Pricing

The value of control.

Start free. Validate your requirements. Scale with confidence.

Explore for free.

Choose the experience that fits your role. Both are free and independent.

Governance Sandbox

No code required

Free

Explore guided governance scenarios, inspect policy decisions, and understand enforcement outcomes without writing code.

A public demonstration environment. Start with synthetic guided scenarios; use synthetic or non-sensitive data only. This is not a private workspace.

Developer Evaluation

For engineering teams

Free

Test LSAS Platform using API keys and technical scenarios. Compare allowed, transformed, blocked and held results; inspect and export detailed governance evidence from your private workspace.

Free, time-limited access with synthetic or non-sensitive test data. No credit card or model-provider account required. No production use.

See code examples

Developer Evaluation allowance: 14 days from the first recorded governed decision · Up to 10,000 recorded decisions · 30 requests/minute.

Activate within seven days of workspace creation. Blocked and held decisions also count. The allowance is shared across your evaluation keys and routes, subject to service limits. Evaluation results do not establish production readiness or comprehensive detection.

No perpetual production free tier. Production access is scoped through a commercial agreement.

Validate your requirements.

Choose the engagement that fits your scope. These are independent starting points, not mandatory prerequisites. Pricing tailored to your scope, with fees agreed before work begins.

Get evidence before committing to integration.

See LSAS Platform work on your data before you commit to a pilot.

Discovery engagement

Discovery

Contact for Pricing

Up to 3 environments · One business. One agreed assessment scope.

A focused first assessment to identify findings and shape your pilot.

Includes 4 hours of technical support per engagement.

Request Pricing

Discovery engagement

Expanded Discovery

Contact for Pricing

Up to 6 environments · One business. One agreed assessment scope.

The same evidence and guidance across a wider set of environments.

Includes 8 hours of technical support per engagement.

Request Pricing

Included in both

  • Executive findings and explicit coverage gaps
  • Prioritized recommendations and proposed control points
  • Executive readout to agree the next step
  • One follow-up scan of the same agreed scope

Pricing is confirmed for the agreed scope before work begins. Environments are approved source contexts, not unlimited data volume. Source types, access, workload limits, and timing are agreed during scoping. File scans are ready to use; SQL Server connections require separate setup and qualification.

More than six environments, multiple businesses, or substantially larger data volumes are scoped separately.

The offline scanner evaluates content locally and does not upload scan results to LSAS Platform. You control report sharing.

Discovery evaluates selected policies without changing source content. Findings inform review and proposed control points; the pilot then tests runtime controls in an agreed workflow. No platform purchase is required for Discovery.

Eligible Discovery fees may be credited toward a subsequent paid pilot according to the agreed statement of work. A Discovery credit reduces the incremental pilot payment. It does not create a separate credit against the platform subscription. See conversion terms.

How Discovery works
  1. Agree your business scope, approved sources, policies, and acceptance criteria.
  2. LSAS Platform coordinates the scanner and approved local execution with you. Scanner distribution is restricted to LSAS Platform administrators.
  3. Review findings and coverage with us, then decide what to address and where a pilot should focus.

90-day pilots. Fixed scope, fixed duration, fixed price.

Every pilot runs the same operating cadence and ends with a day-90 acceptance package. The fee is fixed after scope and the statement of work are agreed.

90-day pilot

Department

Contact for Pricing

Fee fixed after scope agreement

For a single team proving governance on live workflows.

  • Up to 3 governed workflows / AI touchpoints
  • 1 production + 1 non-production environment
  • Runtime policy packs, audit trail, and executive telemetry
  • Day-90 acceptance package with posture, gaps, and next-scope recommendations

Includes 10 hours of technical support over the 90-day pilot.

Request Pricing

90-day pilot

Business Unit

Contact for Pricing

Fee fixed after scope agreement

For multi-team rollouts with integration requirements.

  • Up to 10 governed workflows / AI touchpoints
  • Up to 3 environments
  • Everything in Department, plus SIEM/SOAR integration depth
  • Approval and exception workflows for in-scope consequential AI actions
  • Escalation and audit workflows validated with your operators

Includes 20 hours of technical support over the 90-day pilot.

Request Pricing

90-day pilot

Enterprise

Contact for Pricing

Fee fixed after scope agreement

For regulated environments and connector-heavy architectures.

  • Expanded workflow scope, defined at scoping
  • Connector-boundary controls (FHIR/OAuth ingress and egress where required)
  • Assurance cadence aligned to your audit calendar
  • Everything in Business Unit, plus dedicated delivery support

Includes 40 hours of technical support over the 90-day pilot.

