Priced by scope, never by volume.
Tiers are set by vaults, retention, key custody and support — not by how many incidents your systems had. Attribution receipts carry an allowance on the two smaller tiers; it is advisory, and crossing it never stops Déjà signing.
A bad quarter costing more than a quiet one is an incentive pointed the wrong way, so we didn't build one.
The guarantee that matters most: allowances are scope guides, not kill switches. Déjà never stops sealing and never stops signing because of billing. There is no circumstance in which your ledger has a gap in it because of a commercial dispute — an evidence product with a kill switch isn't an evidence product.
- Charter
$30K
per year · rate locked for life
- Founding cohort — direct product input and a seat in the DSR/1.0 working group
- White-glove onboarding with the team who built it
- Up to 15 admin seats · 1 vault
- 2 years receipt retention
- SSO / SAML included
- 42/mo attribution receipts, advisory — marketed as 500/year
- 30% discount on any future tier upgrade
closes when filled · annual commitment both ways
Apply for Charter - StandardRecommended
$10K
$10,000 a month, or $120,000 a year
- 200/mo attribution receipts, advisory — signing never stops
- Multi-framework mapping — SOC 2, NYDFS Part 500, ISO 27001 and HIPAA; DORA and SR 11-7 in your own view only, pending counsel review
- 30 admin seats · unlimited auditor invitations
- 1 vault · 5 years retention · SSO/SAML
- Priority support and an onboarding call
- 14-day trial, fully featured, no card
déjà maps evidence to frameworks · it does not certify compliance
Start the trial - Enterprise
$300K+
per year · custom contract
- Multi-vault deployment · your own AWS KMS signing key
- Unmetered attribution receipts
- Custom retention and multi-year evidence custody
- Unlimited admin seats · dedicated success contact
- Support response times: [Awaiting owner: support response times]
procurement-grade security review before signature
Book a call
What does reconstruction cost your firm?
We won't assert your return — it depends on your team, your frameworks and your audit calendar. Put your own numbers in. The defaults are deliberately conservative, and prep labour is the floor of the cost rather than the ceiling.
Your inputs
annual cost = (loaded ÷ 52) × weeks × cycles × people
ratio = annual cost ÷ $120,000 (Standard, annual)
Your annual reconstruction cost · prep labour only
$103,846
per year
0.9×
Your prep labour covers about 10 months of Standard, annual per year — before consultant fees, findings and remediation.
What is not in this number: external consultant fees, remediation of audit findings, engineer context-switching, and the cost of an evidence reconstruction that turns out to be wrong. Prep labour is the floor. Larger teams and more frameworks typically push the ratio past 2–3×.
If the number comes out below 1× for your firm, that is a real answer and we would rather you had it now. Déjà is worth buying when the record is worth having, not when a slider says so.
Everything, side by side.
| What varies by tier | Charter | Standard | Enterprise | Sovereign |
|---|---|---|---|---|
| Receipts sealed and signedthe ledger itself never varies | Always | Always | Always | Always |
| Attribution receipt allowanceR1 + R2 only · advisory, never blocking | 42/mo | 200/mo | Unmetered | Unmetered |
| Exception receiptsR1-N · R1-L · R2-F · R2-R — plus R0 and RG | Never counted | Never counted | Never counted | Never counted |
| Overage chargesthere are none, on any tier | None | None | None | None |
| Offline verificationopen CLI, no account required | Included | Included | Included | Included |
| Receipt retention | 2 years | 5 years | Custom | Custom |
| Compliance framework mapping | Every mapped framework | Every mapped framework | Every mapped framework | Every mapped framework |
| Admin seats | 15 | 30 | Unlimited | Unlimited |
| Auditor invitationsnever counted against seats | Unlimited | Unlimited | Unlimited | Unlimited |
| Vaults | 1 | 1 | Multi-vault | Multi-vault · [Awaiting owner: whether a dedicated deployment is offered, and what it means] |
| SSO / SAML | Included | Included | Included | Included |
| Contractual uptime and response commitments | — | — | In agreement | Custom |
| Data residency | US | US | US | US |
| DSR/1.0 governance seat | Working group | — | — | Direct |
The allowance row is the only metered thing on this page, and it is advisory: it counts R1 and R2, it never blocks a receipt, and it is never billed as overage. Seats, vaults and retention vary between tiers. The completeness of your ledger does not.
The hard questions, answered plainly.
- Is there a usage limit?
- There is an allowance, and it is not a limit in the way that word is usually used. Standard includes 200/mo attribution receipts and Charter 42/mo; Enterprise and Sovereign are unmetered. Only R1 and R2 count toward it. Crossing it does not throttle you, does not block a receipt and is never billed as overage — it sends a warning email and opens a scope conversation. How many incidents you had last quarter is not a thing we should be paid more for.
- So what actually happens if we go over?
- Your Primary Owner gets one email a month once you pass 80% of the month's receipt allowance, and Déjà carries on sealing and signing exactly as before. The check is advisory in the code as well as in the copy: it logs and returns rather than raising. A single-month burst costs you nothing and interrupts nothing. Sustained overage means your scope has grown, and we will talk about the right tier.
- Why are exception receipts free everywhere?
- Because the exceptions are the point. A ledger containing only successes is marketing. Charging for the receipts that record uncertainty or absence would push customers toward under-recording exactly the evidence an examiner most wants to see. R0 and governance receipts are exempt for the same reason — a governance change cannot be gated on a billing threshold it is not billed against.
- What happens to my receipts if I cancel?
- They remain verifiable. Signed receipts are checked with the open CLI against a published key, and content-hashed ones against their hash — no Déjà account, no active subscription. The ledger export takes up to 2,500 receipts at a time and leaves out RV and RE receipts. Each receipt in it is a signed file dsr-verifier-cli checks on its own, except an R0, R2-F or R2-R issued before those types were signed, which is sealed by a content hash and listed in checked-online.json for deja.dev/verify to check; the bundle the CLI checks as a whole is the period report of an audit engagement. Your evidence doesn't depend on us, including on whether you're still a customer.
- Do auditor invitations use a seat?
- No, on any tier. Auditors get scoped, read-only access to the evidence relevant to their engagement, they don't occupy an admin seat, and they are not billed separately. Making the person who checks your evidence a line item would be a strange thing to do.
- What if our scope is smaller than Standard?
- Tell us. If you're a single-framework team with a small service footprint, we'd rather find the right size than have you pay for scope you won't use. Charter exists for firms willing to shape the product in exchange for the rate.
- Can we upgrade or downgrade mid-contract?
- Upgrades take effect immediately and are prorated. Downgrades take effect at renewal. Either way, receipts already sealed stay valid and verifiable — a tier change affects scope going forward, never evidence already in the ledger.
- Does Déjà store our source code?
- Only what your pull requests change. Déjà keeps each pull request's metadata and diff as it's opened, updated and merged, with secrets scrubbed, including up to two years of past pull requests, and the error events your monitoring sends, stack traces included. It never clones a repository, never reads a file outside a pull request's diff, and never writes to your code. Full detail is on the security page.
- Does this make us compliant with DORA or Part 500?
- No, and treat any vendor who says otherwise with suspicion. Déjà supplies the record and maps it to control frameworks. Determination, classification, filing and certification remain with your named accountable individuals.
Start building your audit trail today.
Fully featured trial, 14 days, no card. A work email address is required, because a vault belongs to an organisation rather than a person.
Exception receipts never counted · external auditors unlimited · Déjà never stops signing