Subscription Model

OmegaSafe Cloud pricing covers encryption key slots in 30-day and 365-day periods. Minimum subscription size is 3 key slots. Subscription size beyond 3 keys can be incremented by 1 to as many keys as you need.

The key slot provides a safe synchronisation of the key utilization across devices, automated renewals and sharing with other users. The cryptographic operations themselves — encrypting and decrypting files — are not measured or billed for. You can share your keys with as many devices and users (including free users) as you need. To start a subscription, sign in to OmegaSafe Cloud, open My Account, go to Billing & Subscription, and complete the purchase there.

1. Decryption Is Always Available

#

Decryption and Delta retrieval remain fully available even after billing expires. This is a permanent design guarantee, not a grace period. In most cases OmegaSafe CLI does not require connectivity to perform a decryption. But in case if it needs to pull Delta generated by a different device, it will still be able to do it after billing for the relevant key expires.

OmegaSafe API — POST /deltas/download_url has no billing check and requires only key access (any role). Any user with access to a key can always download Deltas and decrypt files regardless of their subscription status. As a result, OmegaSafe CLI — pull-missing-deltas also works after billing expires, because it uses the same download route internally.

Only OmegaSafe API — Step 1: POST /deltas/upload_url and OmegaSafe API — PATCH /deltas/claim return 403 Forbidden when billing for a key is expired. These are the only operations gated on active billing for a key.

With Bring Your Own Storage — Recommendation and Keys Management — CLI Key Actionability Gate, you retain control over both the Delta files and the local Alpha key material needed to use them. If OmegaSafe Cloud is unavailable, OmegaSafe CLI — import-key-delta provides an emergency-only recovery path for manually importing a trusted encrypted Delta file and bypassing OmegaSafe Cloud when necessary. It should be reserved for exceptional situations only, because it bypasses ECS authority checks and can introduce local and ECS divergence that requires manual recovery.

2. Free Trial - No Payment Details Required

#

New accounts automatically enter a trial period for:

• 3-key slots
• 30-day period

After trial expiry, the account can continue in free tier and use full functionality on keys that are billed for and shared by another account. You can keep your keys created during free trial and resume full features for them if you decide for creating a subscription later.

3. Slot-Based Sharing Model

#

OmegaSafe billing is based on key slots. One user can purchase multiple key slots and share keys with other users, who can use those keys for free. There is no limit on the number of users or devices sharing any key. The only limit on sharing is the user’s own security posture.

Free-tier accounts — accounts with no active subscription of their own — have no functional limit when working with keys paid for by other accounts. Billing checks on upload, claim, and renewal routes are performed against the key’s billing user, not the requesting user. A free-tier account can encrypt, decrypt, and use any shared key indefinitely as long as the key’s billing user has an active subscription. Decryption stays available for all users of a key, regardless of the key billing and ownership status.

4. Storage Limits

#

Using Bring Your Own Storage — Recommendation removes OmegaSafe’s aggregate per-key upload-count and download-count limits. OmegaSafe internal storage has those aggregate limits to protect the service from abuse. Both storage models retain the universal 10 MiB per-Delta upload limit and write-once, checksum-enforced upload safeguards. See Bring Your Own Storage — Delta Upload Safeguards and Bring Your Own Storage — Internal Storage Limits.

5. Billing In The Web App

#

Subscription purchase, renewal, cancellation, and payment-method management are completed in the OmegaSafe Cloud web interface. Open My Account, then go to Billing & Subscription to review pricing, start a paid plan, inspect your current renewal setup, or manage a pending change.

6. Subscription Status

#

Open My Account > Billing & Subscription to see whether billing is active, whether the account is still on trial, the current expiry date, slot usage, pending renewal changes, stored payment-method status, and any subscription issue that needs user action.

If you need the same billing summary programmatically, see OmegaSafe API — Subscription Status.

7. Purchase Flows

#

All purchases start in My Account > Billing & Subscription. Choose the required slot count, select either a 30-day or 365-day billing period, then continue with one of the web checkout options:

• PayPal subscription creates an auto-renewing subscription and redirects you to PayPal for approval.
• Card checkout collects billing details in the hosted card flow, may require bank verification or 3-D Secure, and stores the card for application-managed renewals when the purchase succeeds.

Invoice fields are collected in the same checkout flow when tax or invoice rules require them.

8. Pending and Replacement Rules

#

Only one unfinished PayPal subscription change can exist on an account at a time. If My Account > Billing & Subscription already shows a pending PayPal draft or return state, finish or cancel that pending flow before starting another one.

If you replace an already active PayPal subscription with a new one, the new subscription becomes the active renewable plan when it activates. Any unused time on the old PayPal subscription is forfeited.

9. VAT and Country Evidence

#

Two country signals are required for VAT compliance. The purchase is rejected if they do not align.

Country evidence is collected from two sources:

• the billing country selected by the user in the checkout flow
• IP-based geolocation — a runtime network-country signal collected during checkout

If the two signals do not align, the purchase flow is rejected with an error. Both signals must be present and consistent before any subscription or card payment order is created.

10. Cancellation

#

To cancel, follow the instructions in Help — Billing And Account Changes. Cancelling auto-renewal stops future renewals but keeps the already paid period active until the displayed expiry date. For the cancellation business rules, see Terms and Conditions — 4.6 Cancellation.

After billing expires, Subscription Model — 1. Decryption Is Always Available continues to apply. Decryption and Delta retrieval remain available for every user with access to the key.

Once billing has expired, the only blocked operations are new encryptions and key renewals for keys billed by the user who cancelled the subscription. If you do not have active billing of your own but you have OWNER or MAINTAINER permission on a key billed by another user whose billing remains active, you keep the full functionality of that role on that key as described in Subscription Model — 3. Slot-Based Sharing Model.

11. Receipts and Invoices

#

Signed-in users can open My Account > Billing & Subscription to download billing documents for completed orders. Receipts are available for completed sales, and invoices are available when the order has an invoice snapshot.

If you need the bearer-authenticated document download endpoints for automation, see OmegaSafe API — Billing Documents.