Request Pricing

Included support is separate from the implementation, validation and acceptance deliverables purchased through Discovery or a pilot. The support allowance covers eligible technical assistance outside those planned deliverables; it is not the total implementation effort.

See the 90-day operating cadence

Qualifying pilots may receive up to 100% credit toward the first-year platform subscription, subject to conversion and commitment terms.

See conversion terms

Deploy with confidence.

Choose the deployment architecture that fits your organization. Production access requires a commercial agreement; no evaluation or pilot is a mandatory prerequisite.

Platform subscription

Cloud API

Contact for Pricing

Subscription scoped to your deployment

For teams running governed AI workloads on shared infrastructure.

  • Runtime policy enforcement across your AI touchpoints
  • Retention governance and API key posture controls
  • Audit trails and executive telemetry
  • Standard support

Includes 2 hours of Standard support per month.

Request Pricing

Platform subscription

Gateway

Contact for Pricing

Subscription scoped to your deployment

Inline proxy for organizations that need enforcement at the boundary.

  • Everything in Cloud API
  • Gateway placement and wiring for your architecture
  • Session lifecycle controls and key conflict telemetry
  • Priority support

Includes 6 hours of Priority support per month.

Request Pricing

Platform subscription

Self-hosted / VPC

Contact for Pricing

Custom deployment pricing

For regulated environments that require private deployment.

  • Everything in Gateway
  • Deployment inside your VPC or on-premises boundary
  • SSO, private networking, and data residency requirements defined during scoping
  • Dedicated support and named delivery contact

Dedicated support starting at 8 hours per month; actual allowance scoped in the executed order form.

Request Pricing

Pilot tiers represent evaluation scope, complexity and acceptance requirements. Platform offerings represent deployment architecture and ongoing operating requirements. A Business Unit or Enterprise pilot does not automatically require Gateway. Each deployment is priced for its approved scope.

Private deployment, identity and external integrations are scoped delivery work, with acceptance criteria and operating responsibilities agreed in your statement of work.

Private deployment, clear responsibilities.

Customers provide the agreed infrastructure and storage environment. LSAS Platform supplies the supported application; deployment-package scope and delivery are defined in the statement of work. Deployment, patch management, backup, recovery and support responsibilities are defined in the applicable agreement.

Customer-operated PostgreSQL, networking, storage and infrastructure backups remain customer responsibilities unless separately contracted. Configured providers or connectors may transmit permitted payloads beyond the deployment boundary; architecture and network requirements are reviewed for each deployment.

Explore Private Deployment & Shared Responsibility

Commercial details

Clear terms. Defined responsibilities.

Understand credits, support allowances and scope before you commit. Essential conditions remain part of your agreed commercial terms.

Your pilot investment carries forward.

A successful pilot should make the next decision easier, not require you to start over. When you convert to a qualifying LSAS Platform agreement within 60 days of pilot acceptance, up to 100% of your qualifying pilot fee may be credited toward your first-year platform subscription.

Full-credit requirements

  • A qualifying 24-month platform commitment.
  • A first-year annual subscription meeting the approved subscription minimum in the signed commercial terms and at least equal to the qualifying pilot fee.
  • A defined and approved production deployment scope.
  • Conversion within 60 days of pilot acceptance.

Qualification agreed before your pilot

The applicable full-credit subscription minimum is confirmed in the approved quote before the pilot begins; it is a qualification condition, not a new platform tier.

A smaller platform deployment may qualify for a reduced conversion credit, subject to approval and terms established before the pilot begins.

Credit limits

Conversion credits apply only to eligible first-year platform subscription fees; they are not cash refunds and cannot create a negative subscription balance.

Credits cannot carry forward to future contract years unless explicitly approved in writing, and the same underlying customer payment cannot be credited twice.

Documented in your agreement

The qualifying pilot fee retains its existing conversion-credit treatment, including the support embedded in that fee. Separately billed support overages and professional services are not automatically eligible for pilot-conversion credits.

All credits and qualifying commercial commitments must be documented before the pilot begins and are subject to the agreed contract, order form and statement of work.

How do Discovery and pilot credits work?

An eligible Discovery payment may reduce the incremental payment for a subsequent pilot. The qualifying pilot investment includes that credited payment once; Discovery does not create a second, independent platform credit.

With approved production scope, the applicable subscription minimum and a qualifying 24-month agreement signed within 60 days of pilot acceptance, up to 100% of the qualifying pilot fee may be credited toward the first-year subscription. The second year remains payable under the agreement. This is a subscription credit, not a cash payment or refund.

Support that scales with your deployment.

Every paid LSAS Platform engagement includes a defined level of technical assistance aligned to its scope, complexity, and deployment requirements.

