Sovereign is the tier with single-tenant infrastructure, custom compliance posture, country-specific data residency, per-tenant branding, and a custom MSA. From $10,000/mo, with annual minimums and a 60-day TFC clause.
If your requirement is more capability or more headroom, Pro Suite or Executive is the right tier. Sovereign is for organizations whose requirement is dedicated infrastructure, custom compliance, or jurisdiction-specific data placement.
A multi-state health system or specialty hospital that needs HIPAA + state-specific residency for PHI, with a Phala-direct BAA in place and inference confined to a dedicated TEE pool that no other tenant shares.
An RIA, family office, or boutique investment bank whose internal control attestation requires single-tenant infrastructure, signed audit export at engagement granularity, and a custom MSA reviewed by external counsel.
A Canadian crown agency, Australian department, or U.S. state agency requiring data residency in a specific jurisdiction, dedicated infrastructure provable by attestation, and procurement-friendly contracting.
A law firm or consultancy with offices in multiple jurisdictions where matters must remain within national borders — Canada-only, EU-only, UK-only — with per-region key custody and per-region attestation reports.
Sovereign is everything in Executive, plus the items below. The cryptographic floor — post-quantum transport, AES-256-GCM at rest, TEE-isolated inference, signed audit log, response signature verification — is identical to every paid tier. The differentiation is dedication, jurisdiction, and contract.
Every ArcaKey tier runs inference inside a hardware-attested Trusted Execution Environment — Intel TDX + NVIDIA H100 Confidential Computing. In Pro Suite and Executive, sessions land in a shared TEE pool — isolated cryptographically but co-resident operationally. In Sovereign, your organization receives a dedicated GCP A3 CC pool that no other tenant shares, with attestation reports that name your pool in the signed audit log.
Encryption keys for Sovereign deployments are region-isolated and, on request, client-controlled. The end-to-end-to-enclave key exchange — meaning the application server is cryptographically excluded from the plaintext path — is live on Sovereign today. ArcaKey cannot read Sovereign content by construction, not by policy.
For the full technical surface, see the Architecture Paper and /organizations for the deployment overview.
Sovereign is contracted per engagement. Annual minimums apply, with a 60-day Termination for Convenience clause. Custom MSA, DPA, and BAA terms are negotiated from your paper. Initial scoping conversations take roughly 30 minutes; a written proposal follows within five business days.
Tell us what you’re trying to solve. We’ll respond within one business day with a scoping call or a clear referral to the tier that fits.