Security and licensing

Licensing and metering

How the licence works, what usage the install reports, and what happens at limits and expiry.
Coming soon. Licensing and metering aren't built yet. Today's install has no licence check, counts no usage, and sends nothing to Somu Labs. This page describes the planned design.

You run Sentinel yourself. You buy a tier, which sets how many transactions a month you can score and which modules you get. Your install checks a signed licence offline and counts its own usage. Once a day it sends Somu Labs aggregate counts and nothing else.

If you go over your tier, you move up at the next billing cycle. If your licence lapses, you lose updates and admin features, but scoring keeps running.

Billing never breaks payments. Sentinel never blocks a payment, or stops scoring, because of a licence or usage problem.

The licence

  • Somu Labs issues a licence signed with Ed25519.
  • It contains your customer ID, install ID, tier, monthly transaction limit, enabled modules, and the issue and expiry dates.
  • The install verifies the signature offline, with a public key built into the binary.
  • The licence controls tier limits, which modules are on (for example the ledger), and access to updates.

Usage metering

The install counts four things locally:

  • transactions scored
  • screenings
  • cases opened
  • reports filed

The counters are hash-chained, the same way as the audit log, so tampering shows.

Install typeHow usage is reported
OnlineOnce a day, the licence agent sends the four totals to Somu Labs, signed by the install. No transaction data and no personal data.
Air-gappedAn admin exports a signed monthly usage file and sends it to Somu Labs. Renewals come back as licence files to upload.

Pricing is by tier, not per API call.

Limits and expiry

SituationWhat happens
80% of the monthly limitWarning in the console
Over the limitStronger warning, and your account team is told. Scoring continues. The tier changes at the next billing cycle.
Licence expiredGrace period, with warnings
After the grace periodSanctions and typology updates stop, and admin settings lock. Scoring, alerts, cases and filing keep working.

Admin settings that lock after the grace period include creating or editing rules, inviting people, adding connectors and installing updates. Reviewing alerts, working cases and filing reports stay open, because locking compliance work would hurt your standing with your regulator.

In the console

The Licence and usage screen shows your tier, expiry date, usage meters for the month, check-in status and enabled modules. Air-gapped installs export their usage file from the same screen.

Sentinel is a Somu Labs product. © 2026 Somu Labs Ltd.