Priced by scope, not per-receipt.

A receipt is one signed attribution event — issued when Déjà identifies the causal PR for an incident with Causal Confidence Score ≥ 0.80. First occurrence or repeat, both count. What doesn't count toward your quota: exception receipts (R1-L, R1-N, R2-F, R2-R) where the system had to work hardest. We explicitly don't charge for those because we want you recording the failures — that's where the evidence matters most.

Standard is the public baseline for regulated firms running multiple frameworks simultaneously (SOC 2 + ISO 27001 + HIPAA + PCI-DSS, for example) or multiple concurrent audit engagements. If you operate at smaller scope — for example, an early-stage regulated startup preparing for your first SOC 2 Type II under a single framework — we have a single-framework tier available — contact sales. Talk to us and tell us about your scope; we'll map you to the right tier.

Charter is a founding-customer program, not a standard tier. The $30K/year price is locked for life — meaning your annual cost stays at $30K even when Standard reaches $10K/mo ($120K/year), Enterprise reaches $300K+/year, and the regulated-evidence category matures. You get founding pricing held for the life of your subscription. Charter is annual rather than perpetual because that aligns with how regulated firms procure compliance tooling — annual OpEx budget, annual renewal review, annual ROI defense — and because the founders-direct relationship is built around continuous engagement, not a single transaction. Founding-customer benefits: direct founder support, named founding partner status, permanent DSR/1.0 working group seat, 30% discount on any future-tier upgrade (Standard, Enterprise, or Sovereign).

Because we want you recording the failures. Exception receipts (R1-L, R1-N, R2-F, R2-R) are the forensic-grade receipts issued when the system couldn't produce a clean high-confidence attribution — low confidence match, no match, fix failure, or recurrence against a prior fix. If we charged for those, we'd be taxing the evidence that matters most to your auditor. Exception receipts are free forever, on every paid tier. We align our pricing with what we want you to do.

Receipts you've earned are yours forever. You can export your full receipt ledger at any time as a portable JSON + PDF bundle that verifies offline using our open-source dsr-verifier-cli. If you cancel entirely, export is available for a limited window after cancellation — contact support for details. No vendor lock-in — if Déjà disappeared tomorrow, your evidence is still valid. That's the point of the open Verifier tier.

Sovereign is for institutions where regulatory posture is the product. It includes isolated dedicated deployment (your own infrastructure, not shared tenancy), multi-decade evidence retention (7+ years minimum, longer on request), direct DSR/1.0 governance seat (you vote on the open standard), and custom regulatory integrations (e.g., direct integration with central bank reporting systems). Enterprise serves regulated companies. Sovereign serves the regulators themselves.

Upgrade: anytime. Prorated for the remainder of your current annual period. New features unlock immediately. Downgrade: takes effect at annual renewal. Your receipts retain their original retention class. Charter customers upgrading into Standard, Enterprise, or Sovereign get a 30% discount on the new tier — that's part of the founding-customer benefit.

Yes — qualified 501(c)(3) nonprofits and accredited academic institutions are eligible for a 50% nonprofit/academic discount — contact sales with proof of status and we'll confirm eligibility. The Open Verifier tier is always free for everyone, regardless of organizational type.

No. Déjà reads transient webhook diffs and error payloads at merge time and incident time. It never clones your repository, reads historical files, or accesses runtime data. We store fingerprints and correlation evidence — never the underlying code. For the full security posture, see the Security page.