Doc. CYL-LP-02A · Appendices to the product schematic
The detail
Everything the front page keeps short: the full plan comparison, the add-on catalogue, delivery options, Integration pricing and the questions people actually ask. Same drawing set, second sheet.
Appendix A · Baseline security
Baseline security
Identical on every plan, from Starter to Integration, and deliberately never a differentiator. You do not pay extra for the parts that keep the secret safe.
AES-256-GCM envelope encryption
Every secret is encrypted under its own fresh random data key. One key per locker, never reused.
Passphrase-derived wrapping
The data key is wrapped by a key derived from the passphrase using PBKDF2-HMAC-SHA-512 with HKDF domain separation.
RSA-4096 in an HSM-backed vault
A second wrap under a key-encryption key that lives in a FIPS 140-3 Level 3 validated, HSM-backed vault and never leaves it.
Ciphertext only at rest
Without the passphrase, the stored keys cannot unwrap the data key. The passphrase itself is never stored.
Single-use lockers
A locker opens exactly once. The moment the secret is collected, the content is purged.
Automatic expiry
Never opened in time? The content is purged at expiry. 24hrs by default, up to 2 weeks on top plans.
Unique, unguessable links
Every locker gets a unique URL. Nothing sequential, nothing enumerable.
Custom passphrases
Set your own passphrase on any plan, or have a strong one generated for you.
Require sign-in to open
Optionally require the recipient to sign in before the locker will open. Available to every sender.
MFA on every account
One-time-passcode multi-factor authentication protects every Cylockr account, on every plan.
Australian data residency
Lockers live in Australian data centres and do not leave the country.
Quotas and rate limiting
Per-user quotas and rate limiting keep the platform predictable and abuse-resistant for everyone.
Plans differ on quota, expiry ceilings, delivery and administration. They never differ on encryption. There is no column in the table below for the parts above, because every column would read the same.
Appendix B · Plans in detail
Plans in detail
Three Personal plans for a single seat, three Organisation plans priced per user per month, and an Integration licence for systems that call the API. All prices are in AUD and include GST. Personal and Organisation plans can be billed annually at 10x the monthly rate, so two months are free; the Integration licence is billed monthly only.
| Personal · single seat | Organisation · per user | |||||
|---|---|---|---|---|---|---|
| Starter | Plus | Pro | Team | Business | Enterprise | |
| Monthly price (AUD, incl. GST) | A$5 | A$8 | A$12 | A$19 per user | A$24 per user | A$45 per user |
| Lockers per month | 5 | 25 | 100 | 50 per user | 100 per user | 1,000 per user |
| Expiry | Up to 24hrs | Up to 7 days | Up to 2 weeks | Up to 24hrs | Up to 2 weeks | Up to 2 weeks |
| Configurable notificationsChoose whether to be notified when a locker you created is emptied (opened and collected) or expires unopened. | Not included | Included | Included | Included | Included | Included |
| Email delivery of the link | Not included | Included | Included | Included | Included | Included |
| Direct send to Cylockr accounts | Not included | Not included | Included | Not included | Included | Included |
| Seats | 1 | 1 | 1 | Up to 50 | Up to 500 | No ceiling |
Integration · for systems, not seats
A$300 per month base, then metered per locker
Organisation-owned API accounts with 100 lockers per month included, expiry up to 2 weeks, notifications, email delivery, direct send and a full REST API. Volume above the included 100 is billed on declining bands.
Appendix C · Add-ons
Add-ons
An orthogonal catalogue: each add-on sits alongside your plan rather than inside it, with its own eligibility rules. None of them changes the baseline encryption, because that is already at maximum on every plan.
Customer Managed Keys
EVERY PLAN TYPE
A key dedicated to you in Cylockr's HSM-backed vault instead of the shared platform key. Crypto-isolation from every other customer, crypto-shred when you leave, and rotation on request (at most once every 6 months).
A$25 / month
Single Sign-On
ORGANISATION PLANS
An enterprise identity connection for your organisation, with SCIM user provisioning bundled. Free for organisations holding 10 or more Enterprise seats.
A$250 / month per organisation
Advanced MFA
ORGANISATION PLANS
WebAuthn, phishing-resistant multi-factor authentication for your users, on top of the one-time-passcode MFA every account already has.
A$100 / month per organisation
Bring Your Own Vault
BUSINESS · ENTERPRISE · INTEGRATION
Locker keys wrapped by a key in your own Azure Key Vault. You hold the master switch: revoke it and Cylockr can no longer decrypt anything.
A$150 / month
Custom subdomain
ORGANISATION · INTEGRATION
A dedicated subdomain for your organisation's links, so recipients see your name on the address before they open anything.
Unpriced
IP allowlisting
INTEGRATION ONLY
Conditional-access IP allowlisting per integration workload, so your API accounts only work from the networks you approve.
Per workload
Isolated environment
ENTERPRISE · INTEGRATION
Cylockr-hosted dedicated infrastructure: your own database and compute, separated from the shared platform.
