Licence, pricing and support, answered in full.
- Questions in this subject
- 6
- Questions across the whole set
- 54
- Subject, in the reading order
- 2/7
Each answer stands on its own
Open a question for the answer, its limits and links to the detail.
How is Token Observe licensed?
For customer hosting, Token Observe is published under a commercial source-available licence, version 1.0, from Tenhaw Ltd, registered in England and Wales and governed by the laws of England and Wales. It is source-available, not open source. The rights below run for the subscription term of an order form stating the fees and the permitted scope of use; without one, a thirty-day evaluation grant applies instead. You may install, host and operate it on infrastructure you control; read, compile and modify the source and create derivative works for internal purposes, including to integrate it and to remediate defects; keep backup, disaster-recovery, development, testing, staging and training copies; and have contractors exercise those rights for you. You own the modifications you make and need not disclose them. You may not redistribute it, or provide it or a substantial part of its functionality to a third party as a hosted, managed or white-labelled service. Security research is expressly permitted, and the publication that follows it is bounded rather than unrestricted: benchmark results may be published with no pre-approval provided the version and configuration tested are named, and security findings after coordinated disclosure. One caveat travels with all of it: the published licence is a template pending review by counsel, not an executed grant of rights.
How is Token Observe priced?
The cloud trial is free for 30 days from workspace creation, without a card or automatic paid conversion. There is no published paid cloud price. Provider inference, model-assisted search and Google BigQuery scans can incur charges on your own accounts. Customer-hosted licences and design-partner support are quoted separately against a written scope covering deployments, active agents and support. The published customer-hosted licence remains a template pending counsel.
Can we evaluate Token Observe before buying?
Yes. Follow /start to the cloud portal, choose Create an account, confirm email and create a workspace. The hosted trial lasts 30 days from workspace creation, with no server installation, card or automatic paid conversion. Connect a supported billing source using its required reporting credential; optional model calls and model-assisted search use a separate inference key. Those calls and Google BigQuery scans can incur provider charges. This is a small pilot, without an availability SLA or independent penetration test. Trial expiry stops workspace changes, model calls and scheduled collection; authorized retained reads and exports remain within the shared traffic quota. Customer hosting is available through assisted setup and has separate licence terms.
What does support look like, and what is the SLA?
The cloud pilot has no availability SLA, uptime percentage or service credits, and shared resource and traffic limits can pause access. A customer-hosted design-partner agreement may state first-response targets during published business hours: two business hours for S1, one business day for S2, three for S3 and five for S4. Those are proposed response targets, not resolution times or a support commitment for the free hosted trial. The support document is a template; a signed agreement governs.
What does procurement need to know about data processing?
Cloud hosting makes Token Observe the custodian of workspace evidence and supplied credentials. Its infrastructure, authentication, data retention, access controls, subprocessors, transfers, deletion and recovery arrangements therefore need a cloud-specific review. The customer-hosted architecture keeps runtime state on your infrastructure and has no vendor phone-home, but that statement does not remove the cloud service from the data-processing path. Legal roles, contractual safeguards and any support access need counsel review rather than an architectural slogan.
Can we get our data out, and what happens when we stop?
The cloud trial permits authorized retained GET reads and exports after expiry within the shared monthly traffic quota; workspace changes, model traffic and scheduled collection stop. Reaching the traffic quota also pauses reads and exports until an operator raises it or the UTC month renews. Do not treat that as an indefinite retention or recovery promise. Customer-hosted installations keep evidence in their own database and the licence lets the customer retain and use its records after ending the software subscription, subject to the final signed terms. Evidence exports are digest-sealed rather than signed, and no importer into another vendor product is promised.
Read the free 30-day trial terms, including what you can test and the restrictions that apply.
See the free 30-day trial termsWhat a vendor billed you, and what the gateway metered. Both are real and they are not the same measurement, so the report keeps them apart on purpose.
Imported charge lines. Subscriptions and API charges are two kinds of the same evidence, so they add up inside one currency.
| currency | subscription | api | total |
|---|---|---|---|
| USD | 1,240.00 | 806.40 | 2,046.40 |
| GBP | 180.00 | 96.50 | 276.50 |
no row beneath these two, because nothing is converted: two currencies do not add
An estimate priced from recorded traces, in USD only. It may cover the same usage an invoice already covers.
- estimatedCostUsd
- 412.90
- requests
- 18,204
- inputTokens
- 24,118,940
- outputTokens
- 3,602,177
a missing cost is not free usage: it is a model with no price row
Field names are the product’s own; the figures are illustrative. Credits arrive as negative amounts and are included. Billed rows total within a currency and no further: nothing is converted, and no figure spans the two panels.
54 questions, in 7 subjects
What Token Observe is
What the product does, who it suits, its current stage, that it has no reference customers yet, and the limits of a pilot.
12 questionsDeployment and operations
What it runs on, how long onboarding takes, backup and restore, upgrades and rollback, air-gapped installs, and why there is no high-availability topology.
7 questionsSecurity and threat model
The threat model, key custody, injection and redaction limits, whether the audit log can be rewritten, vulnerability disclosure, and what has not been tested.
10 questionsCompliance and evidence
EU AI Act, ISO/IEC 42001, NIST AI RMF and OWASP mappings, what an evidence export proves, retention and erasure, and which certifications do not exist.
6 questionsHow it works
The request path step by step: how an agent is onboarded, what happens inline, what streaming and failover do, what happens when something is unavailable, and what you do when a policy blocks work it should not have.
8 questionsAlternatives and adjacent tools
Where Token Observe sits against gateways, observability, security platforms and identity products, and the case for and against building it yourself.
5 questionsTry it free for 30 days.
Create a cloud account and workspace. No card or server installation. Model calls and Google BigQuery scans can incur separate provider charges.