ Immutable, tamper-evident record chain (append-only – never edited or deleted)
- ✓ Verifiable erasure (record anchor preserved)
- ✓ Backups, monitoring and operator-backed support
Also available
- ✓ DPA and compliance export mapped to APP 1.7–1.9
- ✓ EU AI Act and GDPR compliance tooling
- ✓ Advanced key management and HSM-backed signing
- ✓ Independent eIDAS-qualified trusted time
- ✓ Dedicated region and named account team
Feature comparison
Base package vs add-ons
The Enterprise base package includes the core platform. Additional compliance workstreams are scoped per engagement.
| Feature | Base Enterprise | Add-on |
|---|---|---|
| Operator-signs recording | Included | — |
| Custodian recording (zero-knowledge) | Included | — |
| Client-signs recording (true witness) | Included | — |
| Immutable tamper-evident chain | Included | — |
| Offline verification & public verifier | Included | — |
| Operator-backed support & backups | Included | — |
| SOC 2 Type II audit | — | Scoped workstream |
| HSM-backed key management | — | Scoped workstream |
| eIDAS-qualified trusted time | — | Scoped workstream |
| Dedicated region & named account team | — | Scoped workstream |
Not sure where to start?
Book a demo and we'll map Decision Keep to your automated-decision obligations under frameworks such as the EU AI Act and GDPR, and show the evidence trail end to end.
Book a demoHow your keys are held
Choose who holds the key
Decision Keep is operated by us and verified offline against your published key. The recording model is selectable per workspace – pick the custody posture your risk team requires.
Operator-signs (default)
We hold your org key and sign on your behalf; the ledger is hosted by us. Simplest onboarding – like a flight black box sealed by the manufacturer. We cannot forge or alter your receipts.
- ✓ Simplest onboarding
- ✓ Hosted by Decision Keep
- ✓ We hold the signing key
Custodian (recommended)
We host the ledger, but your payload is sealed to your published key – we never see it in plaintext and never hold the key to read it. You get our assurance without our custody.
- ✓ Zero-knowledge posture
- ✓ We never see plaintext
- ✓ Your key, your control
Client-signs (true witness)
You sign the content hash in your own environment; the raw payload never reaches us. Maximum independence for the most regulated buyers.
- ✓ Maximum independence
- ✓ Private key never leaves your environment
- ✓ Raw payload never reaches us
| Capability | Operator-signs | Custodian | Client-signs |
|---|---|---|---|
| Signing key held by | Decision Keep | You (published) | You (never shared) |
| Plaintext visibility | Visible to Decision Keep | Never visible | Never visible |
| Ledger hosting | Decision Keep | Decision Keep | Your choice |
| Best for | Fastest onboarding | Zero-knowledge requirement | Maximum sovereignty |
| Offline verification | Yes | Yes | Yes |
FAQ
Pricing questions
Is there a free tier?+
No. Decision Keep is a paid product. Pricing is scoped per organisation based on volume, recording model, and compliance requirements. Contact us to discuss the right plan.
How is Decision Keep priced?+
There is a single Enterprise package, scoped per engagement and quoted by our team. Pricing depends on volume, recording model, region, and required compliance controls. We don't publish a price because every engagement is different – contact sales and we'll tailor a quote to your needs.
Who operates the system?+
Decision Keep does. We run the vault, back it up, monitor it and stand behind the deployment. You hold the keys and own the evidence; your auditors verify offline on your own key, with no trust in us required.
What about data residency?+
Decision Keep operates the vault in your chosen region. Your ledger is always exportable and verifiable offline on your own key, with no lock-in. We never hold the plaintext payload when the custodian or client-signs recording model is selected.
Do you offer compliance services like SOC 2 or HSM-backed signing?+
Yes, as scoped workstreams. Independent audits, qualified (eIDAS) trusted time, and advanced key management can be included in an enterprise engagement and priced with you. Contact sales to map the controls your regulator requires.
Do you discount?+
No. A single defensible decision trail can be the difference between a clean audit and significant regulatory penalties. Pricing reflects that value and is scoped per engagement.
What is included in the base Enterprise package?+
The base package includes the full Decision Keep platform: operator-signs recording model, immutable tamper-evident record chain, offline verification with your published key, backups, monitoring, and operator-backed support. Additional compliance workstreams (SOC 2, HSM-backed signing, eIDAS trusted time) are scoped per engagement.
Can I switch recording models later?+
Yes. The recording model is selectable per workspace, so you can adopt a more sovereign posture (e.g., move from operator-signs to client-signs) as your risk requirements evolve. Talk to our team about migration paths.
What happens to my data if I cancel?+
Your ledger is always exportable and verifiable offline on your own key. There is no lock-in. You can export the full record at any time, and verifiable erasure can be performed while preserving the integrity of the record chain.
Is there a minimum commitment?+
Engagements are scoped per organisation. Contact sales to discuss a plan that matches your volume and compliance requirements. We don't publish minimums because every deployment is different.