Skip to main content

Free Tier

The free tier gives you full cryptographic functionality — signing, timestamping, hash chaining, and offline verification — with two limits: 30-day retention and 10 bundle exports per month.

What is included on the free tier​

All cryptographic features are fully intact on the free tier. There is no degraded signing, no mock timestamps, and no feature flags on the chain itself. Every entry is:

  • Signed with ECDSA secp256k1
  • Timestamped by FreeTSA (a non-qualified RFC 3161 timestamp authority — clearly labelled)
  • Hash-chained to the previous entry
  • Verifiable offline using the verify.html file in any export bundle

Limits​

Retention — 30 days​

Audit chain entries older than 30 days are purged from the free tier. Purged entries are replaced with a redaction marker appended to the chain — the chain continues to verify, and the redaction marker itself is signed and timestamped. This preserves cryptographic continuity while enforcing the retention limit.

Upgrade to Standard or Advanced edition for 1-year or unlimited retention.

Exports — 10 per calendar month​

You can export a maximum of 10 evidence bundles per calendar month. The month resets at 00:00 UTC on the first day of each calendar month, aligned with the Atlassian Marketplace billing cycle.

The admin page shows:

  • How many exports have been used this month
  • How many remain
  • The exact UTC reset date

Attempting an export after the 10-export limit is reached returns a clear message: "Monthly export limit reached — 10 of 10 exports used this month — resets in N days." No partial export is generated and no quota is consumed by a rejected request.

FreeTSA timestamps — what "non-qualified" means​

FreeTSA is a free, publicly accessible RFC 3161 timestamp authority. It is not listed on any EU national Trusted List and does not qualify as a Qualified Trust Service Provider (QTSP) under eIDAS. This means:

  • FreeTSA timestamps do not carry the qualified presumption of accuracy and integrity under eIDAS Art. 41
  • They are still valid RFC 3161 timestamps — they prove that the data existed at a specific point in time according to FreeTSA's server clock
  • Every free-tier export and every free-tier trust footprint popup clearly labels timestamps as FreeTSA — NON_QUALIFIED

Upgrade to Standard edition (optional QTSP upgrade) or Advanced edition (QTSP mandatory) for qualified timestamps from EU Trusted List providers QuoVadis Trustlink B.V. (NL) and GlobalSign nv-sa (BE).

Upgrading​

Upgrade prompts appear in:

  • The issue panel footer
  • The admin page when the export limit is reached
  • The export quota-exceeded message

Upgrades are processed through the Atlassian Marketplace billing system.