How we charge
Hourly to get you live. Flat monthly to keep you running.
There is no price list on this page. Pricing and service levels are scoped to the deployment, operating requirements, support window and recovery objectives, so the numbers depend on all four. What follows is the structure we quote against, and it is finalized in a written statement of work and service agreement.
Phase one
Setup
Time and materials, with an estimate and a not-to-exceed cap agreed up front.
- Environment scoping and sizing
- Deployment from a published, integrity-verified release
- Domain, TLS and first-run configuration
- TCB Fingerprint verification of the running Core Loop
- Policy and agent setup, as much or as little as you want from us
- Support for your security review and access provisioning
Phase two
Run
A predictable flat monthly fee, with SLA tiers for teams and enterprises.
- Updates on the release cadence, plus security hotfixes
- Monitoring and alerting
- Automated backups in your own storage
- Tested restores on an agreed schedule
- Severity-based incident response
- Recurring integrity attestation reports
- Resource tuning and log rotation
Always
Bring your own keys
Your model spend never touches our invoice.
- You pay your AI provider directly for tokens
- We never front, mark up or pool your model spend
- You pay your hosting provider for the machine at cost, with no markup from us
- You own and rotate the keys; we never see them
Why setup is hourly rather than fixed. Installing SAFi is quick. Getting your organization live involves your security review, access provisioning, environment setup and policy design, and those move at your pace, not ours. Billing the setup phase hourly against a capped estimate is the honest way to price work whose duration you control. Once you are live, the monthly fee is flat and predictable.
SLA outline: Team and Enterprise
A starting template, finalized with you
The following is the shape of the service agreement. The specific targets, windows and recovery objectives are agreed in writing during scoping.
Availability
A monthly uptime target, measured on the SAFi service, excluding your hosting provider's own outages and maintenance windows we agree in advance.
Response times
Severity-based. A service-down incident gets fast acknowledgement and continuous work to restore. Lower severities get next-business-day handling.
Backups and recovery
Automated backups configured in customer-controlled storage according to an agreed retention period. Restore procedures are tested on an agreed schedule, and the service agreement defines the applicable recovery objectives and responsibilities.
Updates and security
Feature releases on the SAFi cadence with your sign-off on the window. Security hotfixes applied promptly.
Integrity attestation
Regular reports that the running Core Loop matches a published SAFi release by its TCB Fingerprint. Your team can review the release and verify the running deployment independently.
Data and exit
Your data stays on your machine and is never used to train anything. On exit you keep the machine, the keys and the data, with a clean handover.
Scoping
What moves the number
Two engagements that look alike on paper rarely cost the same to operate. These are the factors we work through with you before quoting.
- Deployment path. Docker or bare-metal, and whose operating standards apply.
- Expected load. How many users and governed turns, and how the machine is sized for them.
- Support window. Business hours or extended coverage, and severity definitions.
- Recovery objectives. How much data loss and downtime the agreement has to guarantee against.
- Policy design. Whether you author your charter and policies yourself or want us to help.
- Tooling. Which MCP tool servers and external endpoints the agents need.
- Access controls. Plain admin access, or bastion access with full session logging.
- Handover ambition. Whether we are training your team to take over on a known date.
Outside the fee
What the monthly fee does not cover
- Model tokens. Billed to you by your AI provider, on your own keys.
- The machine. Paid to your hosting provider at cost, with no markup from us.
- Custom engineering. Operating stock SAFi is the service; bespoke features or plugins are a separate engagement.
- Your compliance decisions. SAFi produces the evidence; deciding your policies and reading your audit trail stays with you, though we can advise.
- End-user support for your staff. We keep the platform running; your help desk supports your people.
Get a quote scoped to your size and requirements
Tell us about your environment and expected usage, and we will come back with an estimate, a not-to-exceed cap for setup, and a monthly figure for operations.