Procurement-Safe
Pricing
Start with one lane. Make it verifiable. Then scale.
Every Stamp ships two artefacts: Status Link (authoritative now) + IDA Evidence Pack (decision-time snapshot).
VALID
→ proceed
NEEDS REFRESH
→ block until re-verified
WITHDRAWN
→ stop relying
NOT VERIFIED
→ fail-closed
Breaking
EUEU AI Act enforcement begins — high-risk AI systems now require conformity assessments (Feb 2025)│
UKUK publishes AI Safety Institute guidance on frontier model evaluations│
USANIST AI 600-1 released — GenAI risk profiles now standardised│
APACSingapore MAS issues advisory on AI-driven financial decision accountability│
AFRICASouth Africa POPIA enforcement targets automated decision-making systems│
MIDDLE EASTUAE ADGM publishes responsible AI framework for financial services│EUEU AI Act enforcement begins — high-risk AI systems now require conformity assessments (Feb 2025)│UKUK publishes AI Safety Institute guidance on frontier model evaluations│USANIST AI 600-1 released — GenAI risk profiles now standardised│APACSingapore MAS issues advisory on AI-driven financial decision accountability│AFRICASouth Africa POPIA enforcement targets automated decision-making systems│MIDDLE EASTUAE ADGM publishes responsible AI framework for financial services│What ships (every Stamp)
Status Link (authoritative now): scope, expiry, signer, fail-closed semantics
IDA Evidence Pack (decision-time snapshot): time-stamped, forwardable, append-only pointer
Minimal disclosure by default (prompts/logs/PII excluded; programme-gated access when required)
Refresh and withdrawal semantics (no silent edits; WITHDRAWN returned wherever checked)
Commercial terms (fast-path)
Clear terms for procurement. No surprises.
Purchase terms
- PO + invoice supported (Net 30 terms)
- USD pricing (taxes extra where applicable)
- Sprint: one-time professional services
- Coverage: monthly subscription
- Verify API: contract-based (annual)
Stamp definition + billing
- 1 Stamp = 1 issued Status Link + Evidence Pack for 1 high-impact action event
- Re-verification lookups: unlimited (no stamp consumption)
- Overage: billed monthly in arrears
- Term: annual or month-to-month (see MSA)
- Cancellation: per MSA terms
The simplest path
Three phases. One verifiable trust layer.
PDFs are great for filing. Status Links keep them current.
Core Packages
View Clause PackRecommended
Stamp Sprint
$35,000 · 30 days
One decision class. 100 stamps included. A working gate your counterparty can verify.
- Lane definition (one action class)
- Stamp issuance workflow
- Status Link verify route
- IDA Evidence Pack specimen
- Refresh + withdrawal triggers
Integration scope: Includes integration for one workflow gate (one system path). Additional systems/workflows scoped separately.
Coverage
$7,500/month
Ongoing validity. Refresh + withdrawal handled by rules.
- Trigger monitoring + re-verification workflow (NEEDS REFRESH → re-verify)
- Withdrawal execution (WITHDRAWN stop-rely returned wherever checked)
- Programme-scoped operational runbooks + change-control cadence
- Monthly verification report export (optional)
- Support/SLA tier linkage (see Operational Targets)
Verify API
Contact for API pricing
Scale verification across partners and audits. Contract-based (annual).
- Status lookups (Status Link)
- Webhooks for refresh/withdraw events
- Signed verify responses (programme-scoped)
- Rate limits + abuse protection
- Auditable access trail
- Programme-gated access
Agentic Rails Expansion Pack
NewAdds one additional agentic decision class (tool use, payments, physical action, or closure gate). Includes scope definition, trigger matrix, verifier checklist, and one redacted specimen.
Request scoped quote
Request quoteMost teams start with one lane. The standard expands once counterparties rely on the Status Link.
Optional add-ons (request details)
Add later. Programme-scoped. No promises of outcomes.
Guardian Desk
Add-on$350/hour (1-hour minimum billing increment)
Scoped human review for exceptions and disputes.
Availability: Business hours (Mon–Fri, 9am–6pm UTC). 24/7 coverage available as programme add-on.
Add Guardian DeskClaim Cards pack
Add-onContact for pricing
Procurement-safe claim language mapped to Stamp IDs + Status Links.
Deliverable: claim statements, scope qualifiers, example "what a verifier sees" for each lane.
Request detailsVault Signer (HSM/TPM-backed) + Edge Gate
Add-onHigher-assurance programme add-on
Hardware-backed signing and edge gating for higher-assurance programmes.
Scoped SOW. Optional regional deployment available.
Signed verify response (hardware-backed)
Stage 2Higher-assurance programme add-on
What "hardware-backed verification" looks like in a procurement-ready response.
Scoped SOW. Optional regional deployment available.
What changes price
Final scope depends on risk level, constraints, and verification requirements.
Lane risk levelVerification volumeSLA requirementsDispute intensityConstraints (no PII/no payload disclosure)Counterparty countCounterparty verification requirements
Additional Pricing
Transparent pricing for scale and expansion. Billed monthly in arrears.
$50
per stamp overage
Beyond the 100 stamps included in your Sprint. No surprise bundles.
$25,000
additional decision class
Add a new lane (action class) to your existing programme. Includes 100 stamps.
Volume discounts available for 500+ stamps/month. Contact [email protected].
Operational targets (contracted in MSA)
Infrastructure targets. SLA credits and terms defined in MSA.
Uptime target
99.9%
Measured monthly. SLA credits defined in MSA.
P1 response target
15 min
24/7 for P1. Business hours for P2/P3 (or 24/7 add-on).
Retention
Configurable
Default 7 years. Max per programme. Legal hold supported.
SOC 2
Type II
Targeting Q3 2026. Report shared under NDA upon completion.
Hosting
AWS
us-east-1 / us-west-2 (US). Regional options (EU/UK/AU/CA) for programme-scoped deployments.
Security controls
AES-256
Encryption at rest. TLS 1.3 in transit.
Additional security controls:
- • Annual third-party penetration test (summary available under NDA)
- • DPA available for data processing requirements
- • BAA available for HIPAA-covered programmes
- • Fail-closed verification semantics (unreachable = NOT VERIFIED)
Start with one lane.
Ship one gate in 30 days. Expand when counterparties rely on the Status Link.
Not a certification. Scope-limited verification. Acceptance depends on counterparty or programme requirements.
Identity portability integrations supported where programme-scoped; execution still requires Good Proof validity checks.