Skip to main content

Pricing

Four ways.
Honest numbers.

CH VPN pricing is shaped by deployment model, not seat count. The protocol is the same on every tier. The differences are who runs the authority, where the audit chain lives, and what assurance posture you need.

Bundled

With clinical software.

Included in every Conceptual Healthcare clinic seat. No separate line item. Tenant-isolated authority, BAA covered by parent agreement.

Included
With Conceptual Healthcare
Patient + clinician clients pre-provisioned. Audit log delivered to tenant storage.

Per Clinic

Add-on tier.

For independent clinics not on Conceptual Healthcare. Tenant-isolated authority, up to four clinic hub nodes, BAA included.

$ /mo
Quoted at engagement
Pricing scales with peer count and bridge density. Three-year commit available.
4
Clinic hub nodes
Hard ceiling at this tier. Larger deployments move to Self-Hosted.

Self-Hosted

On-prem authority.

Authority deployed inside the customer's perimeter. Custom rotation, custom audit storage, optional air-gapped operation. Annual license + support.

Annual
License + support
Authority license, reference deployment, named SRE on-call. Custom terms.
Air-gap
Optional
For sensitive environments. Authority operates without internet egress.

Federal

FIPS 140-3 path.

Validated FIPS crypto module, dedicated authority cluster, FedRAMP roadmap, SOC 2 Type II target Q3 2026. Custom BAA terms. Engagement begins with a security review.

Custom
BAA + on-prem
Per-engagement contract. Federal procurement vehicles supported.

What's included

On every tier.

The same software, the same protocol, the same audit chain. No paywalled crypto modes. No starter-tier bait.