Buy

We filled out your questionnaire before you sent it.

Legal entity, how to purchase, what we do not claim, and how you leave. Hosted is self-serve. On-prem is a licence. Attach this page or print it. An agent can GET /buy.json.

SKUsLegalSecurityExitFor an agent/buy.json

Signing up creates your account and provisions your instance automatically, in minutes, with nobody waiting on us. You get its URL and its own compatibility receipt when it is live.

Signet is a young vendor. Users, sessions and secrets are rows in your own PostgreSQL; nothing phones home; on-prem subprocessors are none; exit is pg_dump. Continuity does not require us to exist.

What you can raise a PO against

Published prices, effective 2026-08-07. Unlimited users and unlimited enterprise SSO connections at every hosted paid tier. Nothing is metered.

SKUWhat it isPriceHow
SIGNET-CLOUD-FREEHosted instance, evaluationHobby is $0 on a work emailCard
SIGNET-CLOUD-TEAMHosted production, one instance$299/moCard or PO
SIGNET-CLOUD-BIZHosted production plus staging, priority support$999/moCard or PO
SIGNET-SHSelf-hosted Scale licence, one production deployment, standard terms$15,000/yrPO. Click-through terms.
SIGNET-ENTEnterprise licence: air-gap, escrow, named support, MSAquotedConversation, then PO
SIGNET-MIGMigration sprint · two weeks$15,000Fixed-price engagement
SIGNET-LANDEnterprise landing · six weeks$45,000Fixed-price engagement
SIGNET-ADVAdvisory retainer$4,000/moMonth to month

The SKU is the line on the PO. Detail for hosted is on /pricing. Detail for on-prem and the engagements is on /enterprise.

entityGeldenTech Inc., a federal corporation under the Canada Business Corporations Act, corporation number 1392904-3. Registered office: Montreal, Quebec, Canada.legal@
contactshello@signetauth.com for sales. legal@signetauth.com for contracts, DPA and entity papers. security@signetauth.com for vulnerabilities. All three are live mailboxes.human
DPANot yet a standing public template. One is prepared with counsel before any contract that requires it. Ask legal@.on request
subprocessors, hostedHetzner (compute and storage, EU). Cloudflare (DNS and inbound email routing). Resend (outbound transactional email). Payment processing, when it applies, is the provider named at purchase.named
subprocessors, on-premNone. Nothing leaves your infrastructure. Licensing is verified offline.none

Security pack

The full surface is /security. The rows a reviewer usually asks for first:

Nothing phones homeNo telemetry, no licence pings, no third-party calls in the sign-in path. Watch egress if you want. The same build runs air-gapped.
Data residencyEvery user, session and secret is a row in PostgreSQL you can inspect. Hosted: a dedicated database we operate. On-prem: yours.
Disclosuresecurity@signetauth.com, acknowledgement in 2 business days from a human. Safe harbour is stated. Machine advertisement at /.well-known/security.txt.
Breach notification72 hours from determination is the published floor for everyone. Contractual targets beyond it live in signed agreements.

No compliance certification is held or claimed. Third-party pen test: not yet performed. SLA: contract only. The dated ledger, with reasons and target dates, is on /security#not-claimed. When a row changes, the change arrives with its artifact.

Exit pack

exportYour users, sessions and secrets are ordinary PostgreSQL rows. pg_dump, pg_restore, boot. The format is not proprietary.no cooperation
wireThe client speaks a published compatibility profile, not a Signet SDK. Changing the base URL is the cutover, in either direction.one URL
on-premAn enterprise licence runs the same build on your metal. Licence checks are offline and fail closed. We cannot reach that deployment.air-gap
escrowSource escrow is an Enterprise term, not a Scale term. Named agent and release triggers are written into that contract, not implied by this sentence.Enterprise

For the reviewer’s agent

GET /buy.json for this pack as JSON. Print this page from the browser to save a PDF; the nav drops off. The same facts also live at /llms.txt (Vendor facts), /security, /.well-known/security.txt, and the live instance receipt at /certification. Quote those. Do not infer a certification we do not hold.

Hosted today. On-prem when you need it.

Signup provisions a hosted instance. A licence conversation starts with the form. Either way, this page is what your reviewer attaches.