Standard

For Cloud API and limited-scope implementations.

  • Technical troubleshooting and configuration assistance
  • Supported API integration guidance and product issue investigation
  • Documentation, release guidance and standard policy configuration
  • Access to approved product updates

Priority

For Gateway and higher-complexity implementations. Includes everything in Standard, plus:

  • Prioritized technical triage and enhanced escalation
  • Coordination on gateway integration issues
  • Assistance with approved upgrades and patches
  • Operational review, escalation guidance and more frequent technical coordination when agreed

Dedicated

For private deployments and larger enterprise environments. Includes everything in Priority, plus:

  • Named technical contact and coordinated operational cadence
  • Deployment and upgrade planning with customer IT
  • Environment-specific troubleshooting and agreed release and patch assistance
  • Support for documented incident escalation arrangements

Included work and additional assistance

Included support is separate from the implementation, validation and acceptance deliverables purchased through Discovery or a pilot. The support allowance covers eligible technical assistance outside those planned deliverables; it is not the total implementation effort.

Additional standard technical support and specialized architecture, advanced integration or engineering services are separately quoted. Scope, rates or a fixed fee must be agreed and authorized before work begins.

Service commitments

Support hours are separate from coverage windows, initial incident acknowledgment, severity and escalation, restoration and resolution efforts, and platform availability. Applicable SLA commitments are documented in the executed service agreement. Initial acknowledgment is not guaranteed resolution; no 24/7 coverage or uptime target is included by default.

Discovery allowances expire at the conclusion of the engagement; pilot allowances expire at the conclusion of the 90-day pilot.

Monthly subscription allowances do not roll over by default. Hours cannot transfer between contracts unless agreed in writing.

Additional billable support requires customer authorization before work begins. Expanded implementation scope requires a change order.

Custom policy development, new integrations, substantial architecture changes and professional services are separately scoped; they do not automatically consume ordinary support allowances.

Serious product incidents can still be reported after included hours are exhausted. Incident handling and any charges are governed by the applicable support agreement.

Support allowances are service hours, not refundable balances or subscription conversion credits. Categories do not provide unlimited engineering access or an embedded engineer.

Read Support & Service Commitments

Support questions, answered.

What is included in technical support?

Eligible assistance includes technical troubleshooting, configuration, supported API guidance, product issue investigation, documentation and release guidance, standard policy configuration, and access to approved updates. Cloud API includes Standard, Gateway includes Priority, and Self-hosted / VPC includes Dedicated support. Discovery and pilot allowances cover assistance for the agreed engagement; they do not automatically assign an annual support category. Custom policy development and new integrations are separately scoped services.

Do implementation hours count against support hours?

Included support is separate from the implementation, validation and acceptance deliverables purchased through Discovery or a pilot. The support allowance covers eligible technical assistance outside those planned deliverables; it is not the total implementation effort.

What happens when included support hours are exhausted?

Additional billable assistance requires customer authorization before work begins. Scope and pricing for additional technical support are agreed in a separate quote. Serious product incidents can still be reported; incident handling and any charges follow the applicable support agreement. Expanded implementation scope requires a change order.

Do unused support hours carry forward?

Discovery allowances expire at the conclusion of the engagement; pilot allowances expire at the conclusion of the 90-day pilot. Monthly subscription allowances do not roll over by default. Hours cannot transfer between contracts unless agreed in writing. Allowances are service hours, not refundable balances or subscription conversion credits.

Can we purchase additional support?

Additional standard technical support and specialized architecture, advanced integration or engineering services are separately quoted. Scope, rates or a fixed fee must be agreed and authorized before work begins. Additional billable work requires customer authorization before it begins. Custom policy development, new integrations and substantial architecture changes are separately scoped, not automatically charged against ordinary support hours.

Who manages updates and patches for private deployments?

LSAS Platform supplies supported software releases and product patches. Scheduling, testing and applying updates within customer-operated environments are shared responsibilities defined in the statement of work and service agreement, including customer IT coordination, access, change windows and recovery procedures.

Who is responsible for PostgreSQL storage and backups?

For private deployments, the customer provides and operates the agreed PostgreSQL and storage environment, including infrastructure backups and disaster recovery, unless separately contracted. The customer owns retention settings and regulatory retention decisions. Backup restoration and recovery responsibilities must be qualified for the actual deployment.

Are 24/7 support and uptime SLAs available?

Coverage and availability requirements are reviewed during scoping and must be validated operationally and documented in the executed service agreement. Included hours do not imply 24/7 coverage, an uptime percentage, or response or restoration guarantees. Initial acknowledgment is separate from resolution.

Can the support plan be customized?

