WaxSeal is for organisations that must send a secret to a specific person and still control it afterwards — revoke it, expire it, limit reads, require a PIN. The apps are a free App Store download; you subscribe once per organisation, and recipients never pay. Looking for the personal, on-device app? That is StegoSafe.

☁️ WaxSeal Cloud

$49 USD / month

Secure Team · 10 members included · cancel any time

$4.90 per member/month with 10 members

10 members included; each member may enrol two devices (phone + computer)
Additional members $8 / month each
Unlimited recipients — anyone your team sends to opens for free
Revocation, expiry, read limits, burn-after-reading, optional PIN
End-to-end encrypted: the vault stores ciphertext it cannot open
Hosted by us in Canada; encrypted payloads only, never plaintext or keys
Signed invites, verified on your own devices — no sales call, no support ticket to join
Invoices, member changes and cancellation in the Stripe billing portal

Additional members

10 members · $49 / month

Email for the activation code and receipts

Secure checkout by Stripe · Cancel renewal any time

Card details go to Stripe-hosted checkout; they never reach our servers. You receive an activation code by email and on the next page, and found your organisation in the app. Prices in USD; taxes shown at checkout where applicable.

🖥️ WaxSeal Self-Hosted

$1,999 USD / year

Your servers · up to 25 members

The vault runs on infrastructure you operate — encrypted payloads never leave it
Same apps from the App Store, pointed at your server
Annual signed licence; an expired licence never shuts down or deletes your server
Data-residency and compliance fit for regulated teams
Priced above Cloud on purpose: you are buying control, not a discount

No self-service checkout for this tier yet — we issue the licence and set the team up by hand.

Talk to us about self-hosting

What is a member? Someone who can create, administer, revoke or audit seals. Recipients only open what they are sent — they are not billed and need no subscription.

Where does the data live? Cloud stores only ciphertext, signed authorization objects and 8-byte carrier tokens on our servers in Canada; keys exist only inside your devices' Secure Enclaves. Self-hosted keeps even the ciphertext on your own machines.

One clear team plan. No sales call. Recipients are always free. Cancel renewal any time from the billing portal; service runs to the end of the period you paid for (terms).

Frequently asked questions

Who counts as a member?

Anyone who creates, administers, revokes or audits seals. Each member may enrol two devices, say a phone and a Mac. People who only open what they are sent are recipients: unlimited, free, and they need no subscription.

What happens to my data if I cancel?

Sending and new invites pause; every seal already sent can still be opened by its recipients under its own rules until it expires or is burned. Nothing is deleted because a card lapsed.

Can the vault read our secrets?

No. Content is encrypted on the sender's device and the key is wrapped only to the recipients' device keys, which never leave their Secure Enclaves. The vault stores ciphertext and relays signed authorization; it verifies signatures, it never decrypts.

How do I pay and manage the subscription?

Stripe-hosted checkout — card or Apple Pay. Invoices, changing the member count, updating the card and cancelling are all in the Stripe billing portal linked from your welcome email. No sales call, no support ticket.

Can I try WaxSeal first?

Yes. The free app includes three self-addressed test seals, so you can experience the real encryption, photo sharing and burn-after-reading flow on your own device. Sending to other people requires a team workspace. Recipients always use the app free.