WaxSeal Pricing

WaxSeal is sold per organisation, on the web, with no sales call: Cloud from $49 a month for 10 members, recipients always free. Self-hosted for teams that keep even the ciphertext on their own servers.

WaxSeal is for organisations that must send a secret to a specific person and still control it afterwards — revoke it, expire it, limit reads, require a PIN. The apps are a free App Store download; you subscribe once per organisation, and recipients never pay. Looking for the personal, on-device app? That is StegoSafe.

☁️ WaxSeal Cloud

$49 USD / month
Secure Team · 10 members included · cancel any time
  • 10 members included; each member may enrol two devices (phone + computer)
  • Additional members $8 / month each
  • Unlimited recipients — anyone your team sends to opens for free
  • Revocation, expiry, read limits, burn-after-reading, optional PIN
  • End-to-end encrypted: the vault stores ciphertext it cannot open
  • Hosted by us in Canada; encrypted payloads only, never plaintext or keys
  • Signed invites, verified on your own devices — no sales call, no support ticket to join
  • Invoices, member changes and cancellation in the Stripe billing portal
10 members · $49 / month

Card details go to Stripe-hosted checkout; they never reach our servers. You receive an activation code by email and on the next page, and found your organisation in the app. Prices in USD; taxes shown at checkout where applicable.

🖥️ WaxSeal Self-Hosted

$1,999 USD / year
Your servers · up to 25 members
  • The vault runs on infrastructure you operate — encrypted payloads never leave it
  • Same apps from the App Store, pointed at your server
  • Annual signed licence; an expired licence never shuts down or deletes your server
  • Data-residency and compliance fit for regulated teams
  • Priced above Cloud on purpose: you are buying control, not a discount

Self-service licence issuance is being finished. Available Q4 2026.

What is a member? Someone who can create, administer, revoke or audit seals. Recipients only open what they are sent — they are not billed and need no subscription.
Where does the data live? Cloud stores only ciphertext, signed authorization objects and 8-byte carrier tokens on our servers in Canada; keys exist only inside your devices' Secure Enclaves. Self-hosted keeps even the ciphertext on your own machines.
No free tier, no lifetime licence, no enterprise theatre. One plan per organisation, cancel from the billing portal, refunds per our terms.

Frequently asked questions

Who counts as a member?

Anyone who creates, administers, revokes or audits seals. Each member may enrol two devices, say a phone and a Mac. People who only open what they are sent are recipients: unlimited, free, and they need no subscription.

What happens to my data if I cancel?

Sending and new invites pause; every seal already sent can still be opened by its recipients under its own rules until it expires or is burned. Nothing is deleted because a card lapsed.

Can the vault read our secrets?

No. Content is encrypted on the sender's device and the key is wrapped only to the recipients' device keys, which never leave their Secure Enclaves. The vault stores ciphertext and relays signed authorization; it verifies signatures, it never decrypts.

How do I pay and manage the subscription?

Stripe-hosted checkout — card or Apple Pay. Invoices, changing the member count, updating the card and cancelling are all in the Stripe billing portal linked from your welcome email. No sales call, no support ticket.

Is there a trial or a free tier?

No permanent free tier. Recipients use the app free; sending needs a subscribed organisation. Cancel from the portal at any time.