Skip to content

Licensing

MazeVault License Tiers

Document Version: 1.0.0
Last Updated: 2026-02-10

1. License Model

MazeVault uses a per-installation license model. Commercial production licenses are issued for a specific deployment and renewed according to the commercial agreement. The PoC tier is always free of charge and is time-limited to a maximum of 3 months.

Each issued license may include:

  • License key enrollment and validation
  • Periodic heartbeat verification with the MazeVault licensing service
  • Grace period handling for temporary connectivity issues
  • Tier-scoped entitlement for the licensed deployment

Licensing defines the right to use and the enabled deployment scope. It does not by itself define support response times, availability commitments, RTO/RPO targets, or service credits. Those commitments are governed by the applicable support agreement and the MazeVault Support Policy and Product Lifecycle (LEG-CTR-005) where incorporated.

2. License Tiers

Tier Intended Use Commercial Model Notes
PoC Evaluation, pilot, or controlled validation deployment Free of charge Always time-limited to a maximum of 3 months
Small Business Standard commercial license for smaller production deployments Paid commercial license Scope is defined by the issued license and agreed delivery
Enterprise Commercial license for larger, regulated, or advanced deployments Paid commercial license Used for advanced deployment patterns, identity federation, and HSM-backed scenarios

3. Entitlement Scope

The exact entitlement of a deployment is defined by the issued license and the agreed implementation scope. In practice:

  • All licensed deployments include license enrollment, heartbeat validation, and the core MazeVault platform scope for secrets, certificates, and access control.
  • Enterprise is the tier used for advanced deployment patterns such as multi-datacenter operation, HSM-backed key custody, and enterprise identity integration.
  • Custom development, bespoke integrations, migration work, and extended support are additional services, not separate license tiers.

4. License Enrollment

Initial Setup

  1. Obtain your license key from the MazeVault sales team
  2. During first deployment, the system prompts for license enrollment
  3. Enter the license key in the administration interface
  4. The system validates the key with the MazeVault licensing service
  5. Upon successful validation, the licensed deployment scope is activated

License Heartbeat

The MazeVault platform periodically validates the license status:

  • Heartbeat Interval: Every 24 hours
  • Grace Period: 30 days without connectivity to the licensing service
  • Offline Mode: Available for Enterprise deployments with pre-provisioned offline tokens when included in the agreed delivery scope

License heartbeat exchanges are limited to license and deployment-status metadata needed to validate entitlement. Customer secrets, certificates, plaintext data, and MEK material are not transmitted as part of license validation. Where telemetry contains personal data or is operated through a Provider, the applicable DPA (LEG-CTR-004) and Subprocessor List (LEG-CTR-006) govern the processing chain.

Commercial License Renewal

  • Renewal notifications are sent 60 days before license expiration
  • The platform continues to operate during the renewal period
  • After expiration + grace period, the system enters read-only mode (no new secrets or certificates can be created)
  • PoC deployments expire automatically at the end of the approved evaluation period unless converted to a commercial license

5. Contact

For licensing inquiries, tier upgrades, or implementation scoping:

  • Email: info@mazevault.com