PCI-DSS Encrypted · SOC2 Compliant Billing

ShareBolt Pricing Plans — Free, Pro & Enterprise

Provision secure sandboxes, edge routing controls, and compliance logging for your AI agents and teams.

Monthly Yearly Save 17%
Standard Shield
SEC_LEVEL: STANDARD // EXPIRE: 7D
$ 0 / month

For standard, ad-hoc secure transfer requirements.

  • 2 GB transfer limit
  • AES-256-GCM encryption (server-side, ephemeral keys)
  • Standard single-region edge ingress
  • 7-day temporary link auto-expiry
Deploy Console
Ledger Guard
SEC_LEVEL: QUORUM_AUDIT // SSO: ENFORCED
$ 19 / user / mo

For enterprise workloads requiring regulatory routing and consensus approvals.

  • UNLIMITED direct transfer sizes
  • Collaborative M-of-N Quorum Decryption
  • Immutable audit logging chain ledger
  • Okta/OIDC role mapping gates
  • Compliance residency edge routing
Enterprise Citadel
SEC_LEVEL: CUSTOM_HSM // SLA: 99.99%
Custom

For global organization nodes requiring dedicated tenants and private infrastructure.

  • DEDICATED edge tenant workers
  • PRIVATE HSM key management integration
  • Custom storage residency routing rules
  • Dedicated 24/7/365 enterprise SLA support
  • Unlimited everything (users & nodes)

Why Global Enterprises Choose ShareBolt

Security & Data Capabilities Legacy Consumer Tools ShareBolt Pro / Guard
Pricing Point $12 / mo per user Custom pricing
Server-Side Ephemeral Key Isolation (AES-256-GCM) ❌ None (Files decrypted on host server) ✅ Per-transfer ephemeral keys via HKDF-SHA256 ratchet
Large File Limits 200 GB max ✅ Unlimited (Via Bring-Your-Own-Storage)
AI Agent Governance & Quota Gates ❌ None ✅ Built-in sandboxing & quotas
Immutable Cryptographic Audit Trail ❌ None ✅ Chained block ledger signatures

Pricing, Billing & Quota FAQ

Q: What happens if an AI agent exceeds its daily upload byte quota?
A: ShareBolt monitors cumulative bandwidth consumption server-side via its rate-limit middleware. If a DID-registered agent exceeds its daily threshold, the platform returns HTTP 402 with a daily_quota_exceeded error code. Upgrading to the Ledger Guard or Citadel tiers allows custom admin-defined quotas and dynamic warnings.

Q: How does the Bring-Your-Own-Storage (BYOS) billing model function?
A: With BYOS active (standard in our Enterprise Citadel tier), files do not pass through or reside on ShareBolt's cloud storage. Instead, our gateway coordinates direct client-to-bucket transfers using presigned URLs. You pay ShareBolt a flat licensing fee for routing and key exchange, and pay your cloud provider (AWS S3, Cloudflare R2, or Azure) directly for storage and egress. This completely removes arbitrary size ceilings and hosting margins.

Q: What SLA commitments are provided under the Guard and Enterprise tiers?
A: The Ledger Guard tier guarantees a 99.9% API and edge gateway availability SLA, backed by service credits. The Enterprise Citadel tier offers a 99.99% availability SLA, a dedicated Edge Worker proxy pool, direct engineering support channels, and custom SOC 2 Type II audit report exports upon request.

Q: Can I cancel or downgrade my subscription at any time?
A: Yes. All plans operate on a flexible monthly billing cycle. You can cancel, upgrade, or downgrade your vault subscription directly within the secure account portal. Gated features and custom storage regions will persist until the end of your current active billing period.

What every plan includes

  • AES-256-GCM server-side encryption — per-transfer ephemeral keys derived via HKDF-SHA256 ratchet; keys are never stored in plaintext or exposed via API.
  • Ed25519 agent DID identity — AI agents authenticate via cryptographic challenge, not API keys that can be leaked.
  • GDPR edge routing (Pro and above) — cf-ipcountry automatically routes EU traffic to EU-central R2 storage.
  • Immutable audit ledger (Pro and above) — hash-chained, Ed25519-signed blocks with region-included tamper evidence.
  • No per-file charges — flat monthly fee; storage counted against plan limit; Enterprise BYOS customers pay their cloud provider directly.
  • 7-day free trial on Pro Vault — no credit card required to start.

Explore the Architecture Behind Each Plan

Architecture
Security Protocols
AES-256-GCM, HKDF-SHA256 PFS, Ed25519 DIDs, Shamir M-of-N.
Compliance
GDPR · HIPAA · SOC2
Regulatory mapping, data residency routing, audit ledger export.
Engineering Blog
Perfect Forward Secrecy
Why per-transfer key rotation protects 50,000-file archives from a single breach.
Enterprise
Enterprise Citadel
Custom SLA, dedicated edge workers, BYOS, HSM key management.