Skip to main content

Free Tier

The free tier gives you full cryptographic functionality — signing, timestamping, hash chaining, and offline verification — with two limits: 30-day retention and 10 bundle exports per month.

What is included on the free tier​

All cryptographic features are fully intact on the free tier. There is no degraded signing, no mock timestamps, and no feature flags on the chain itself. Every entry is:

  • Signed with ECDSA P-256
  • Timestamped by an independent public RFC 3161 timestamp authority (non-qualified — clearly labelled)
  • Hash-chained to the previous entry
  • Verifiable offline using the verify.html file in any export bundle

After 30 days, the original event payload bytes are deleted by an hourly retention scheduler. The cryptographic envelope of each entry (signature, hash-chain linkage, RFC 3161 timestamp token) remains intact — the chain still verifies, and a signed retention-marker entry is appended on every non-empty purge run. The issue panel and admin page render purged entries with a "purged · retention policy" label; the rest of the entry's metadata (entry id, signature algorithm, timestamping authority) stays available for support and audit purposes.

Limits​

Retention — 30 days​

Audit chain entries older than 30 days are purged from the free tier. Purged entries are replaced with a redaction marker appended to the chain — the chain continues to verify, and the redaction marker itself is signed and timestamped. This preserves cryptographic continuity while enforcing the retention limit.

Upgrade to Standard or Advanced edition for 1-year or unlimited retention.

Exports — 10 per calendar month​

You can export a maximum of 10 evidence bundles per calendar month. The month resets at 00:00 UTC on the first day of each calendar month, aligned with the Atlassian Marketplace billing cycle.

The admin page shows:

  • How many exports have been used this month
  • How many remain
  • The exact UTC reset date

Attempting an export after the 10-export limit is reached returns a clear message: "Monthly export limit reached — 10 of 10 exports used this month — resets in N days." No partial export is generated and no quota is consumed by a rejected request.

Non-qualified timestamps — what that means​

Per-event timestamps come from a free, publicly accessible RFC 3161 timestamp authority (such as FreeTSA or DigiCert). These are not listed on any EU national Trusted List and are not from a Qualified Trust Service Provider (QTSP). This means:

  • They are cryptographically sound RFC 3161 timestamps — they prove that the data existed at a specific point in time according to an independent third-party clock, not Attestsys's
  • They are not QTSP-backed — they don't carry the stronger qualified timestamping guarantee that comes with EU Trusted List providers
  • Every free-tier export and every free-tier trust footprint popup clearly labels timestamps as NON_QUALIFIED

On the free tier, your audit chain carries per-event non-qualified timestamps only. Paid editions (Standard and Advanced) add a daily EU-qualified checkpoint over your audit chain head: one qualified RFC 3161 timestamp per day from an EU Trusted List QTSP that anchors every entry up to that point. Enterprise adds per-event qualified timestamping with your choice of QTSP and jurisdiction.

Upgrading​

Upgrade prompts appear in:

  • The issue panel footer
  • The admin page when the export limit is reached
  • The export quota-exceeded message

Upgrades are processed through the Atlassian Marketplace billing system.