One price per vault: infrastructure, encryption and architect help included.
Reserve your plan to get all three. No payment, no commitment — we talk first.
For early-stage companies running a single vault with multi-AZ DB backup
Per vault · up to 100,000 records · billed hourly, invoiced monthly
Credit card not required
For growing teams running production workloads with multi-region & multi-AZ DB backup
Per vault · up to 1 million records · billed hourly, invoiced monthly
Credit card not required
For enterprises running regulated workloads with 24/7 support
Contract terms tailored to your scope
Want it in your own cloud account? Databunker Pro self-hosts in AWS, GCP or Azure — same API, your keys, your infrastructure, and often lower cost at scale.
Still unsure which tier fits? Book a 15-minute call and we will size it with you.
Talk to usThree tiers, all with the full product suite. Startup is billed hourly per vault and covers up to 100,000 records, with the infrastructure included. Business is billed hourly per vault and covers up to 1 million records, adding multi-region Aurora Global Database, cross-region failover and 7-day point-in-time recovery. Enterprise is a custom contract with volume discounts, a dedicated SLA, and any specific terms your procurement requires — contact sales for pricing.
One user profile is one record — and everything attached to that profile is included in it. Consents, app data, sessions, and the full version history all travel with the profile at no extra charge, so enabling record versioning never multiplies your bill.
A single value tokenized through the Format-Preserving Tokenization API — a credit card, for example — also counts as one record. But a card held inside a user profile is not metered separately: profile plus card is still a single record.
In practice, your record count is your user count.
Startup is still the right tier, and the price does not change. The hourly rate is not a per-record charge — it covers a dedicated EC2 instance and a dedicated Amazon Aurora PostgreSQL database, Multi-AZ, running in the region you choose. That infrastructure costs the same whether it holds 5,000 records or 100,000, which is why the rate starts where it does instead of scaling down to nothing. Book a 15-minute call and we will size it with you.
You move up a tier — there is no per-record overage. Over 100,000 records, switch to Business; over 1 million, talk to us about Enterprise and volume pricing.
You keep it — it never left your servers. Databunker Pro is self-hosted, so the vault and its PostgreSQL backend sit on infrastructure you control for the whole life of the deployment. Most customers buy an annual license and have full read-write use throughout that term.
If you choose not to renew, the vault drops to read-only rather than shutting down: every record stays readable, and a bulk export dumps the entire set in one operation. Nothing is destroyed when a license lapses, and paying again is never the only route back to your own data.
Yes — Databunker OSS is free to self-host and covers the core vault: encrypted user records and tokenization. It is a good fit for evaluating the approach or for smaller projects, but it has limited enterprise security features.
If you need multi-tenancy, key rotation with Shamir key backup, advanced access control (CRBAC and masking policies), record versioning, fuzzy search, or format-preserving tokenization, choose Databunker Pro. Those capabilities are available only in the commercial edition.
Any cloud resource — EC2 instances, S3 buckets, RDS databases, Lambda functions, IAM roles, VPCs, security groups, and more. Each object in your cloud account that Databunker Radar scans counts as one resource.
Yes — every plan includes all three products. You can use Databunker Pro, Databunker Radar, and Databunker DPO independently or together.
Walk through your architecture with a Databunker engineer.
Find the right place to start.