Demo
Evaluating SOFI without infrastructure
$0/forever
Hosted preview, no install.
Open SaaS demo- 1 sandbox tenant on sofitest.dtsofi.com
- PostgreSQL + MySQL sources
- 5 VDBs, 24h TTL
- Core PII detection (CPF, email, name)
- Community Slack support
// pricing // transparent
Pricing that follows where your data lives.
Try SOFI free on SaaS. Move to on-prem when production data should never leave your network. Same workflow on every plan.
All prices in USD. Brazilian taxes (IOF, ISS) calculated at checkout.
Starter
SaaSOne squad masking real production data
$390/month
Save $1,200/yr
Start SaaS- Up to 3 production sources
- 25 active VDBs, 7-day TTL
- All 50+ masking rules + LGPD profiles
- GitHub Actions + REST + webhooks
- Standard support (24h SLA)
Team
On-premMultiple squads, regulated data, private network
Custom
Runs inside your VPC. Most common.
Talk to sales- Unlimited sources and VDB pools
- Deterministic + cross-DB consistency
- Scheduled refresh, VDB groups, rewind
- SSO, RBAC, audit exports
- Priority deployment support
Enterprise
On-premBank, telco, healthcare, government
Custom
Custom DPA, SLA, and rollout team.
Plan deployment- Private cloud or bare metal install
- Oracle, SQL Server, MongoDB, lakes
- Custom DPA, SLA, security review
- Dedicated implementation engineer
- Compliance evidence packs (LGPD, GDPR, HIPAA, PCI)
Every plan ships with the same security baseline.
Read-only source access, AES-256-GCM encryption, soft-delete + audit trail, deterministic masking, and tenant isolation. Differences are about where the work runs and how much you can run.
// 02 / usage // credits
Credits map to real database work.
We bill on the operations that actually cost compute or storage. A refresh costs half a credit because that's what fits — no surprise line items.
Failed jobs are not charged
FeatureCostNote
Provision VDB (PostgreSQL / MySQL)1 creditper VDB created
Provision VDB (Oracle / SQL Server)2 creditsper VDB created
Refresh VDB from snapshot0.5 creditsper refresh, any size
Masking job (≤ 10M rows)1 credit—
Hyperscale masking (10M–1B rows)5 creditsfan-out via Celery chord
Snapshot (CoW thin clone)0.2 credits—
CDC stream (per million events)1 credit—
AI masking suggestion (Ollama / Claude)0.1 credits—
// 03 / matrix // included
What ships with each plan.
FeatureDemoStarterTeamEnterprise
Sources & VDBs
Database connectors
Demo:PG + MySQL
Starter:Up to 3
Team:Unlimited
Enterprise:Unlimited
Active VDBs
Demo:5
Starter:25
Team:Unlimited
Enterprise:Unlimited
VDB TTL
Demo:24h
Starter:7d
Team:Configurable
Enterprise:Configurable
VDB of VDB (cascata)
Demo:—
Starter:
Team:
Enterprise:
VDB Groups + rewind
Demo:—
Starter:—
Team:
Enterprise:
V2P export
Demo:—
Starter:—
Team:
Enterprise:
Masking & compliance
Masking rules
Demo:10
Starter:All 50+
Team:All 50+
Enterprise:All 50+ + custom
Deterministic / cross-DB consistency
Demo:—
Starter:
Team:
Enterprise:
JSON path + XML XPath masking
Demo:—
Starter:—
Team:
Enterprise:
LGPD / GDPR / HIPAA / PCI evidence
Demo:—
Starter:LGPD
Team:All
Enterprise:All + audit
File masking (CSV, JSON, JSONL)
Demo:—
Starter:
Team:
Enterprise:
AI policy suggestions (Ollama / Claude)
Demo:—
Starter:—
Team:
Enterprise:
Platform & integrations
CLI + REST + Webhooks
Demo:
Starter:
Team:
Enterprise:
GitHub Actions / GitLab CI
Demo:—
Starter:
Team:
Enterprise:
SSO (SAML / OIDC / LDAP)
Demo:—
Starter:—
Team:
Enterprise:
RBAC custom roles
Demo:—
Starter:—
Team:
Enterprise:
MCP / AI agent toolkit
Demo:—
Starter:
Team:
Enterprise:
Slack / PagerDuty / Splunk HEC
Demo:—
Starter:Slack
Team:All
Enterprise:All + Syslog
Operations
Deployment
Demo:SOFI SaaS
Starter:SOFI SaaS
Team:Customer VPC
Enterprise:VPC / bare metal
Where data lives
Demo:SOFI multi-tenant
Starter:SOFI tenant
Team:Customer-only
Enterprise:Customer-only
Audit retention
Demo:30 days
Starter:1 year
Team:Configurable
Enterprise:Configurable
Support
Demo:Community
Starter:24h SLA
Team:Priority
Enterprise:Dedicated
Uptime SLA
Demo:Best-effort
Starter:99.5%
Team:99.9%
Enterprise:99.99%
// 04 / saas vs on-prem
Two deployments. One workflow.
