Pricing · self-service from day one
Self-service from day one.
Regulated EU included.
Free Dev tier forever. Team scales per regulated product at €79/spec. Production at €499/mo flat. Scale at €1,199/mo adds higher allowance + SSO (federation + HSM hooks roadmap on Scale). Enterprise at €2,499/mo unlocks the whole regulated-EU surface. No seat-license tricks, no "contact sales" walls, no surprise overage. Stripe checkout — cancel anytime.
95% self-service from day one. Even the regulated-EU bank. Even the multi-BU enterprise. Stripe checkout, monthly billing, cancel anytime. The substrate's own outputs — signed L12 chain, runnable audit bundle, framework-mapped handoff packet — already do what the old €195k Annex III service was charging for. You don't need to hire us to use what the substrate produces.
The 5% that's sales-led: frontier-model OEM (revenue-share / royalty) and AI-vendor channel (reseller commercials). Both are partnership structures that genuinely don't fit a fixed price.
For-Good and Open are structurally free. We don't price-discriminate based on perceived ability to pay; we cap by capacity and verify mission for the humanitarian tier. Promethean for Good →
Self-service · 95% of customers · Stripe checkout
Free Dev forever. €79 to €2,499 paid. Same Stripe checkout for all five.
Dev is free forever. Team scales per regulated product you're containing. Production is the commitment SKU at €499/mo flat. Enterprise is €2,499/mo and unlocks everything the old €195k Annex III service used to deliver — audit-bundle generation per regulatory framework, HSM key hooks, on-premise option, federation full, SSO — all self-service (HSM, on-prem, federation = roadmap, see Enterprise card below).
Why mostly self-service? Because the substrate's own outputs already do what the white-glove service used to charge for. The SDK emits L12 receipts. The audit-bundle command produces regulator-ready packets. The 50 KB verify.mjs works offline. Devs prefer working docs to humans they have to schedule. The 5% that's sales-led is frontier-model OEM and AI-vendor channel — see below.
dev
Dev
Evaluate locally · build a real chain
- ✓1 active RuntimeAISpec
- ✓10,000 signed L12 entries / month
- ✓Apache-2.0 SDK · TS + Python
- ✓Audit bundle generation
- ✓verify.mjs works on your chain
- ✓Self-managed Ed25519 keys
- ✓Community support
- —No hosted OTS anchoring
- —No Promethean trust anchor
- —Single-tenant only
team
RecommendedTeam
Pay per regulated product · scale linearly
- ✓Unlimited specs at €79 each / month
- ✓100,000 entries per spec included
- ✓€4 / 10k entries overage · graduated
- ✓Daily OTS anchoring (Bitcoin)
- ✓Promethean Ed25519 trust anchor
- ✓Single-tenant production
- ✓Community + email support
- —No multi-tenant (R4)
- —No federation reads (R5)
- —No framework templates
production
Production
Stopped counting specs · multi-tenant
- ✓Up to 25 active specs · flat
- ✓1,000,000 entries / month allowance
- ✓Hourly OTS anchoring
- ✓Multi-tenant (R4 tenantId)
- ✓Webhooks · audit log export · CSV
- ✓Community + email support
- —Federation (R5) — roadmap
- —HSM custody hooks — roadmap
- —On-premise deployment — roadmap
- —No framework handoff templates
scale
Scale
Higher allowance · SSO · 7y retention
- ✓Up to 50 active specs · flat
- ✓5,000,000 entries / month allowance
- ✓30-minute OTS anchoring
- ✓SSO via OIDC
- ✓7-year audit log retention · priority email
- —Federation (R5) — roadmap
- —HSM custody hooks — roadmap
- —On-premise deployment — roadmap
- —No framework handoff templates
- —No Annex III packet generator
enterprise
Enterprise
Annex III conformity · self-service · regulated EU
- ✓Unlimited specs · 10M entries/month fair-use
- ✓15-min Bitcoin-anchored OTS · daily proof upgrade
- ✓Annex III handoff packet generator (Markdown + JSON)
- ✓Framework templates · 7 regulators
- ✓SSO · audit log retention · all CSV exports
- ✓Federation (R5) · roadmap
- ✓HSM custody hooks · on-prem deployment · roadmap
- —Add-on: €5k DPA-session prep + attendance
- —Strategic OEM · partnership-quote
Pricing logic, plainly
Self-service all the way up to a regulated bank. Team scales per spec; at 7 specs you cross into Production (€499 flat); when you need multi-tenant + framework templates + HSM hooks, Enterprise (€2,499) covers the whole regulated-EU surface — because the substrate's own outputs already produce the regulator-handoff packet. Year-1 TCO for a regulated bank ≈ €30k.
