[ STATION / DEDICATED ]
Single-tenant Postgres, object storage, and KMS key. We run the operations; you run your compliance review against a dedicated deployment that's yours alone.
Annual contract * three variants * sales-led -- book a discovery call
[ WHAT YOU GET ]
Your own Postgres instance, object storage, and KMS key. Not a logical tenant in shared infra -- a dedicated deployment we operate separately.
On contract termination, we destroy the master key. Your data is mathematically unrecoverable -- not a deletion promise, an encryption guarantee.
Annual security review by your team or your chosen firm. We provide system access, answer questionnaires, walk through our security model, and remediate findings. 16 hours of review support included on Pro.
Custom subdomain (yourcompany.cratersync.fm) or vanity domain (recordings.yourcompany.com). VPC peering and AWS PrivateLink available on Enterprise.
SAML or OIDC against your IdP, no shared identity layer. Dedicated DPA with custom retention and data-residency commitments.
[ THREE VARIANTS ]
Pricing per variant set during the discovery call. The shape:
[ STANDARD ]
The compliance baseline. Isolated stack, dedicated DPA, white-glove SSO.
[ PRO ]
Your clients see your domain, not ours. Your retention, your paper trail.
[ ENTERPRISE ]
For regulated industries: PrivateLink, dedicated CSM, custom SLA terms.
[ ONBOARDING ]
Discovery call (30 min)
Tell us about your compliance environment, expected volume, retention rules, SSO setup. We come back with a written proposal and the variant + price recommendation.
Contract + DPA
Annual MSA + Data Processing Agreement, customized to your retention / residency / audit terms. Source escrow paperwork if elected.
Provisioning
We provision your isolated stack. If SSO: we exchange metadata with your IdP. We hand your team connection details to verify before cutover.
Cutover + first sessions
Your team logs in via SSO. First production sessions recorded against the dedicated stack. We monitor; you produce.
[ AUDIT + COMPLIANCE ]
Right to review (Pro / Enterprise): Your team or your chosen security firm runs an annual review against the dedicated stack. We provide system access, answer questionnaires, walk your team through our security model, and remediate critical findings. Pro includes 16 hours of review support per year; Enterprise includes extended hours. Additional time bills at standard consulting rates.
Per-session encryption: Each session gets its own AES-256 DEK, envelope-wrapped against your dedicated master key with AAD bound to your organization id and session id. Cross-tenant unwrap is infeasible by design. On contract termination we destroy the master key, rendering every session in the dedicated stack mathematically unrecoverable.
Source escrow (optional, Pro+): We deposit our source code with a 3rd-party escrow agent (e.g. Iron Mountain). If we go bankrupt, fail to maintain the SLA, or materially breach the contract, the escrow releases the source to you under a perpetual license. The "what if they go bust?" question, answered without us shipping you the code today.
Data residency: Pro and Enterprise variants pin your stack to a specific region (US, EU, UK). The data never leaves. Written into the DPA.
[ STATION READY ]
30 minutes. Tell us about your environment, your compliance constraints, and what you're recording. We come back with a specific variant recommendation and a written proposal.
Book a discovery call