Quoted per customer
Appendix D · Delivery and channels
Delivery and channels
The front page keeps this short on purpose. Here is the whole picture: how the link and the passphrase travel, what Cylockr can automate for you, and how you find out what happened.
Every plan: you hold both halves
Creating a locker gives you the link and the passphrase to share yourself, through any channels you like. Nothing forces email.
Send the link and the passphrase through different channels. For example, email the link and send the passphrase via Signal (or read it out over the phone). That way no single intercepted channel carries enough to open the locker.
Notifications
Configurable on eligible plans: know when your locker was opened and emptied, or when it expired untouched.
Email delivery
On plans with email delivery, Cylockr can send the link by email for you. You still pass the passphrase on however you choose, so the two halves stay on separate channels.
PLUS · PRO · TEAM · BUSINESS · ENTERPRISE · INTEGRATION
Direct send
Deliver straight to another Cylockr account holder. The locker appears for them in the app, ready to open. No link travels anywhere at all.
PRO · BUSINESS · ENTERPRISE · INTEGRATION
However the link travels, the locker itself behaves identically: it opens once, the secret is collected, and the content is purged at that exact moment.
Appendix E · Integration pricing
Integration pricing
The Integration licence is for software that creates lockers on your behalf: service desks, provisioning pipelines, customer onboarding flows. One base licence per organisation, then a metered rate per locker that declines as volume grows.
Base licence
A$300per month
- Organisation-owned API accounts, built for systems rather than people
- 100 lockers per month included in the base licence
- Expiry configurable up to 2 weeks
- Configurable notifications
- Email delivery and direct send
- A full REST API for creating lockers from your own systems
| Lockers in the month | Rate (AUD) |
|---|---|
| 1 to 100 | Included in the base licence |
| 101 to 1,000 | A$2.80 per locker |
| 1,001 to 3,000 | A$2.40 per locker |
| 3,001 to 10,000 | A$1.90 per locker |
| 10,001 and above | A$1.30 per locker |
Integration lockers carry the same baseline security as everything else in Appendix A. The API changes who presses the button, never what happens to the secret.
Appendix F · Questions
Questions
The ones people ask before their first locker, answered plainly. If yours is not here, the front page covers how the whole mechanism works end to end.
F.1Can the recipient open a locker twice?
No. A locker opens exactly once. The moment the recipient opens it and collects the secret, the content is purged and the locker is marked COLLECTED. A second visit finds an empty locker, not the secret.
F.2What if the passphrase is lost before the locker is opened?
Nobody can recover it, not even Cylockr. The passphrase is never stored, and without it the stored keys cannot unwrap the data key. Create a new locker with a new passphrase; the old one simply sits untouched until it expires and is purged.
F.3Can Cylockr read my secret?
No. Your secret is stored only as ciphertext. The data key that encrypted it is wrapped by a key derived from your passphrase, then wrapped again by a key in an HSM-backed vault. Without the passphrase, the keys we hold cannot unwrap the data key, so the ciphertext stays ciphertext.
F.4Can an emptied or expired locker be recovered?
No. In both cases the content is purged from the database permanently. There is nothing to restore, which is exactly the point of the product.
F.5How do I send the link and the passphrase?
Any way you like. Creating a locker gives you both, and nothing forces email. Best practice is two different channels, for example email the link and send the passphrase via Signal (or read it out over the phone). Plans with email delivery can have Cylockr send the link for you; the passphrase always travels by whatever channel you choose.
F.6Do recipients need a Cylockr account?
No. Anyone with the link and the passphrase can open the locker. The exception is when the sender chooses to require sign-in before opening, which is available on every plan.
F.7Where is my data stored?
In Australian data centres. Your lockers do not leave the country.
F.8What happens when a locker expires?
The content is purged the moment the expiry passes and the locker is marked EXPIRED. Expiry is set when you create the locker: 24hrs by default, configurable from 1 hour up to your plan's maximum (2 weeks on top plans).
F.9Can I set my own passphrase?
Yes, on every plan. You can type your own passphrase or have a strong one generated for you. Custom passphrases are baseline security, not a paid extra.
F.10What is the difference between Organisation and Integration plans?
Organisation plans are for people: named seats, per-user quotas, team management. Integration is for systems: organisation-owned API accounts with a A$300 per month base licence (billed monthly only), 100 lockers included, then metered per locker on declining bands. If a human clicks the button, you want Organisation; if your software calls the API, you want Integration.
F.11Does Cylockr support single sign-on?
Yes, as an add-on for Organisation plans at A$250 per month per organisation, with SCIM user provisioning bundled. It is free for organisations holding 10 or more Enterprise seats.
F.12Is there an API?
Yes. Integration plans include a full REST API for creating lockers from your own systems and workflows, so locker creation and delivery can be driven entirely by your own software.
End of appendices
That is the whole drawing set
Baseline security on every plan, plans that differ only on quota and delivery, and a locker that opens once and is gone. The rest is up to you.
AES-256-GCM envelope encryption · one-time retrieval · automatic purge