Licensing and security
How Tagaris is licensed, in plain terms. Keys arrive by email within minutes of purchase. Verification is offline. Annual licences never phone home. And if a licence lapses, nothing is deleted and you are never locked out of your own data.
Verification is offline
Applying a licence key contacts our licensing service once, to activate the install and collect a signed certificate. From then on Tagaris checks that certificate's Ed25519 signature on your own server; day to day use makes no calls to us.
For an air-gapped server we issue a licence file by email instead, which applies with no internet at all. The signing private key stays on our side and never ships in an install. Your copy holds only the public key, which can verify a licence but cannot create one.
- Activate once, then offline. Entitlements are read from the signed certificate on your server.
- Air-gapped friendly. A licence file applies with no internet at all.
- Only the public key ships. It can verify, never mint, a licence.
- Licences stack. A seat plan and a beta key can be active on the same install at once.
Annual is offline; monthly checks in once a day
For an annual licence the signed certificate covers the whole year. After the one activation call, or none at all with a licence file, there is nothing to phone home about: the instance can stay offline the whole time.
A monthly subscription is the one exception, and we would rather be straight about it than claim an unqualified "no phone home". A monthly key is short lived, and while the subscription is active the instance makes one small daily check that renews it. That is what makes a cancellation actually take effect. It keeps working through short outages, and if you want zero outbound calls, choose an annual licence.
If a licence lapses
The instance reverts to the free plan, which allows a single user. It happens gently and nothing is destroyed.
Licensed
Everyone works, with their Admin, Editor or Viewer role.
Grace, 14 days
After expiry everyone keeps working while the admin is warned to renew.
Reverted
The owner keeps access. The rest are suspended, not deleted.
Renewed
Add a fresh key and every suspended user is restored at once.
One caveat on grace: paid features (including single sign-on) switch off at expiry itself. The 14-day grace covers password sign-in for existing users.
Suspended is not removed. A suspended user can still sign in and is told exactly what has happened; their account and everything they could see are intact and return the moment the licence is renewed. Throughout all of this your assets are untouched and export still works.
Your data is yours
- No remote kill switch. An activated annual licence verifies offline for its whole term; we have no way to reach in and disable it. A monthly subscription simply stops renewing when cancelled.
- Never held hostage. The free tier is never limited by the number of assets or by export.
- Nothing deleted on lapse. Users and data stay; access returns on renewal.
- Export any time. The whole register goes to CSV or JSON on demand.
- Self-hosted. A self-hosted instance makes no third-party calls by default.
See the plans
Every paid plan includes all the team features. You only choose how many people.