The Information Transaction Processor
Every information transaction becomes a decision.
Every decision becomes a proof.
Every time a human, an app or an AI reaches sensitive information, that is an information transaction. The Capsule computes it — subject, asset, context, purpose, policy — releases only what the policy allows, and signs the decision. One processor. One meter. No seats, no per-user licences.
Infrastructure follows responsibility. Decision capacity comes with it.
Information transaction → decision → proof. compute · verify
The unit you bill is the unit you prove: one information transaction, one decision, one signed hash-chained receipt.
Billing is not yet enabled. During the preview period all accounts operate without charges.
We charge for governed exposure decisions — not for storage, users, or information movement.
Movement is free. Exposure is governed.
Revocation is never metered and never blocked.
Turning access off is a safety mechanism, not a feature. It is on no meter, behind no quota and in no plan — including the moment you are over your allowance.
Choose by the responsibility you carry — not by the volume you compute.
Everyone runs on it
Capsule
The Information Transaction Processor
$0to start
for a person or a product · 10,000 decisions / month included · then $0.25 / 1,000
Get an API keyPerfect for
- ·Lawyers and consultants
- ·AI builders and agents
- ·Software teams and SaaS
- ·Small businesses
What you get
- ✓Every access decision computed and signed
- ✓Seal a document — send, revoke, prove who opened it
- ✓AI-read authorization — exact columns and classifications
- ✓Revocation — never metered, never blocked
- ✓Audit API · signed, hash-chained receipts
- ✓API · SDK · MCP · CLI · Fabric
Governance
Organizational infrastructure
From $999/ month
organization subscription · Policies · People · Enforcement · Evidence
For organizations of any size. You move here when governance appears — not when volume appears.
Start a tenant · free in previewPerfect for
- ·Security and IT teams
- ·Law firms and professional services
- ·Organizations sharing sensitive information
- ·Regulated workloads
What you get
- ✓Policies — compose, simulate, enforce
- ✓People and roles — the organization console, Courier, dashboards
- ✓Microsoft 365 · Google Workspace — connect only what you use, no add-on price
- ✓Microsoft Sign-In (Entra ID)
- ✓Evidence and trust — proof export, trust page, master key
- ✓Runs on the same processor — nothing to migrate
- ✓Includes a decision allocation sized for organizational use
Enterprise
Institutional governance
By contract
for an institution · custom decision allocation · custom terms
Talk to usPerfect for
- ·Banks
- ·Insurance
- ·Healthcare
- ·Government
- ·Critical infrastructure
What you get
- ✓Everything in Governance, plus SLA and compliance
- ✓Quorum approval — no single manager releases alone
- ✓Court evidence pack
- ✓Residency · on-prem · air-gap
- ✓SLA · dedicated support
A person · a productCapsule. A lawyer sealing a contract and an agent serving millions run on the same processor.
An organizationGovernance. Organizations don't buy it because they are large — they buy it because they need organizational governance. An organization that only needs the API stays on Capsule.
An institutionEnterprise. SLA, compliance, sovereignty and a custom allocation, by contract.
Every plan carries a decision allocation sized for how it is used. Beyond it, decisions are billed at $0.25 per 1,000 once billing opens, and never blocked; the free Capsule allocation pauses at 10,000 until the month resets. Grants and policy checks are not decisions, and revocation is on no meter.
One processor — for a person, an organization, an institution
Governance includes a decision allocation sized for organizational use. Additional decisions are billed on the same processor meter.
Content-blind by design
We compute access without ever seeing the data.
Every decision is a proof
Each access emits a signed, hash-chained receipt.
Keys stay yours
Out of scope, the key is never derived.
Open verification
Verify every receipt yourself: no trust required.
How do I actually do it? The guide, by who you are
Every application, by need: stopping a language model from seeing data, changing a policy, changing one employee, taking back what you sent — with the real screens and buttons.
Open the full guide →You don’t pay per user, per seat, or per system.
Infrastructure follows the responsibility you carry, decision capacity comes with it — and every decision carries its proof.
Start free