Yes, support scope, coverage and coordination can be agreed to fit the deployment. Dedicated support starting at 8 hours per month; actual allowance scoped in the executed order form. Dedicated support provides a named technical contact, not unlimited engineering access or an embedded engineer unless expressly contracted.

How are support overages treated when applying pilot conversion credits?

The qualifying pilot fee retains its existing conversion-credit treatment, including the support embedded in that fee. Separately billed support overages and professional services are not automatically eligible for pilot-conversion credits. Existing qualification requirements remain: a qualifying 24-month commitment, conversion within 60 days of pilot acceptance, the applicable first-year subscription minimum and approved production scope. The same underlying payment cannot be credited twice; credits are not cash refunds and do not roll over without written approval.

Scope and delivery

How scoping works.

Final pricing is set on a scoping call around four drivers — the platform tiers above are starting points, not ceilings. Pilot prices are fixed for the agreed scope.

  • Number of production and non-production environments in scope
  • Count and criticality of governed workflows and AI touchpoints
  • Integration depth (IAM, SIEM/SOAR, internal platforms, connector boundaries)
  • Assurance model and operating cadence expectations

What you get in the first 90 days.

The delivery cadence pairs explicit acceptance outputs with executive checkpoints.

View the delivery plan and acceptance outputs

Days 0-15

Scope lock and control alignment

  • Signed boundary map for in-scope systems, environments, and AI touchpoints
  • Control objective register with acceptance criteria and executive owners
  • Implementation plan with risk-ranked workflow priorities

Days 16-45

Implement and prove controlled operation

  • Runtime policy and onboarding controls configured for agreed workflows
  • API key lifecycle controls active (create, revoke, role-gated access, audit trace)
  • Baseline-versus-governed comparisons produced for priority use cases, including connector-boundary flows where in scope

Days 46-90

Production hardening and operating cadence

  • Session lifecycle controls and key conflict telemetry reviewed with platform/security
  • Audit event review workflow and escalation paths validated with operators
  • Executive checkpoint package covering posture, gaps, and next-scope recommendations

Day-90 acceptance outputs

  • Tenant-level control posture visible in console for runtime policy, retention, and API key governance.
  • Evidence trail for high-risk actions in audit events with actor, action, and entity context.
  • Runtime evidence and timeline visibility for governed connector-boundary executions in in-scope workflows.
  • Version-safe key lifecycle operations that fail safely under concurrent admin actions.
  • Agreed operating cadence for incident triage, exception handling, and roadmap expansion.

You provide

  • Executive sponsor (owns risk appetite and outcomes)
  • Project representative (delivery lead)
  • Domain SMEs for in-scope areas (for example, clinical or security)
  • Inventory of systems, environments, and in-scope boundaries
  • AI touchpoints and workflow map
  • Control objectives and success criteria

We deliver

Architecture

  • Boundary design and recommended gateway placement
  • Implementation across agreed boundaries, including healthcare system-of-record edges, and priority workflows

Governance

  • Custom policy packs aligned to your controls and risk tolerance
  • Defined workflows for approvals and exceptions where needed

Validation and reporting

  • Controlled baseline versus governed comparisons for agreed workflows
  • Telemetry and executive reporting on risk posture and hotspots

Operationalization

  • Identify risk at rest in in-scope systems and prioritize remediation
  • Escalation and audit workflows, plus a scale plan to extend coverage

ROI measurement framework.

We establish baseline operational metrics, measure deltas through rollout, and review value in executive cadence.

Explore baseline and target measurements

Governance review effort

Common baseline
Manual validation and ad hoc policy checks across teams
Target state with LSAS Platform
Operational reviews run from policy + audit telemetry with fewer manual handoffs

Time to detect control drift

Common baseline
Issues found late in release cycles or during audits
Target state with LSAS Platform
Drift and conflict signals visible during normal operations

Audit preparation overhead

Common baseline
Evidence collection spread across tickets, logs, and spreadsheets
Target state with LSAS Platform
Decision and mutation evidence pulled from centralized audit views

High-risk key and access hygiene

Common baseline
Inconsistent lifecycle and ownership practices
Target state with LSAS Platform
Role-gated lifecycle controls with explicit revoke, conflict handling, and traceability

Scope your LSAS Platform pilot.

Define your workflows, deployment boundaries, and day-90 acceptance criteria.

Book a scoping call

An open invitation

Help shape the future of AI governance.

The challenges organizations face with AI aren’t theoretical. We’re learning from the people navigating them every day.

If you work in governance, risk, compliance, enterprise architecture, security, or AI engineering, we’d welcome your perspective.

Share Your Perspective

A conversation, not a sales pitch.