Pay for capacity, never for trust

No, on any plan. Every secret is encrypted on your device before it leaves, and the keys never touch our servers. Paying for Pock buys more capacity and team features; the security model is identical on every tier. Even if we were compelled to hand over our databases, there is nothing readable in them.

A machine identity is a non-human vault member, such as a CI pipeline or a deploy server, with its own key pair and its own scoped access. Instead of pasting a long-lived token into your CI config, you enroll the machine, grant it exactly the projects and environments it needs, and revoke it independently of any human. Business plans include 5 per seat; more can be added.

You are never locked out of your own secrets. Your vault stays readable and export always works. Downgrading only pauses plan features like unlimited shares or team management until you're back under the free limits. And because your data is encrypted with keys we never see, withholding it is not something we are capable of.

Self-hosting is on the roadmap for Enterprise. Because the encryption happens entirely on your devices, the server is a deliberately dumb zero-knowledge relay, which makes it a good candidate for running inside your own infrastructure. If this is a requirement for you, email hello@pock.sh and tell us about your setup.