Every plan is a dedicated deployment with the full product. The base price includes a block of users and storage; beyond that you pay per additional user and per additional GB, nothing else.
Small practices and single departments.
5 users · 250 GB · all features · e-mail support
Growing teams and regulated organisations.
25 users · 2 TB · priority support
Large organisations, self-hosting and compliance packages.
100 users · 10 TB · dedicated support
Each plan has a base price that includes a number of users and an amount of storage. If you go beyond either, the additional users and gigabytes are charged per month at the plan's rate, and only for what you actually use. There are no feature tiers: every plan has the full product.
The trial tenant is a real tenant with 10 users and 100 GB. When the 14 days are over it is paused, meaning no new sessions, until you pick a plan; your data stays in place and the tenant continues exactly where it stopped. If you do not continue, tell us and we delete it.
Yes. Every tenant gets yourcompany.nomadvault.de by default, and you can point your own domain at it with a certificate we manage or one you provide.
You export everything through the desktop client or the API while the tenant is live. Thirty days after termination the tenant, its database and its storage bucket are destroyed, backups included, and you receive a deletion record.
In the EU, in Germany or Finland, chosen per tenant. Backups stay in the same jurisdiction. Enterprise customers can self-host in their own data centre.
Yes. Every tenant can point at any S3-compatible bucket (AWS, Hetzner, IONOS, Wasabi or an on-premises MinIO), configured in the tenant settings. You choose region, storage class, replication and object lock according to your own durability and residency requirements. The bucket only ever receives ciphertext, so the provider learns nothing about your documents. Because we then no longer operate storage for you, the monthly base price is reduced accordingly and the per-GB overage does not apply.
No. File keys are wrapped with keys that exist only in your browser, so our infrastructure holds ciphertext and wrapped keys it cannot unwrap.
No. The AI features, summarising and translating notes and documents and creating translated copies of Office files, run on the language model and translation packs built into your browser (Gemini Nano in desktop Chrome). They are downloaded once from the browser vendor and run on your device; the text stays there. Nothing is sent to NomadVault, to Google or to any AI provider, and in browsers without a local model the features are not offered at all.
Metadata, not content. Our infrastructure can see file sizes, MIME types and timestamps, the folder structure and sharing graph (who has access to what, with which role), user identities and audit events, access patterns (who opened, uploaded or downloaded what, and when), and the blinded search tokens, meaning which tokens occur in which file and which files a query matched, never the words behind them. It cannot see file contents, file or folder names, notes, previews, any private key or your password. The security page lists this in full.
