Signet vendor pack · GeldenTech Inc. · corporation 1392904-3 · signetauth.com/buy

Buy

We filled out your questionnaire before you sent it.

Legal entity, how to purchase, what we do not claim, and how you leave. Hosted is self-serve. On-prem is a licence. Attach this page or print it. An agent can GET /buy.json.

SKUs Legal Security Exit For an agent /buy.json

Signing up creates your account and provisions your instance automatically, in minutes, with nobody waiting on us. You get its URL and its own compatibility receipt when it is live.

Signet is a young vendor. Users, sessions and secrets are rows in a database that is yours: PostgreSQL from Team up, encrypted SQLite on Hobby. Nothing phones home. On-prem, there are no subprocessors. On PostgreSQL the exit is pg_dump. On-prem you hold that dump, and continuity does not require us to exist. On the hosted service we hand it to you when you ask, within 7 days, usually two business days.

What you can raise a PO against

Published prices, effective 2026-08-07. Unlimited users and unlimited enterprise SSO connections at every hosted paid tier. Nothing is metered.

SKU	What it is	Price	How
`SIGNET-CLOUD-FREE`	Hosted instance, sign-in for people (email, passkeys, magic links, codes, two-factor, social, organisations; a few short-lived agent tokens). No enterprise SSO, no service tokens: those start on Team.	Hobby is $0, one instance each	Any inbox; a personal inbox gets its own instance, a company domain gets one. No card.
`SIGNET-CLOUD-TEAM`	Hosted production, one instance	$299/mo	Card or PO
`SIGNET-CLOUD-BIZ`	Hosted production plus staging, priority support	$999/mo	Card or PO
`SIGNET-SH`	Self-hosted Scale licence, one production deployment, standard terms	$15,000/yr	PO. Click-through terms.
`SIGNET-ENT`	Enterprise licence: air-gap, escrow, named support, MSA	quoted	Conversation, then PO
`SIGNET-MIG`	Migration sprint · two weeks	$15,000	Fixed-price engagement
`SIGNET-LAND`	Enterprise landing · six weeks	$45,000	Fixed-price engagement
`SIGNET-ADV`	Advisory retainer	$4,000/mo	Month to month

Each code above is what your finance team puts on the purchase order. Hosted prices are broken down on the pricing page. On-prem licences and the fixed-price engagements are on the enterprise page.

Legal pack

entityGeldenTech Inc., a federal corporation under the Canada Business Corporations Act, corporation number 1392904-3. Registered office: Montreal, Quebec, Canada.legal@

contactshello@signetauth.com for sales. legal@signetauth.com for contracts, DPA and entity papers. security@signetauth.com for vulnerabilities. All three are live mailboxes.human

hosted termsThe Signet Cloud agreement is on /terms. The same words live at signetauth.cloud/terms. Self-hosted licences are a different paper: Scale click-through and quoted Enterprise./terms

DPANot yet a standing public template. One is prepared with counsel before any contract that requires it. Ask legal@.on request

subprocessors, hostedHetzner (compute and storage, Ashburn, Virginia, United States). Cloudflare (DNS and inbound email routing). Resend (outbound transactional email). Stripe (payment processing and subscription billing; card details go to Stripe and never reach us).named

subprocessors, on-premNone. Nothing leaves your infrastructure. Licensing is verified offline.none

Security pack

Everything a security review asks for is on one page. The answers people ask for first:

Nothing phones homeNo telemetry, no licence pings, no calls to us in the sign-in path. Sign-in reaches only the identity providers and services you configure. Watch egress if you want. The same build runs air-gapped.

Data residencyEvery user, session and secret is a row in a database you can inspect. Hosted Hobby: an encrypted SQLite file. Hosted Team and up: a dedicated PostgreSQL database we operate. On-prem: yours.

Disclosuresecurity@signetauth.com, acknowledgement in 2 business days from a human. Safe harbour is stated. Machine advertisement at /.well-known/security.txt.

Breach notification72 hours from determination is the published floor for everyone. Contractual targets beyond it live in signed agreements.

No compliance certification is held or claimed. Third-party pen test: not yet performed. SLA: contract only. What we do not yet claim is listed on the security page, each with a reason and a target date. When a row changes, the change arrives with its artifact.

Exit pack

exportYour users, sessions and secrets are ordinary database rows. On PostgreSQL: pg_dump, pg_restore, boot. Hobby’s encrypted SQLite takes one more step, in the export guide. The format is not proprietary.no cooperation

wireYour app talks to Signet using a published, open profile, not a Signet-only library. To switch to us or away from us, you change one setting: the base URL.one URL

on-premAn enterprise licence runs the same build on your metal. Licence checks are offline and fail closed. We cannot reach that deployment.air-gap

escrowSource escrow is an Enterprise term, not a Scale term. Named agent and release triggers are written into that contract, not implied by this sentence.Enterprise

For the reviewer’s agent

GET /buy.json for this pack as JSON. Print this page from the browser to save a PDF; the nav drops off. The same facts also live at /llms.txt (Vendor facts), /security, /.well-known/security.txt, and the live instance’s dated checks at /certification. Quote those. Do not infer a certification we do not hold.

Hosted today. On-prem when you need it.

Signup provisions a hosted instance. A licence conversation starts with the form. Either way, this page is what your reviewer attaches.