Governance API pricing
Your app sends a proposed action to the Governance API and gets back a verdict (allow, gate or deny) and a signed receipt that anyone can check offline with one file. This page sets out how a plan is built and what is charged for. It carries no amounts.
Billed by My Digital Sovereignty Ltd via Airwallex (NZ); settlement is available in your local currency.
Who this page is for
Integrators: companies that build the Governance API into their own app, and that use MIO° Conduct Record for their clients. Conduct Record keeps a sealed register of what each client's AI agents are permitted to do.
If you run AI agents in your own organisation and do not build software for others, this page is not written for you; the enquiry form below still reaches us.
How access works
- Evaluation: a one-time token issued at the discretion of My Digital Sovereignty Ltd, tied to a single address. The API documentation and client SDK come with it. The enquiry form on this page is an enquiry only and creates no right to access.
- Production keys are issued once the published terms and a data-processing agreement are agreed.
- By invitation: the Governance API is available on invitation only, from John Stroh. There is no sign-up and no self-service plan.
The API is not yet generally available. Nothing on this page links to a live production system.
How a plan is built
There is one plan per integrator. It covers two things: your own use of the Governance API in your own app, and MIO° Conduct Record for one client. We set up further clients for you, one at a time, on request.
The plan
One plan per integrator. It covers your own use of the Governance API in your own app, plus MIO° Conduct Record for one client. The API runs on an account on our platform, which is a separate monthly line in the pricing sheet.
A client account
A separate account for one of your clients, so that client's records stay apart from every other client's and can be checked by that client. We set up client accounts for you one at a time, on request, each charged on its own.
What is charged for, and the unit
- The planeach month
- The platform account the API runs oneach month
- A further client accounteach month, for each further client account
- Sealed records beyond the plan's monthly quotaeach additional 1,000 sealed records
- A qualified time-stampeach stamp, on request
- A Sealed Statement from MIO° Conduct Recordonce
- The split-custody key ceremonyonce
Amounts are in the pricing sheet we send to each integrator we invite.
Your price at sign-up is held
The price you sign up at is held for your first 12 months. After that it can change at most once a year, by no more than 5 per cent, with 60 days' notice and the right to end your subscription before the change applies. A new list price applies to new subscribers only.
What every receipt carries
The status word beside each item says where it stands today.
- Signed by a key held on a separate host, outside the process that writes recordsBuilt
- Checkable offline with one file, using the public key in your DID document, with no account with usLive
- An outside RFC 3161 time-stamp, so the time does not rest on our clockLive
- A qualified EU time-stamp on any record you ask forAvailable on request
- A post-quantum second signature beside the first: turned on per account; no double-signed record has yet been checked offline from start to finishBuilt
- A daily anchor of our signed root on Midnight mainnet: optional, turned on per accountBuilt
- Your records exported in a portable form, before, during and after a subscriptionLive
- Held in New Zealand or the European UnionLive
- Your signing key split between custodians, so that no one party can sign alone: through the key ceremonyAvailable on request
- A weekly examination of sealed records: running for Email Decision Record receipts, and Planned for Governance API receiptsPlanned
Monthly quotas
Quotas are counted per calendar month (UTC), across all of an account's keys.
Evaluation
- Verdicts2,000 a month
- Gate resolutions100 a month
- Record writes500 a month
- Requests a minute, to ask for a verdict60
At a cap an evaluation call is refused and nothing is billed.
The plan
- Verdicts2,500 a month
- Gate resolutions250 a month
- Record writes1,000 a month
- Requests a minute, to ask for a verdict120
On the plan, sealed records beyond the monthly quota are charged by the thousand, as above.
Verdicts come from a deterministic stub today, on every plan, and each verdict receipt says so. The decision engine is Built and is not offered. What the API sells today is the record: the sealed receipt, its time-stamp and its offline check.
Your records, your jurisdiction
New Zealand · European Union
Your records are held in New Zealand or the European Union, never on a US-owned provider. The records are yours: you can export them before, during and after any subscription. Receipts are signed with a key made for your account, held on a separate host. MDSL operates that host, and you do not hold the key unless you take up the split-custody ceremony. Your content is never used to train any model. Billing runs through Airwallex (NZ), with no US payment rail.
Questions
Can I buy the API on its own?
Not as a bare API. It runs on an account on our platform, and your records are kept in that account. The platform account is a separate monthly line in the pricing sheet, and the plan sits on top of it.
Which currency am I billed in?
The pricing sheet states the currency of each amount. Billing runs through Airwallex (NZ), and settlement is available in your local currency.
What counts as a verdict?
Each proposed action you submit returns one verdict, allow, gate or deny, with a signed receipt, and counts as one verdict against the monthly quota. When a gate is resolved, by a person or by expiring to deny, that counts once as a gate resolution. Today every verdict comes from a deterministic stub.
Does my price change after I sign up?
The price you sign up at is held for your first 12 months. After that it can change at most once a year, by no more than 5 per cent, with 60 days' notice and the right to end your subscription before the change applies. A new list price applies to new subscribers only.
What does an anchor show?
It shows that a value was recorded under a date key. It does not show that records are true or complete, and it is an attestation by our service key. Anchoring is built to send only a hash to Midnight mainnet, once a day, where it is turned on; it does not run on mainnet yet, and the anchors in the published index so far are on Midnight's Preview network. The verdict on a receipt never depends on it. The offline checker reads the proof with the options --anchor-proof and --anchor-check.
Is the record court-defensible?
The record is signed and tamper-evident. We do not claim it is tamper-proof or court-proof: whether it meets a legal duty is a question for your lawyer. What you get is a record, made at the time, of how a decision was reached, which you can check yourself without us.
Make an enquiry
Tell us who you are and what you want to build. If you would like to be considered for an invitation, this is the way to ask. The form is an enquiry only and creates no right to access.
Thank you, we have your enquiry. It creates no right to access; access is by invitation.
Prefer email? governance-api@mysovereignty.digital