Vaultline
LOG IN START FREE
PLANS / PER-SEAT / CANCEL ANYTIME

Pricing that scales with your team, not your risk.

Every plan ships the same zero-knowledge vault. You pay for seats and admin depth, never for encryption. 14-day trial on any tier, no card required.

MONTHLY
YEARLY SAVE 20%
01STARTER
Starter $3 /user/mo

Shared vaults for small teams that need to stop pasting secrets into chat.

  • Core vault, for up to 10 people
  • Unlimited passwords and secure notes
  • 3 shared team vaults
  • Browser extension and mobile apps
  • Two-factor authentication
  • Email support
START FREE TRIAL →
02TEAM MOST POPULAR
Team $7 /user/mo

Role-based access and audit history for teams who answer to a security review.

  • Everything in Starter, plus
  • Unlimited members and shared vaults
  • Role-based access controls
  • Vault activity log, 1-year retention
  • Breach monitoring and weak-password reports
  • Guest seats for contractors
  • Priority support
START FREE TRIAL →
03ENTERPRISE
Enterprise Custom annual

SSO, SCIM, and self-hosting for organizations with a compliance program.

  • Everything in Team, plus
  • SAML SSO and SCIM provisioning
  • Self-hosted or dedicated cloud
  • Custom retention and legal hold
  • SIEM export and admin API
  • Dedicated account engineer, 99.99% SLA
CONTACT SALES →

Prices in USD, billed per active seat. Nonprofits and open-source teams get 30% off - apply here.

02 / Compare

What's in each tier.

Encryption is never a paid feature. The tiers differ in how many people you manage and how much control your admins get, not in how safe your secrets are.

Starter Team Enterprise
Vault
End-to-end encrypted vault (XChaCha20)···
MembersUp to 10UnlimitedUnlimited
Shared vaults3UnlimitedUnlimited
Guest seats–10Unlimited
Access control
Role-based permissions–··
SAML SSO / SCIM––·
Device trust policies–··
Audit & compliance
Vault activity log30 days1 yearCustom
Breach monitoring–··
SIEM export / admin API––·
Self-hosted deployment––·
SupportEmailPriorityDedicated, 99.99% SLA
03 / Trust

Same cryptography on every plan.

Vaultline is zero-knowledge by architecture: keys are derived on your device and never leave it. Audits and disclosures are public on every tier.

Encryption
XChaCha20-Poly1305

Client-side, with Argon2id key derivation.

Audits
SOC 2 Type II

Plus annual third-party penetration tests, reports public.

Compliance
GDPR / HIPAA-ready

DPAs and BAAs available on Team and above.

Uptime
99.98% trailing 12 mo

Offline read access even when we are down.

04 / FAQ

Questions, answered plainly.

What counts as a billable seat?

Only active members. Guests on Team and Enterprise are free within their allotment, and deactivated members stop billing at the next cycle. We true-up monthly, so you never pay for empty seats.

Can we switch plans or cancel mid-cycle?

Yes. Upgrades apply immediately and are prorated; downgrades and cancellations take effect at the end of the current cycle. Your vault data stays exportable in plaintext or encrypted formats at any time.

What happens to our data if we leave?

You can export everything before you go. After cancellation the vault becomes read-only for 90 days, then ciphertext is permanently deleted. We hold no keys, so there is nothing for us to read in the meantime.

Do you offer a free plan?

Every tier has a 14-day full-featured trial with no card. For individuals we keep a free personal vault (1 user, unlimited items) that upgrades cleanly into a team later.

How does self-hosting work on Enterprise?

You run the same server we do, shipped as a signed container with an offline license. Updates are pull-based on your schedule, and our team supports your deployment under the same SLA as cloud.

Rotate your team onto Vaultline this week.

$ vaultline import --from=csv,1password,bitwarden
START FREE TRIAL TALK TO SALES