7 days
Fastest path. API key + webhook setup.
Enterprise
Enterprise-grade
data integrity.
In 30 days.
Deployment overview
30 days
From POC to live
7-21 days
Technical integration
4 models
SaaS, private cloud, hybrid, on-premise
€5K POC
Credited to your subscription
Full traceability
ROOTKey shows
exactly what changed.
Other tools tell you a file was tampered with. ROOTKey shows exactly what changed, who changed it, when and from where, and restores the last version proven valid.
- What
- Liability cap and signature changed
- Who
- j.smith@demo-company.example
- When
- Today · 11:52:07
- Where
- SharePoint › Legal
- RevealedThe altered parts light up against the sealed original - with who changed them, when and where.
- RestoredOnly what was altered returns to the sealed original, cryptographically verified.
ROI calculator
Understand
your exposure
Put the published average cost of a breach and the fine ceiling that applies to you beside the yearly cost of ROOTKey. Every figure has a source.
Choose your status to see the figures.
Average cost of a data breachUS$4.99MGlobal average, in US dollars as published, from the IBM Cost of a Data Breach Report 2026. Not adjusted to your profile.
---
Annual ROOTKey investment€24,900 to €149,400 per yearFoundation to Sovereign at list prices, billed yearly with the 17% discount. The final price depends on volume and deployment.
How the figures are calculated
- Breach cost: the global average in the IBM Cost of a Data Breach Report 2026 (602 organisations, breaches between March 2025 and February 2026), in US dollars as published. It is not scaled by size or sector.
- NIS2 fine: the ceilings in Article 34 of Directive (EU) 2022/2555, applied to the turnover you enter: €10M or 2% for essential entities, €7M or 1.4% for important entities, whichever is higher. These are minimum ceilings; your member state may set higher ones.
- DORA: for financial entities, Regulation (EU) 2022/2554 takes precedence over NIS2 as the specific law (lex specialis), so the two amounts are never added. Penalties for financial entities are set by each member state (Art. 50); critical ICT third-party providers face periodic penalty payments of up to 1% of average daily worldwide turnover, for up to six months (Art. 35).
- ROOTKey: the yearly list prices of the Foundation, Infrastructure and Sovereign tiers, with the 17% yearly discount.
Reference figures from published sources, not a forecast of your losses or a legal assessment.
Pricing simulator
Configure
your solution
Get an instant estimate tailored to your deployment model, data volume and integrations.
Step 1 · Deployment model
Step 2 · Storage needed
Step 3 · Native connectors
Select the connectors you already use - each one reduces the estimated implementation time.
Step 4 · API usage
Complete the steps above to see your estimate.
Enterprise readiness
Everything you need before
the first call
- AES-256 encryption at rest
- TLS 1.3 in transit
- Data residency configurable per deployment model
- Multi-tenant with logical isolation · on-premise option for full physical isolation
Evidence for NIS2 (Art. 21, 23), DORA (Art. 9, 17) and GDPR (Art. 32): a cryptographic audit trail, integrity reports and evidence packs.
“With an Enterprise custom deployment (private cloud or on-premise), your data stays wherever you decide.”
| Model | Data location |
|---|---|
| SaaS | Managed by ROOTKey · hosted in the EU |
| Private Cloud | Your cloud provider · your account |
| On-Premise | Entirely within your perimeter |
| Hybrid | On-premise for data · separate SaaS dashboards |
Recovery module: encrypted snapshots are stored according to your configuration.
14 days
IaC templates + network peering.
21 days
Full infrastructure provisioning.
18 days
On-premise anchor + SaaS layer.
Direct connections and integration
SharePointOneDriveAmazon S3Cloudflare R2REST APIWebhooks
What the POC includes
- Cryptographic integrity report
- Regulatory evidence pack
- Full technical wrap-up session
SLA expectations
FoundationStandard support
InfrastructureTechnical support + dedicated account manager
SovereignCustom SLAs + dedicated account manager
| NDA | Available on request - contact sales |
| MSA | Standard + custom available |
| DPA | Available on request |
| Subprocessor list | Available on request |
| Liability | Negotiable at the Sovereign tier |
| Contract terms | Enterprise contracts typically start at 12 months |
| Vendor lock-in | None - no proprietary formats, export your audit data at any time |
Is ROOTKey a backup solution?
No. Backup restores systems. ROOTKey proves whether the restored data can be trusted - they are complementary, not competing.
Do you store our data?
On the SaaS platform, ROOTKey hosts your data in the EU. With a private cloud or on-premise deployment, your data stays wherever you decide. For recovery, encrypted snapshots are stored according to your configuration.
How long does implementation take?
Technical integration takes 7-21 days, depending on the deployment model and existing integrations: 7 days for SaaS, 14 for private cloud, 18 for hybrid and 21 for on-premise. From POC to live takes 30 days. For an estimate for your configuration, see the pricing simulator.
Are you SOC 2 certified?
The SOC 2 Type 2 audit is in progress. ISO 27001 is also in progress. Contact sales for the current security posture document.
How does ROOTKey integrate with our SIEM?
Via REST API and webhooks. The native storage connectors (SharePoint, Amazon S3, Cloudflare R2 and OneDrive) are listed in the Connector Library.
€5,000
POC
Credited to your subscription
Subscription
CISO, DPO & SOC access
Enterprise contract
On-premise option available
Enterprise contact
Ready to prove
your data is trustworthy?
Talk to our team. We'll show you exactly where your integrity gaps are - in 30 minutes.
- Reply within 1 business day
- No commitment - exploratory call first
- Bring your CISO, DPO or procurement team