Five tiers. Capability gates, not just price.
Pricing flexes within each tier. The matrix below is the capability matrix as enforced in code. Tier changes are recovery-neutral — moving between tiers, in either direction, never affects the recoverability of previously encrypted files.
- 1 connexion
- Max file size 50 MB
- 25 files total
- OAuth providers only
- SkyeVault (always free)
- Compression
- Geo-fencing
- Signed reports
- 3 connexions
- Max file size 500 MB
- 500 files
- OAuth + cloud object storage
- Compression (zstd)
- File integrity & versioning
- OnlyOffice editing
- Panic / duress mode
- Geo-fencing
- Signed reports
- 7 connexions
- Max file size 2 GB
- 5,000 files
- Geo-fencing + SkyeMap
- Provenance chain
- Signed reports + verifier
- API keys
- SkyeBucket (S3 gateway)
- SkyeFlow visualisation
- Everything in Pro
- Unlimited connexions, files, file size
- Company management (multi-tenancy)
- Full audit & dedup dashboard
- Post-quantum encryption
- SkyeDATA backup
- Everything in Premium
- SkyeGXU on-prem AI
- Email add-ins
- CSR / on-prem appliance
- Everything in Enterprise
- SkyeGXU on-prem GPU AI
- Outlook & Gmail add-ins
- CSR / on-prem appliance
- Split-Authority Decryption
- Sovereign on-prem providers
- White-glove migration
- Dedicated solutions architect
What's gated, in plain text.
| Capability | Free | Pro | Premium | Enterprise | Sovereign |
|---|---|---|---|---|---|
| Max connexions | 1 | 3 | 7 | Unlimited | Unlimited |
| Max file size | 50 MB | 500 MB | 2 GB | Unlimited | Unlimited |
| Max total files | 25 | 500 | 5,000 | Unlimited | Unlimited |
| Provider classes | OAuth | OAuth+ | Object+ | Object+ | On-prem |
| Compression (zstd) | — | ✓ | ✓ | ✓ | ✓ |
| File integrity & versioning | — | ✓ | ✓ | ✓ | ✓ |
| Document editing (OnlyOffice) | — | ✓ | ✓ | ✓ | ✓ |
| Panic / duress mode | — | ✓ | ✓ | ✓ | ✓ |
| Geo-fencing + SkyeMap | — | — | ✓ | ✓ | ✓ |
| Provenance chain | — | — | ✓ | ✓ | ✓ |
| Signed reports + verifier | — | — | ✓ | ✓ | ✓ |
| API keys | — | — | ✓ | ✓ | ✓ |
| SkyeBucket (S3 gateway) | — | — | ✓ | ✓ | ✓ |
| SkyeFlow visualisation | — | — | ✓ | ✓ | ✓ |
| Company management | — | — | — | ✓ | ✓ |
| Full audit & dedup dashboard | — | — | — | ✓ | ✓ |
| Post-quantum encryption | — | — | — | ✓ | ✓ |
| SkyeDATA (backup) | — | — | — | ✓ | ✓ |
| SkyeGXU (on-prem GPU) | — | — | — | — | ✓ |
| Email add-ins (Outlook / Gmail) | — | — | — | — | ✓ |
| CSR / on-prem appliance | — | — | — | — | ✓ |
| SkyeVault (secrets) | ✓ | ✓ | ✓ | ✓ | ✓ |
SkyeVault is always available across every tier.
Need a custom configuration?
Sovereign and Enterprise tier pricing is configured to your storage volume, jurisdictions, and integration footprint. Book a briefing for a tailored quote.
Frequently asked questions
Is there a free tier?
Yes. The Free tier supports one provider connexion, files up to 50 MB, and 25 files total. SkyeVault (encrypted secret storage) is included on every tier including Free.
Can I change tiers later?
Yes. Tier changes are recovery-neutral by construction: both wrapped UMK variants (password and PQ-hybrid) are unwrap-attempted on every login, and downgrades explicitly unwrap both before clearing. An organisation that leaves the Sovereign tier retains full access to every file it encrypted while on it.
How is Enterprise and Sovereign tier pricing calculated?
Enterprise and Sovereign tiers are configured to your storage volume, the number of provider connexions you use, the jurisdictions you require, and your integration footprint. Pricing is delivered in an engagement letter after a 45-minute briefing.
Does SkyeVault cost extra?
No. SkyeVault — encrypted secret storage for passwords, API keys, and notes — is available on every tier, including the Free tier, at no additional cost.
Can I run SkyeConnex on-premises?
Yes, on the Sovereign tier. The same code that runs at app.skyeconnex.com runs in a customer VPC, on-prem, or air-gapped. The Sovereign tier also includes SkyeGXU — the sovereign on-prem GPU embedding subsystem for RAG and semantic search without OpenAI exposure.