Whether you use SOFI SaaS or run it on-prem, the CLI, REST API, masking rules, and audit format are identical. Migrate later without rewriting policies.
comparison
Where it runs
SaaS (Demo / Starter)
SOFI SaaS (sofitest.dtsofi.com), multi-tenant.
On-prem (Team / Enterprise)
Inside your VPC, bare metal, or private cloud.
comparison
Provisioning model
SaaS (Demo / Starter)
Shared cluster pools per tenant. Always-on VDBs.
On-prem (Team / Enterprise)
Customer-owned cluster pools. Docker or ZFS thin clones.
comparison
Data residency
SaaS (Demo / Starter)
SOFI-hosted Postgres + Redis (encrypted at rest).
On-prem (Team / Enterprise)
Every byte stays in customer network. Read-only source access.
comparison
Identity
SaaS (Demo / Starter)
Email + Google. Optional SSO from Starter.
On-prem (Team / Enterprise)
SAML, OIDC, LDAP, SCIM. Custom RBAC roles.
What is the difference between SaaS (Demo / Starter) and on-prem (Team / Enterprise)?
+
Demo and Starter run on SOFI's hosted SaaS at sofitest.dtsofi.com — you bring sources, masking happens server-side, and credentials are encrypted with AES-256-GCM. Team and Enterprise install SOFI inside your VPC, bare metal, or private cloud, so the control plane, masking workers, snapshots, and VDB provisioning all stay inside your network. Production data never crosses your perimeter.
How are credits counted on SaaS plans?
+
Each operation (VDB provision, refresh, masking job, snapshot, CDC events) consumes credits from your monthly bucket. The credits table shows exact costs. Refreshes are intentionally cheap (0.5 credits) so teams can use them daily. Hyperscale masking is 5x because we fan-out across Celery workers to keep latency under a minute on tables with 100M+ rows.
Do credits roll over to the next month?
+
Auto-recharge credits roll over. Plan credits reset monthly. Annual Team and Enterprise contracts grant credits upfront for the full year — no monthly cap, no surprise overage.
Can we move from SaaS Starter to on-prem Team later?
+
Yes. Masking policies, source configs, and audit history export as JSON. We help you re-import them into the on-prem install. Most teams pilot for 60–90 days on Starter, validate masking rules against one real source, then move to on-prem for production scale.
What determines Team / Enterprise pricing?
+
Deployment topology (VPC, bare metal, multi-region), source engines, expected VDB volume, support commitments, compliance frameworks required, and SLA tier. We size based on actual usage — most rollouts land between $30k and $250k/yr.
Is there a pilot for on-prem?
+
Yes. We run 30-day on-prem pilots with one production source, one masking policy, and one team. Pilot includes deployment support and a deployment guide your platform team can reuse.
What payment methods do you accept?
+
SaaS plans accept credit cards and PIX via Stripe. Annual on-prem contracts go through invoice (NET 30 or NET 45). Enterprise can be paid in BRL, USD, or EUR.
[ MASK ][ VIRTUALIZE ][ REFRESH ][ AUDIT ]
Start free. Scale where your data lives.
Try SOFI SaaS in 60 seconds — no card. Move to on-prem once your masking policies are battle-tested.