Start free. Pay only to seal.

One change to your AI — a prompt edit, a model swap, a policy change, a granted tool, or a captured governance event — that CooL serialises deterministically, hashes, signs and appends to the transparency log. One provable record, one unit on the meter.

Because the whole promise is "don't trust us — verify it yourself." Charging for that would put a toll booth in front of the one thing that makes the product credible. Anyone — you, your auditor, a regulator, a customer's security team — verifies any record at no cost, offline, with no account. It is also our distribution: a verifier in every auditor's hands is how this becomes a standard.

Sealing that runs inside Intel TDX-class confidential hardware, so the attestation and enclave verification domains pass as real instead of sim. It costs more because it consumes real confidential-compute capacity, which we pass through with margin rather than absorbing into the base rate. It is priced here so the model is complete, and it bills only once that hardware tier ships — which is also when those two domains flip to real across the whole product.

No. You are billed only for changes that successfully seal into the log. A failed seal produces no record, so there is nothing to charge for.

Pro and Team continue on usage-based overage. Free caps: sealing pauses until the next cycle or an upgrade, but verification keeps working — you never lose access to evidence you already have. Locking someone out of their own record to force an upgrade would be the wrong business.

Yes, on Enterprise — single-tenant VPC, on-prem, or air-gapped, with volume pricing. Since verification needs no network, an air-gapped deployment verifies exactly as well as a connected one.

Not yet, and we would rather say so than take an order we can't fulfil. Hosted billing isn't wired, so paid tiers currently route to a conversation and a launch list. The Developer tier and the open verifier are live now — npm i -g cool-nwc.