Pay for what you verify.

By default, the SDK keeps raw prompt and response text on your machine and sends content-blind commitments plus operational metadata. Do not add raw content to optional metadata fields or support requests.

On Free, Pro and Max, you do — you bring your own Gemini or OpenAI key, add it in the dashboard, and those model calls land on your provider bill at your rates. Audit-event credits cover capture, chaining, anchoring and exports; they are not model tokens. Premium can either keep using its own key or switch to Foxy's managed keys, where the model calls are on us. Your key is stored encrypted, used only in memory at grading time, and never shown back to you or written into your audit chain. See the judge.

We're currently completing our SOC 2 Type I audit. Until it's issued, we won't claim certification — we'll tell you exactly where we are in the process if you ask.

Your hash chain is append-only and independently re-computable, so an outage doesn't corrupt or invalidate what's already been recorded. New calls queue locally in the SDK and sync once we're back.

Yes — Pro and Max can be cancelled from the dashboard and remain available through the paid period. Custom plans follow the terms in your agreement.