Pricing
Every plan watches your agent runs and signs a tamper-evident receipt for each one, verifiable offline against a public key. The difference is volume, how much we catch, and the enforcement and compliance tooling your team needs.
Free
No credit card required
100,000 audit events / month
- --One-line onboarding: `pip install prova-sdk; python -c "import prova_cp; prova_cp.demo()"`
- --Audit Vault with signed receipts
- --Run health: a 0-100 score per agent run (auto-pass / flag / needs-human)
- --Coordination-loop, PII, and prompt-injection detectors
- --Per-agent cost attribution + spend dashboard
- --Gateway checks in observe mode (allow / alert)
- --Dashboard browser with filters + search
- --Public verification endpoint
- --API + SDK access
Pro
popular1,000,000 audit events / month
- --Everything in Free
- --All five inline detectors (adds bias drift + groundedness)
- --Gateway enforcement: block before the model call
- --Custom JSON-DSL policies
- --Runtime autonomy boundaries (allowed_tools, max_steps, budget, scopes)
- --monthly_budget_cap policy
- --90-day receipt retention
- --Email support
For developers and small teams shipping agents in production.
Team
5,000,000 audit events / month
- --Everything in Pro
- --AI Inventory with topology graph
- --AI Risk Score dashboard + signed quarterly export
- --Compliance export (EU AI Act, FDA, SEC, HIPAA)
- --SIEM webhook export
- --RBAC + member management
- --Priority support
For organisations that need to prove it to auditors and the board.
Compliance
25,000,000 audit events / month
- --Everything in Team
- --EU AI Act Article 12 evidence pack, ready for the August 2026 deadline
- --HSM-backed receipt signing
- --Dedicated SLA
- --Named regulated-industry support
For regulated mid-market in EU financial services, insurance, healthcare, and broker-dealers under FINRA.
Enterprise
Run it in your environment, on your terms.
Custom pricing · unlimited events
- →Everything in Team
- →Self-hosted deployment (Docker + Helm), air-gapped supported
- →HSM-backed receipt signing
- →SAML / OIDC SSO + EU data residency
- →Per-org Risk Score weighting (regulatory profiles)
- →BAA, security review, DPA, and audit-grade SLAs
FAQ
What is an audit event?+
One signed receipt for one AI decision. Model calls, agent steps, tool calls, policy verdicts, and detector findings each emit one event into the Audit Vault.
Which plan should I choose?+
Free is the wedge: run health, loop / PII / injection detection, signed receipts, and observe-mode gateway checks, no card. Pro ($49/mo) adds the production features: all five detectors, gateway enforcement that blocks before the model call, custom policies, and autonomy boundaries. Team ($499/mo) adds the governance suite for auditors and the board: AI Inventory, the Risk Score with a signed quarterly export, compliance export, SIEM, and RBAC. Compliance (from $2,500/mo) adds the EU AI Act Article 12 evidence pack, HSM-backed signing, a dedicated SLA, and named regulated-industry support. Enterprise is for self-hosted, SSO, BAA, and an SLA.
What's the difference between Team and Compliance?+
Team is for engineering teams shipping agents in production. Compliance adds the EU AI Act Article 12 evidence pack, HSM-backed receipt signing, a dedicated SLA, and named regulated-industry support, for buyers who have to prove it to a regulator ahead of the Article 12 deadline in August 2026.
What happens if I go over my event allowance?+
Free stops at 100,000 events per month. Paid plans include the listed volume and are not hard-stopped mid-month; if you run consistently well above your plan we will reach out about the right tier. Dedicated high-volume pricing is handled on Enterprise.
Does it work with my framework?+
Yes. Prova works with LangGraph, CrewAI, AutoGen, the Vercel AI SDK, and any custom runtime that can call an HTTP endpoint. One ingest pipeline, one signed-receipt format, regardless of which framework emits the events.
How does gateway-mode enforcement work?+
POST your prompt and context to /api/v1/gateway/check before the model call. Policies and detectors run server-side and return an allow / alert / block verdict with the signed receipt. Block decisions never reach the model; both allow and block are captured in the audit trail.
What is the EU AI Act compliance use case?+
The EU AI Act establishes logging and traceability obligations for high-risk AI systems (credit, hiring, medical, legal). The Audit Vault produces signed receipts that meet Article 12 record-keeping requirements; the quarterly Risk Score export is the artifact your board and regulator can read on one page.
Are my receipts stored?+
Yes. The signed receipt store IS the audit trail. Receipt payload retention is configurable per ingest call; the signature and metadata are always retained for the audit trail to remain valid. Enterprise customers can keep all data in their own infrastructure via self-hosted deployment.
What is EU data residency and when will it be available?+
Enterprise plan customers can request that all data be stored in the EU region, ensuring no data leaves the European Economic Area. Available on Enterprise. Self-hosted deployments give you complete data residency control by default.
How is this different from a guardrail framework?+
A guardrail lives inside one model and stops working when you switch providers. The Prova control plane lives above the model. Policies, detectors, and signed receipts apply to every model in your stack the same way, with a single audit trail.
Catch the loop. Prove every decision.
No credit card. Wrap your agent graph in one line and get your first signed receipt in under a minute.
security and trust center →