Simple pricing, set by daily event volume
Plans for every stage of your customer-facing audit log. Start free and upgrade when you need more volume, history or delivery.
Free
$0
For trying Santati and small projects.
Includes
- 1,000 events per day
- 1 month of retention
- Single sign-on (OIDC)
- SCIM directory sync
- Hash-chained, tamper-evident trails
- Search, export and read API
- Scoped API keys
No credit card required.
Starter
$49 / month
For teams shipping their first customer-facing audit log.
Includes
- 10,000 events per day
- 3 months of retention
- 1 webhook log stream (add-on)
- Single sign-on (OIDC)
- SCIM directory sync
- Hash-chained, tamper-evident trails
- Search, export and read API
- Scoped API keys
Growth Recommended
$199 / month
For products whose customers ask for audit evidence.
Includes
- 100,000 events per day
- 12 months of retention
- Up to 5 webhook log streams (add-on)
- Single sign-on (OIDC)
- SCIM directory sync
- Hash-chained, tamper-evident trails
- Search, export and read API
- Scoped API keys
Scale
$899 / month
For high-volume products that keep years of audit history.
Includes
- 1,000,000 events per day
- 7 years of retention
- Up to 25 webhook log streams (add-on)
- Single sign-on (OIDC)
- SCIM directory sync
- Hash-chained, tamper-evident trails
- Search, export and read API
- Scoped API keys
Enterprise
Dedicated infrastructure
A Santati deployment dedicated to your company, with daily volume, retention and terms set in your contract.
Everything in Scale, plus:
- Dedicated infrastructure
- Custom daily volume and retention
- Security review and custom terms
Webhook log streams
$19 / month per stream
Each log stream sends every new event to an HTTPS endpoint you own, signed so you can verify it came from Santati. You pay for each stream you set up, up to your plan's limit.
Compare plans
| Feature | Free | Starter | Growth | Scale | Enterprise |
|---|---|---|---|---|---|
| Volume and retention | |||||
| Events per day Counted per team per UTC day. Over the limit, new events are refused until 00:00 UTC and nothing is billed. | 1,000 | 10,000 | 100,000 | 1,000,000 | Custom |
| Retention How long events are kept. You set it per organization, up to this limit. | 1 month | 3 months | 12 months | 7 years | Custom |
| Per-minute ceilings Requests and events per minute, per team, across every API key. | 600 requests and 10,000 events | 600 requests and 10,000 events | 600 requests and 10,000 events | 600 requests and 10,000 events | Custom |
| Integrity and evidence | |||||
| Hash-chained trails Each event is chained to the one before it, so an edit or a gap is detectable. | Included | Included | Included | Included | Included |
| Chain verification reports A downloadable report proving a range of events is intact. | Included | Included | Included | Included | Included |
| Legal holds Pause deletion for an organization or a matched set of events. | Included | Included | Included | Included | Included |
| Redaction rules Hash or drop sensitive fields before an event is stored. | Included | Included | Included | Included | Included |
| Access and identity | |||||
| Scoped API keys Read, write and manage scopes, optionally limited to chosen trails. | Included | Included | Included | Included | Included |
| Account audit log Sign-ins and changes to your team, keys and settings, recorded as audit events. | Included | Included | Included | Included | Included |
| Single sign-on (OIDC) Members sign in through your identity provider. | Included | Included | Included | Included | Included |
| SCIM directory sync Your directory adds and removes team members. | Included | Included | Included | Included | Included |
| Delivery and integrations | |||||
| Webhook log streams Every new event sent to an HTTPS endpoint you own, signed and retried. | Not included | 1 | Up to 5 | Up to 25 | Custom |
| Log stream price Billed per stream, on top of the plan. | Not included | $19 / month each | $19 / month each | $19 / month each | Custom |
| Exports CSV or JSON Lines, through the API. | Included | Included | Included | Included | Included |
| Search and read API Filter by trail, event, actor, metadata and time, or search full text. | Included | Included | Included | Included | Included |
| MCP server Agents can create trails, record events and read them back. | Included | Included | Included | Included | Included |
| SDKs Python, Node, Go, Rust, Elixir, Ruby and PHP. | Included | Included | Included | Included | Included |
| Enterprise | |||||
| Dedicated infrastructure A Santati deployment that serves only your company. | Not included | Not included | Not included | Not included | Included |
| Custom terms and security review Your contract terms, and answers to your security questionnaire. | Not included | Not included | Not included | Not included | Included |
Frequently asked questions
Each audit event you send counts once, whether it arrives on its own or in a batch, so a batch of 100 counts as 100. Limits are counted per UTC day and reset at 00:00 UTC.
The API refuses new events with a 429 quota_exceeded response until 00:00 UTC, and you are never billed beyond your plan. Team admins get an email at 80% and at 100% of the limit. Upgrade at any time to raise it.
An organization is one of your customers. You tag each event with an organization ID, and Santati keeps each organization's events separate: reads are filtered by organization, and retention is set per organization.
You choose how long to keep events for each organization, up to your plan's limit: 1 month on Free, 3 months on Starter, 12 months on Growth and 7 years on Scale. You can lengthen retention at any time but never shorten it, so evidence can't be cut short. A legal hold pauses deletion until an admin lifts it.
A log stream sends every new event to an HTTPS webhook you own, signed so you can check it came from Santati. Failed deliveries are retried and can be replayed. Each stream costs $19 / month, up to your plan's limit: 1 on Starter, 5 on Growth and 25 on Scale. The Free plan does not include log streams.
Every plan, Free included, comes with single sign-on through any OpenID Connect provider and SCIM directory sync.
Santati is a REST API with official SDKs for Python, Node, Go, Rust, Elixir, Ruby and PHP, and any language that can make an HTTPS request works. The API reference covers every endpoint.
Any time. Export events as CSV or JSON Lines through the API, or stream them to your own webhook as they arrive.
In the United States, on Fly.io. The Security page lists the controls we run. Need dedicated infrastructure or another region? Talk to us about Enterprise.
Yes, at any time. Your plan stays active until the end of the period you've already paid for. Payments aren't refunded; the Terms of Service have the details.
Enterprise runs Santati on infrastructure dedicated to your company, with daily volume, retention and terms set in your contract. Contact sales to scope it.