Pay for what you verify.

By default, the SDK keeps raw prompt and response text on your machine and sends content-blind commitments plus operational metadata. Do not add raw content to optional metadata fields or support requests.

On Pro and Max — and on a free account — you do: you bring your own Gemini or OpenAI key, add it in the dashboard, and those model calls land on your provider bill at your rates. Audit-event credits cover capture, chaining, anchoring and exports; they are not model tokens. Premium can either keep using its own key or switch to Foxy's managed keys, where the model calls are on us. Your key is stored encrypted, used only in memory at grading time, and never shown back to you or written into your audit chain. See the judge.

Pro and Max are monthly subscriptions in US dollars. Payment is handled by Paddle, who act as the merchant of record and appear as the seller on your statement and your receipt — card details are entered on Paddle's checkout and never reach Foxy Audit. Any sales tax or VAT is calculated and remitted by Paddle at checkout. Premium is agreed in writing and invoiced directly, so it does not go through the card checkout at all.

We're currently completing our SOC 2 Type I audit. Until it's issued, we won't claim certification — we'll tell you exactly where we are in the process if you ask.

Your hash chain is append-only and independently re-computable, so an outage doesn't corrupt or invalidate what's already been recorded. New calls queue locally in the SDK and sync once we're back.

Yes — Pro and Max can be cancelled from the dashboard and remain available through the paid period, so you keep what you have already paid for. Premium follows the terms in your agreement.