Pricing

Enterprise pricing, scoped to your program

Vault JS is built for enterprises with mobile apps, websites and CTV apps across many regions, and real legal exposure. Every program is priced to what you monitor.

Monitor every platform your customers use

Mobile apps, websites and CTV apps, each priced on its own, so you cover exactly the platforms you need.

Mobile App Monitoring

Runs your live iOS and Android apps through real user journeys (install, first open, consent prompt, login, browse, purchase) and records every SDK and network call, including pre-consent traffic and what changes from release to release.

Website Monitoring

Tests every page in scope across locations and consent states, including logged-in journeys, and flags tracking that fires before consent or against the user’s choice.

CTV Monitoring

Tests connected TV apps across platforms and user flows for tracking and VPPA exposure, where most companies have no visibility at all.

Security Monitoring (add-on)

Watches third-party scripts for compromise and data skimming, alongside your privacy findings.

Everything in Vault JS Enterprise

Every program includes the full platform. You choose how much to monitor, not which features you get.

Unlimited frameworks and regions

GDPR, CCPA/CPRA, CIPA, HIPAA, VPPA, the US state laws and more, mapped to technical controls.

Every app, site and platform in scope

All the mobile apps, websites and CTV apps in your program, under one platform.

Full surface scanning

Screens, pages, SDKs, scripts and data flows across consent scenarios, including logged-in journeys.

Custom controls

Rules tailored to your own risks, on top of the pre-built Control Library.

Vendor inventory and flow mapping

Every third-party vendor and what it receives, classified by our AI-maintained libraries of 500,000+ cookies and 10,000+ ad tech vendors.

Audit-ready evidence

Dated records of what fired, where and when, ready for counsel, auditors and regulators.

Alerts where you work

Findings sent to Slack, Jira and your CMP.

Assigned Customer Success Manager

One person who knows your program and tunes it with you, so every page run goes where it finds the most risk.

What shapes your price

You decide the scope. Start with your highest-risk apps, pages and journeys, and expand when you’re ready. Each platform is priced on its own levers.

Your Customer Success Manager reviews coverage with you on an ongoing basis, cutting runs that aren’t finding anything and moving them to the apps, pages, scenarios and journeys that carry the most risk. The goal is the most value from every run, not the most runs.

MOBILE

Number of apps and scan frequency

Mobile comes in small or large packages based on how many iOS and Android apps you cover and how often we run them through real user journeys.

WEB

Page runs

How many URLs we test, how often, and in how many scenarios. A scenario is a unique combination of location and consent preference, such as a California visitor who opts out.

WEB AND MOBILE

Automated users

Journeys that log in, add to cart or check out use automated users. They cost more than anonymous runs because they reach the screens and pages where the most sensitive data flows.

CTV

Platforms, user flows and frequency

Priced by the number of CTV platforms, the user flows we test on each, and how often we scan them.

What happens next

From first call to a scoped proposal, in four steps.

1

Scoping call

We walk through your properties, apps, regions and the laws you need to cover.

2

Free site analysis

We scan one of your sites and show you what fires before and after consent, so you see the findings before you buy.

3

Proposal

You get a quote built from your page runs, scenarios, users, apps and add-ons.

4

Onboarding

Your Customer Success Manager sets up frameworks, scenarios and alerts, and the first findings start coming in.

Pricing questions

Because no two enterprise programs are the same size. A retailer testing a few hundred pages in two regions and a streaming company testing apps, CTV and logged-in journeys in twenty need very different coverage. We quote from the drivers above, so you pay for what you monitor.

A unique combination of location and consent preference. For example, a California visitor who opts out of sale and sharing, a visitor sending a Global Privacy Control signal, and an EU visitor who rejects all are three scenarios. Each page you monitor is tested in every scenario you choose.

Automated users log in, browse, add to cart and check out the way a real customer would. Those journeys take more work to build and run than anonymous page loads, and they reach the pages where personal and payment data is most exposed.

Yes. Your Customer Success Manager will scope and quote the change, and we add the new coverage as soon as it’s approved.

No. Vault JS tests your properties from the outside, the way a regulator or a plaintiff’s expert would. There’s no tag, SDK or code to deploy.

CIPA allows statutory damages of $5,000 per violation, and a single class action can cover every visitor to a site. Monitoring is scoped to find those problems before a plaintiff’s attorney does, starting with the pages and journeys where your exposure is highest.

We retired them in 2026. The lowest tiers did not cover what most programs needed once a customer looked at every site, app and scenario they wanted monitored, so the published price was often lower than the program they would actually buy. We did not want pricing that looked lower than it was. Every program is now scoped to the page runs, scenarios, apps and platforms it covers, and quoted after a scoping call and a free site analysis. Older articles and directories may still show earlier published tiers; those no longer apply.

Get pricing for your program

Tell us what you need covered. We'll scope it with you and send a proposal built for your properties, apps and regions.