Pricing
Nothing that makes Verus private costs anything
The encryption, the missing directory, the contact requests, the translation on your own device, the disappearing messages, the screenshot protection and the identity verification are all in the free tier and always will be. What the subscription buys is capacity: more devices, bigger files, and longer for a message to sit waiting before it is deleted.
A product that argues privacy should not be a premium and then charges for the privacy is arguing with itself. So the line is drawn at capacity, which costs us money to provide, rather than at the properties, which cost us nothing to keep.
Free
Free
One device. Everything that matters, on your phone.
Verus Plus
£8.99 a month
Or £89.99 a year. For one person on up to five of their own devices, with attachments up to 200 MB that wait 30 days to be collected.
| What changes | Free | Plus |
|---|---|---|
| Devices on one address All for one person. Your phone is free; a Mac, a tablet or a second phone of your own is what the subscription is for. | One | Up to five |
| Attachment size Photographs, video and documents, encrypted before they leave either way. | 25 MB | 200 MB |
| How long a file stays collectable After that the relay deletes it whether it was collected or not. | 7 days | 30 days |
| Message size Text, and everything that travels inside the ciphertext with it. | 64 KB | 256 KB |
| Undelivered messages held For a recipient who has not opened the app. Collected messages are deleted at once on both tiers. | 30 days | 90 days |
| Messages queued at once The ceiling on what can be waiting for you before the relay refuses more. The same on both tiers. | 5,000 | 5,000 |
| An unused address is burned after Idle, not inactive: opening the app is enough. | 30 days | 365 days |
Read from the running deployment rather than written here: the free column is what api.verusapp.co.uk/v1/deployment reports as its limits, and you can check it now.
Free on both, permanently
Not a trial, not a limited version, and not a list we intend to move behind the price later.
- End to end encryption, on every message and every file
- No phone number, no email address and no profile
- No directory, so nobody can look you up
- Contact requests, with allow, decline and block
- On device translation in twenty languages
- Disappearing messages
- Groups
- Screen recording and mirroring blocked, screenshots refused or reported
- Identity verification through Confrmo, and taking it off again
- A relay that records no sender
Paying for it
Paying does not tell us who you are
This is the part that was difficult to build and is the reason the subscription took as long as it did. Apple sells to an Apple ID; a card sells to a name and an address. Verus exists so that nothing is bound to a person, and a row saying this account pays for this address would recreate exactly the link the whole design refuses.
So it is built the other way round. A payment produces a code. The code is redeemed by whichever address you choose, and what the relay keeps is a hash of the payment and a count of how many times that code has been used. There is no column joining a payment to an address. Ask the database which addresses a given subscription pays for and there is no query that answers, because the join was never created.
The honest limit, stated because the rest of this site states them: somebody watching the server in real time can see a redemption and an entitlement appear in the same instant and pair them by timing. That is written down as a residual rather than papered over, and blind signing is the fix.
The mechanism behind metering an allowance without keeping a record of what anybody consumed is the subject of one of the patent applications.
Priced, and on its way to every store
Said here in the same four states the rest of the site uses, so you can see exactly where each way of paying has got to.
Running today
Built, deployed and verifiable from outside.
- The relay sellsReceipt verification, entitlements and redemption are live. /v1/deployment answers
subscriptions: true, which means it has loaded the certificate and can actually verify a purchase. - The priceVerus Plus is £8.99 a month, set and live in Stripe.
- The free tierEverything above, in the apps, now.
- In VSolidusVerus Plus, and with it unlimited call time, can be paid for in VSOL from any wallet. The payment produces a code you enter on the Mac, and the phones linked to that address have Plus too.
- In Bitcoin, Ether or USDTVerus Plus can also be paid for in BTC, ETH or USDT on Tron from any wallet, at £8.99 a month at today's rate.
Built, not yet on sale
The software exists. The shopfront does not.
- In the iPhone and Android appsThe purchase screen is written and the products are priced. They cannot be submitted until a new app version carries them, and the current version is in review.
- On the MacThe Mac app is a direct download rather than an App Store product, so it is bought here rather than from Apple. That shopfront is the next thing to build.
The prices above are the prices. If you want to be told the day Verus Plus reaches the app you use, the same list that covers the phone apps covers this: it is at the foot of the front page, and it holds an email address and a date and nothing else.
For business
Running it yourself is a different conversation
An organisation that wants Verus on its own terms is better served by a deployment than by a consumer subscription. A dedicated or sovereign deployment runs the same software under your own keys, in your own jurisdiction, on infrastructure you control.
Shared cloud
We host and operate Verus for you on our managed service, with data held in the UK and a live copy in the EU. There are no servers to run on your side.
Dedicated cloud
A deployment of your own in your organisation's cloud account, under your control. Your keys and your region, shared with nobody else.
Sovereign
The whole system on servers you own, in the jurisdiction you choose, with full data sovereignty. It does not depend on us to keep running.
Priced per deployment rather than per seat, because the thing being bought is a deployment. What that costs depends on where it runs, how much of it we operate and what you need in writing, so it is a conversation and not a number on a page.
What we do not yet have, said before you ask for it: no ISO 27001 certificate of our own, no SOC 2 report and no third party penetration test. What we do have is on the security page, attributed to whoever actually holds it.