Start free. Scale when ready.
Every engagement begins with OBSERVE mode at no cost. Upgrade to a pilot when you're ready to compare, and to production when you're ready to enforce.
Trial
Evaluate at your pace
Free
30 days, no commitment
- OBSERVE mode (log all decisions)
- SHADOW mode (compare with PDP)
- Full API access (6 endpoints)
- OpenAPI 3.1 specification
- Docker Compose quickstart
- Documentation & email support
Pilot
Guided deployment
Custom
30–45 days, negotiable
- Everything in Trial
- Pilot license (OBSERVE + SHADOW)
- All 6 operator CLI tools
- Deployment support (Docker or K8s)
- Mismatch analysis & tuning
- Evidence Pack export with SHA-256 manifest
- Dedicated engineering support
Production
Full enforcement
Custom
Annual, negotiable
- Everything in Pilot
- ENFORCE mode (active blocking)
- Production license (all modes)
- Helm charts & K8s deployment guide
- Build watermarking & customer tag binding
- SLA & priority support
- Upgrade runbooks & SRE handoff
All pricing is negotiable. We're in early-adopter mode. Pilot engagements are priced to make evaluation easy — typically a fraction of what a manual compliance evidence process costs. Contact us to discuss your specific needs.
Looking for sector-specific packaging? Each edition (Public, Enterprise, Sovereign) is tailored to your governance requirements. See Editions →
License-gated features
Gateway modes are controlled by an offline Ed25519 license token. No license server, no phone-home.
| Plan | OBSERVE | SHADOW | ENFORCE |
|---|---|---|---|
| No license | ✓ | * | ✗ |
| Trial | ✓ | ✓ | ✗ |
| Pilot | ✓ | ✓ | ✗ |
| Production | ✓ | ✓ | ✓ |
* Shadow available without license only if ALLOW_UNLICENSED_SHADOW=true
What's included in every plan
Core Platform
- Core API (three-state decision resolution)
- Gateway (mode-gated proxy)
- Postgres schema + migrations
- RLS tenant isolation
- Append-only audit ledger
Evidence & Compliance
- Evidence Pack export (JSONL + SHA-256)
- Ed25519 attestation (offline)
- Post-restore integrity verification
- OpenAPI 3.1 specification
- Docker Compose dev environment
Operator Tools
- hovo-admin (tenant + key management)
- hovo-export (audit JSONL export)
- hovo-migrate (schema management)
- hovo-maint (partitions + retention)
- hovo-verify (integrity checks)
Documentation
- Quickstart guide
- Pilot deployment checklist
- Security model & threat model
- K8s deployment guide + Helm charts
- Backup, restore, upgrade runbooks
Automatic mode downgrade
If your configured mode exceeds your license, the gateway automatically falls back to the highest permitted mode. No outage, no manual intervention.
| Configured | License | Effective Mode |
|---|---|---|
| observe | (any) | observe |
| shadow | (none) | observe |
| shadow | trial | shadow |
| enforce | (none) | observe |
| enforce | pilot | shadow |
| enforce | prod | enforce |
Let's scope your pilot
Every engagement starts with a conversation. Tell us about your authorization landscape and we'll design a pilot that proves value within your compliance budget.
Contact Us