Full ladder · 95% self-service · 5% partnership
Anchored to real budget envelopes. Not buzzwords.
Six self-service tiers covering mission-tier through regulated-EU bank. Two partnership-only commercial structures for frontier-model OEM and AI-vendor channel — those are revenue-share + reseller deals that don't fit a fixed price.
Verified humanitarian, charity, and emergency-response organisations using AI in service of vulnerable populations.
Includes
- Full substrate license, all 12 commitment chains
- L12 chains under Promethean's trust anchor + OTS Bitcoin anchoring
- 40 hours / quarter of substrate-engineer support
- Reference deployment status (NDA-optional)
- Joint regulatory engagement (when humanitarian context warrants)
How we verify fit
Registered charity / 501(c)(3) / EU non-profit · AI use touching vulnerable populations · mission-fit interview
Pricing anchor
Comparable: Microsoft Tech for Social Impact pricing, AWS Imagine Grant — substrate is structurally cheaper to offer at this tier because most cost is one-time architecture.
Individual developers, open-source projects, academic researchers, security researchers, defence contractors needing air-gapped verification. Anyone who wants to read or run the verifier without our permission.
Includes
- verify.mjs — the 50 KB plain-JS verifier (Apache 2.0)
- L12 canonical-form specification + ADRs (all 50)
- runtime-ai-py — the Python port + 8 byte-identity differential tests
- RuntimeAISpec + runConstrainedAI SDK basics (Apache 2.0)
- Test suites: golden chains, property fuzz, differential, cross-language, mutation
- L12 schema + signed-attestation primitives (forkable, extendable, auditable)
- L12 chains under self-managed Ed25519 keys (not Promethean's trust anchor)
How we verify fit
No verification. The open components are permanently Apache 2.0. Forks are allowed; commercial use is allowed; you can run verify.mjs against any chain without us knowing.
Pricing anchor
What is NOT in this tier: the meta-generator factory, multi-tenant management, federation implementation, HSM integration, continuous-watch infrastructure, hosted Author service, and the 'Promethean Verified' badge. See /licensing for the exact open-vs-commercial split.
Pure self-service · usage-billed
Team
€79 / spec / mo
+ €4 / 10k entries overage · graduated lower at higher volume
Start Team · €79→Startups and small teams shipping one or more LLM features into production. Pure self-service: no NDA, no sales call, no quarterly architecture review. Devs prefer docs that work to humans who don't.
Includes
- Everything in Open, plus:
- Unlimited active RuntimeAISpecs at €79 each / month
- 100,000 entries per spec / month included
- Daily OTS anchoring under Promethean's Ed25519 trust anchor
- Single-tenant production deployment
- Community + email support · best-effort response
- L12 chain integrity alerts via webhook
How we verify fit
Company verification at signup · no manual review
Pricing anchor
Per-spec is unique to this category — regulators think per high-risk system, CFOs do top-down budgets the same way. Comparables: Langfuse Pro $199/mo flat at 100k units, Braintrust Pro $249/mo at 50k scores, Portkey Production $49/mo at 100k logs. Per-spec means a customer with 1 product budgets €79; 8 products budgets €632 — without forcing a tier upgrade or surprise volume bills.
Pure self-service · flat monthly
Production
€499 / mo
flat · cancel anytime · still no sales call
Start Production · €499→Teams who've stopped counting specs. Pure self-service like Team — no human-led architecture review, no contractual SLA, no quarterly check-in. Just the feature unlock: multi-tenant, federation reads, 1M entries, hourly OTS. Devs who want it can have it for the price of a few cups of espresso a day.
