Licensing¶
MazeVault License Tiers and Feature Matrix
Document Version: 1.0.0
Last Updated: 2026-02-10
1. License Model¶
MazeVault uses a per-installation license model with annual renewal. Each license is bound to a single deployment and includes:
- License key enrollment and validation
- Periodic heartbeat verification with the license server
- Feature gating based on the selected tier
- Grace period for temporary connectivity issues
2. Feature Matrix¶
| Feature | Business | Enterprise | Custom |
|---|---|---|---|
| Secrets Management | |||
| Encrypted Secret Storage | ✅ | ✅ | ✅ |
| Secret Versioning | ✅ | ✅ | ✅ |
| Secret Sharing (Team) | ✅ | ✅ | ✅ |
| Secret Rotation | ✅ | ✅ | ✅ |
| Zero-Knowledge Encryption | — | ✅ | ✅ |
| PKI & Certificates | |||
| Internal Certificate Authority | ✅ | ✅ | ✅ |
| Certificate Lifecycle Management | ✅ | ✅ | ✅ |
| OCSP Responder | ✅ | ✅ | ✅ |
| CRL Distribution | ✅ | ✅ | ✅ |
| SCEP Protocol | — | ✅ | ✅ |
| EST Protocol | — | ✅ | ✅ |
| ACME Protocol | — | ✅ | ✅ |
| External CA Integration | — | ✅ | ✅ |
| Access Control | |||
| Role-Based Access Control | ✅ | ✅ | ✅ |
| Project Isolation | ✅ | ✅ | ✅ |
| Local Authentication | ✅ | ✅ | ✅ |
| LDAP Integration | — | ✅ | ✅ |
| SSO (Azure Entra ID) | — | ✅ | ✅ |
| SSO (GitHub / GitLab) | — | ✅ | ✅ |
| SAML 2.0 | — | — | ✅ |
| Multi-Factor Authentication | ✅ | ✅ | ✅ |
| Deployment & Operations | |||
| Docker Compose Deployment | ✅ | ✅ | ✅ |
| Kubernetes (AKS) Deployment | — | ✅ | ✅ |
| Helm Charts | — | ✅ | ✅ |
| Multi-Datacenter Sync | — | ✅ | ✅ |
| Offline Deployment Package | — | ✅ | ✅ |
| Integrations | |||
| Azure Key Vault | — | ✅ | ✅ |
| AWS Secrets Manager | — | ✅ | ✅ |
| HashiCorp Vault | — | — | ✅ |
| HSM Support | — | — | ✅ |
| Custom Integrations | — | — | ✅ |
| Support | |||
| Email Support | ✅ | ✅ | ✅ |
| Priority Support | — | ✅ | ✅ |
| Dedicated Support Engineer | — | — | ✅ |
| SLA Guarantee | — | 99.5% | 99.9% |
| On-Site Support | — | — | ✅ |
3. License Enrollment¶
Initial Setup¶
- Obtain your license key from the MazeVault sales team
- During first deployment, the system will prompt for license enrollment
- Enter the license key in the administration interface
- The system validates the key with the MazeVault license server
- Upon successful validation, all licensed features are activated
License Heartbeat¶
The MazeVault platform periodically validates the license status:
- Heartbeat Interval: Every 24 hours
- Grace Period: 30 days without connectivity to the license server
- Offline Mode: Available for Enterprise and Custom tiers with pre-provisioned offline tokens
License Renewal¶
- Renewal notifications are sent 60 days before license expiration
- The platform continues to operate during the renewal period
- After expiration + grace period, the system enters read-only mode (no new secrets or certificates can be created)
4. Contact¶
For licensing inquiries, upgrades, or custom tier negotiations:
- Email: info@mazevault.com
- Portal: https://admin.mazevault.com
Related¶
- Platform Overview — Architecture overview
- Deployment Requirements — System requirements per tier