Start free.
Scale when ready.
Three capability tiers: enforcement, policy, execution. Every plan includes the enforcement layer — step-order, replay protection, cryptographic receipts before any action runs. Add server-side policy maps to lock your workflow at provisioning. Add the execution plugin to close the receipt chain end to end.
TIER 01
Enforcement
Gate enforces step order, replay protection, and sequence sealing. A cryptographic receipt is written before any action runs — whether the decision is ALLOW, DENY, or HALT.
All plans
→
TIER 02
Remote Policy Maps
Your workflow spine is registered server-side at provisioning by the AgenticRail team. Staff cannot override step order via payload — the contract is set once by your risk team and locked.
Scale · Enterprise
→
TIER 03
Execution Plugin
On ALLOW, the wrapper calls your registered endpoint and receipts the response. The audit trail covers both the gate decision and the execution outcome in one signed chain.
Enterprise — managed onboarding
Support: Growth and above — email reply within 24 hours. Professional and above — priority email. Enterprise includes phone support. Questions before signing up? hello@agenticrail.nz
Free
$0 / month
- 10,000 gate decisions / month
- Hard cap — no overages
- 300 req / min rate limit
- Public demo key — no signup
- Full API + receipt chain
- 7-day receipt retention
- Community support
Growth
$399 / month
- 500,000 gate decisions / month
- Overages at $1.00 / 1K decisions
- 3,000 req / min rate limit
- 1 production API key
- 90-day receipt retention
- Compliance reports (HTML + JSON)
- 99.5% uptime SLA
- Email support — reply within 24 hrs
Professional
$499 / month
- 2,000,000 gate decisions / month
- Overages at $0.75 / 1K decisions
- 10,000 req / min rate limit
- 3 production API keys
- 6-month receipt retention
- Compliance reports (HTML + JSON + PDF)
- 99.9% uptime SLA
- Priority email support
Scale
$799 / month
- 5,000,000 gate decisions / month
- Overages at $0.50 / 1K decisions
- 30,000 req / min rate limit
- 10 production API keys
- 1-year receipt retention
- Compliance reports (HTML + JSON + PDF)
- Remote Policy Maps — spine registered server-side
- Staff cannot override step order via payload
- 99.9% uptime SLA
- Priority support
Enterprise
$1,999+ / month
10M+ decisions — negotiated
- 10M+ gate decisions / month
- Overages at $0.30 / 1K decisions
- Custom rate limit
- Unlimited production API keys
- Multi-year receipt retention
- Compliance reports (HTML + JSON + PDF)
- Remote Policy Maps — spine registered server-side
- Execution Plugin — wrapper calls your endpoint on ALLOW
- End-to-end receipt chain: approval + execution outcome
- 99.95% uptime SLA
- EU DPA + SOC 2
- Dedicated instance
- Priority phone support
Common questions
For API detail, see docs. For compliance coverage, see the compliance matrix.
How does self-onboarding work?
Choose a plan and complete Stripe checkout. Your API key is created automatically and arrives by email — no human involved. You can make your first production gate call within minutes of payment. Professional plan onboarding is via email — reply within 24 hours.
What counts as a gate decision?
Each call to
POST /v1/evaluate is one gate decision — whether it returns ALLOW, DENY, or HALT. The free tier uses the public demo key (DEMO-AGENTICRAIL-PUBLIC-2026), shared across all free users and isolated to demo- prefixed sequences.How do overages work?
On Growth, Professional, Scale, and Enterprise, once you exceed your monthly decision allowance, additional decisions are billed at your tier's overage rate. Overage rates are always higher than your effective in-plan rate — so upgrading is the rational choice at sustained volume — but low enough that a spike month doesn't punish. Example: a Growth customer who hits 600K decisions in a month pays $399 + $100 = $499. Free tier is hard-capped at 10K with no overages.
Can I try the API before paying?
Yes — the public demo key works immediately with no signup. Use the interactive demo or hit the API directly. The Workflow Builder generates a ready-to-run curl command for your use case.
What is a compliance report?
A cryptographically verified audit trail for a sequence — cover page, enforcement log, receipt chain proof, and an AI-generated compliance narrative. Available as HTML and JSON on Growth, plus PDF on Professional, Scale, and above. Generated at report.agenticrail.nz or via
POST /v1/report.Do you have a DPA for GDPR compliance?
Yes. See our Data Processing Agreement. Subprocessors: Cloudflare (infrastructure), Google Gemini (compliance narrative generation in the report worker, summary statistics only — no payload data), Stripe (payments), Resend (transactional email). No payload content is stored — only enforcement decisions and receipt metadata.
What are Remote Policy Maps?
At provisioning, your workflow spine — the ordered list of steps your agent is permitted to execute — is registered server-side against your API key. From that point on, the gate reads the spine from our system, not from the client payload. This means no one on your team can reorder, skip, or modify the approved workflow by changing what the agent sends. The spine becomes a compliance artefact: agreed by your risk team at signup, locked, and proved by every receipt. Available on Scale and Enterprise — onboarded by the AgenticRail team.
What is the Execution Plugin?
An optional add-on (Enterprise) where the AgenticRail wrapper calls your registered endpoint on every ALLOW decision and receipts the response alongside the gate decision. For financial workflows this means the receipt chain includes not just "the gate approved the transfer" but also "the transfer ran and here is your system's confirmation." Your risk team approved the spine at onboarding, the gate enforced it, the wrapper executed it, and the receipt proves all three — in one signed chain. Requires managed onboarding: contact us.