Includes
- Everything in Team, plus:
- Up to 25 active specs · no per-spec billing
- 1,000,000 L12 entries / month allowance
- Hourly OTS anchoring under Promethean trust anchor
- Multi-tenant (R4 tenantId) — host per-customer chains
- Webhooks · audit log export · CSV + JSONL
How we verify fit
Stripe self-checkout · monthly billing · cancel anytime in /workspace/<id>/billing
Pricing anchor
Pure self-service — no quarterly architecture review, no contractual SLA, no human-engagement retainer. Devs prefer docs that work to humans they have to schedule. If you need framework templates + SSO at Enterprise (€2,499/mo) — or you're waiting on Federation / HSM / on-prem (roadmap) — that's the upgrade path. Otherwise this is the production-feature ceiling at a self-service price.
Pure self-service · the regulated-EU tier
Enterprise
€2,499 / mo
flat · Stripe checkout · cancel anytime
Start Enterprise →→Regulated operators (banks, hospitals, govtech, insurers, multi-BU enterprises) running runtime-AI at scale. Everything the old €195k Annex III service used to deliver — but self-service, monthly, cancel anytime.
Includes
- Everything in Production, plus:
- Unlimited specs · 10M entries/month fair-use allowance
- 15-min Bitcoin-anchored OTS (Vercel cron-tick cadence; pending proof upgraded via daily anchor-upgrade cron)
- Annex III handoff packet generator — emits Markdown + JSON bundle (mapped to evidence kinds)
- Framework templates for 7 regulators: GDPR · AI Act · PSD3+PSR · DORA · NIS 2 · MDR · HIPAA
- SSO (SAML / OIDC) · audit log retention 7y · full CSV exports
- Federation (R5) — roadmap (validation primitives in place; cross-workspace commit protocol pending)
- HSM custody hooks (PKCS#11 / YubiHSM / CloudHSM / Luna) — roadmap
- On-premise deployment (Docker + Helm) — roadmap
How we verify fit
Stripe self-checkout · no NDA · no procurement cycle · cancel anytime
Pricing anchor
Year-1 TCO for a regulated bank ≈ €30k. Sits below the floor of every comparable: Vanta Enterprise €30k–€80k/yr, Holistic AI €40k–€400k/yr, OneTrust €120k–€500k+/yr — because the substrate's own outputs already do what their humans did. Optional add-on: €5k one-shot DPA-session prep + attendance for buyers who want a human on their first regulator call.
AI vendor channel
AI Verified
from €80,000 / yr per model
co-branded certification · reseller-channel option
Vendor interview→Mid-tier AI vendors (LLM orchestration, prompt management, AI observability, AI app platforms) who want their customers to present a regulator-verifiable audit log of model calls routed through their tooling.
Includes
- Substrate embedded in vendor's product (white-label or co-branded)
- 'Promethean Verified' certification per model + per integration
- API audit access endpoint for vendor's enterprise customers
- Co-branded reference deployments
- Joint regulator engagement when enterprise customer requires
- Reseller channel option: vendor bills customer, pays Promethean revenue share
How we verify fit
Vendor compliance interview · model identity registration · publication on the Promethean Verified registry
Pricing anchor
Comparable: SOC 2 audit (€20K–€100K + annual), HIPAA BAA infrastructure (€50K–€200K/yr): vendors already pay for compliance certifications — we add a regulator-grade runtime-AI dimension.
Frontier model OEM
Strategic
from €1,200,000 / yr
annual license OR per-call royalty · structurally exclusive-free
Strategic conversation→Frontier model providers (Anthropic, OpenAI, Mistral, Cohere, others) who want their API customers to be able to present a regulator-verifiable record without trusting the provider's own attestation chain. The substrate as neutral audit standard.
Includes
- Embedded substrate license in provider's API surface
- Per-call royalty option (basis-points per Promethean-anchored call)
- Co-developed canonical-form RFC participation
- Joint regulator engagement, joint published reference architecture
- Cross-provider neutrality guarantee (substrate is the same for every provider)
- Strategic-board observer seat (mutually optional)
How we verify fit
Frontier-model provider conversation · regulator-engagement willingness
Pricing anchor
Comparable: ASML's pricing power as the neutral lithography supplier — we don't have ASML's monopoly, but we have ASML's pattern (one neutral layer, every downstream player depends on it). Pricing reflects strategic value, not COGS.
Revenue logic · 3-year projection
Three years, written down. Falsifiable at every milestone.
Year 1 · prove the pattern
€640K ARR
- 80 Team customers avg 4 specs @ €316/mo = €303K
- 30 Production customers @ €499/mo = €180K
- 5 Enterprise customers @ €2,499/mo = €150K
- 0–1 AI Verified vendor partner conversations
Falsification clause
Falsified if: <20 paying customers by month 6 · churn >5%/mo
Year 2 · compound the references
€2.3M ARR
- 200 Team customers avg 5 specs @ €395/mo = €948K
- 100 Production customers @ €499/mo = €599K
- 20 Enterprise customers @ €2,499/mo = €600K
- 1–2 AI Verified vendor partners @ €80K = €120K
Falsification clause
Falsified if: net negative retention · Enterprise conversion <1% of Production users
Year 3 · category lock-in
€7.4M ARR
- 600 Team customers avg 6 specs @ €474/mo = €3.4M
- 300 Production customers @ €499/mo = €1.8M
- 60 Enterprise customers @ €2,499/mo = €1.8M
- 3 AI Verified partners @ €100K + 1 Strategic OEM = €400K
Falsification clause
Falsified if: zero regulator citations · Enterprise tier didn't displace Annex III consultancy spend
How to read these numbers
Self-service revenue compounds with monthly signups — no single deal saves the year, no concentration risk on one enterprise close. Each year has a falsification clause; the L9 self-evaluation chain (the substrate audits itself) holds us to the same epistemic discipline we ask of operators. Investors can verify against actual run-rate quarterly.
For full contract terms · SLA matrix · professional services rate card · 3-year TCO model, see the commercial datasheet (3 pages, publicly readable).
What we don't price for
Two things we won't sell. At any price.
Not priced for
No per-seat licensing
The substrate is platform infrastructure. Pricing by developer-headcount mis-aligns incentives — operators shouldn't pay more for hiring more engineers.
Not priced for
No per-call surge pricing
Tiers cap monthly call volume; exceed your cap, you move up a tier (transparent). We don't bill cents-per-call for a runaway loop you didn't notice.
Not priced for
No exclusivity premium
Frontier-model OEM pricing assumes cross-provider neutrality. A provider paying for exclusivity would undermine the standard we're building.
Not priced for
No regulator lock-in fees
Regulators always read the chain for free. No 'audit-access subscription'. The verifier is the producer's contract with the regulator — and it's 50 KB of plain JS.
Not priced for
No academic / OSS gatekeeping
Open tier is structurally free, no signup, no usage caps on the SDK side. The verifier and Python port are public. The architecture's leverage comes from being read, not from being monetised at the bottom.
Not priced for
No 'AI safety' theatre tier
We don't sell a 'AI safety certification' that isn't backed by a cryptographic chain. Either the substrate emits L12 receipts the regulator can verify, or we don't take the customer.
Pick your door
Free to start. Cancel anytime. No NDA for any tier.
Free · mission tier
Promethean for Good
Charities and emergency-response organisations. Full substrate, capped support hours, reference status.
Free · open tier
Run the verifier
No signup. Download a chain, run node verify.mjs. 30 seconds. No npm install.
€2,499/mo · Enterprise · self-service
Annex III ready
Regulated bank, hospital, govtech? Sign up. Author your spec. The handoff packet generator does the rest.
Partnership · custom-quoted
OEM · AI Vendor · Strategic
Frontier-model royalty, AI-vendor reseller, or co-developed canonical-form RFC. The 5% that's sales-led.