Seats, not servers. Ten free, then a year of use per seat.
Vigia licenses servers. Sonda licenses people: a seat is one enabled account in your organization, whatever it does. Ten seats are free forever. Past them, a seat license is $5 a month billed by the year — $60 — and the year starts the day the license is assigned to an account, not the day it is bought. Buy ahead, lose nothing. When a license runs out, the next one in the pool takes its place on its own; nobody moves anyone by hand. Every key is signed by LockFlare and opened inside your organization's own store, offline.
At a glance
Four things that are different on purpose.
Both products use the same signed keys and the same rule that nothing ever calls home. What is licensed, and what happens over time, is not the same — because a team of people is not a rack of servers.
Vigia counts servers on each computer
A slot is one server on one installation's map, and every installation has its own ten free. Nobody counts people.
Sonda counts seats in one organization
A seat is one enabled account, and the count is the organization's, kept in its own store: every Sonda in the organization reads the same file and sees the same ten free and the same pool, whichever computer it runs on.
A Vigia slot is a year from the day it is bought
The key carries the day it runs out. Buy a renewal early and the days in between are spent.
A Sonda license is a year from the day it is assigned
The key carries no date at all. Each license in it waits in the pool, clockless, until an account takes it. Buy forty in January for a renewal in March and the forty start in March.
In Vigia a slot that runs out is done
A slot past its day is never taken again; new slots come from a new key.
In Sonda a license is 365 days of use, whoever uses them
Release a license after 200 days — the person left, the account was disabled — and it goes back to the pool with 165 days left, to be handed to the next account that needs one. Nothing is burned.
In Vigia you move the server
When a slot runs out the server drops to a terminal until it is moved to another slot, by hand, on Edit. Fine for a server; a chore for two thousand people.
In Sonda the pool renews the seat
On the day a license runs out, the account takes the next open license from the pool on its own, oldest account first. An administrator buys, pastes once, and the organization keeps working — no one assigned, no one moved, no one by one.
An account license, seat keys, and a pool.
Three things, all of them files in your organization's store, signed by the owner or an organization administrator and read by every Sonda in the organization.
The account license, once
An account at LockFlare is an email and the id of its organization — no password, no name. lockflare.com/sonda/license gives you the account license for it, shown the first time and mailed. The owner pastes it once under Organization settings › Licensing; it is filed in the store, one per organization, and every seat key is issued to it.
A seat key, as often as you like
lockflare.com/sonda/seats asks the email of your account and mails a six-digit code to it — nothing is shown or sold before the code is typed back; then how many. The key is for the organization you named when the account was made. One purchase is one key carrying that many seat licenses, signed by LockFlare, bound to the account and to the organization: it opens in that organization's store and in no other, and every license in it is accepted once, ever.
The pool
Licenses not in use wait in the pool, clockless. A new account takes one on its own; an account whose license runs out takes one on its own. What the pool hands out first: a free seat, then a license already running (the one ending soonest), then a fresh one — so the fresh ones keep their full year as long as possible.
The ten free seats
Every organization has ten the day it is made, with no key and no clock. They are taken before anything paid and shown apart as Never expires; the owner is on the first. A free seat released by a disabled or removed account is the next one handed out.
Signed, and opened in your store
A key is an Ed25519 signature inside an AES envelope. Sonda opens it with the public half built into the app and files it in the store; from then on every Sonda in the organization computes the same picture from the same file and the clock. Nothing is sent anywhere. Sonda has no way to call LockFlare and never will.
What LockFlare holds
The email of your account and the keys issued to it, so the same page can send them again after a code mailed to that address. Not the organization id's meaning, not who sits on which seat, not a name. Stripe charges the card and issues the receipt.
Assigned, used for a year, renewed from the pool.
What happens on each day, as Sonda runs it — on the computer's clock, with no timer and nothing phoning anywhere.
Assigned
An account is made — by a ticket, an approved invitation, or a directory push from Entra or Okta — and takes the next open license from the pool. The clock starts that day: License 23 · until March 3, 2027 on the account's sheet. No open license at all? The account is still made, waiting, and comes alive the moment a key is pasted.
On its day, with the pool stocked
Every account has On expiration, renew from the pool ticked by default. On the day its license runs out it takes the next open one, silently. Untick it for a contractor or a temporary account you mean to let lapse.
On its day, with the pool empty
Fifteen days before, that person's Sonda shows an orange line: the license ends on such a day and no license is free. On the day, a red one, and ten days of grace with everything working. After the grace the team closes to that account: it still signs in, its local work is its own, but nothing of the organization — no sync, no shared projects, no publishing, no approvals — until a license arrives. Paste a key and the waiting accounts renew in order, oldest first.
Released
Disable or remove an account and its license goes back to the pool with the days it has left, to be handed out before any fresh one. Re-enable the account and it takes the next open license — often the very one it had.
Who writes it
Every Sonda computes the same result from the store and the clock, so a person is renewed the instant the rule says so, with nobody online. The first administrator's Sonda that syncs writes the assignments into the signed file; the order is fixed, so whoever writes it, the file lands the same.
No renewal behind your back
No card on file, no automatic charge, no invoice you did not ask for. Renewal happens inside your store, from licenses you already bought. When the pool runs low, you decide to buy more — or not.
Two thousand accounts, one paste.
The numbers are in Sonda, not on a dashboard of ours — Sonda has none, by design.
Organization settings › Licensing
The account license, every seat key, the pool, and a line per month: March: 40 licenses end · pool 3 · buy 37. Highlighted from sixty days out. The organization id, with a Copy button, for the seats page.
Identity & access
Each account's license and the day it ends, with a chip when it matters: ends in 12 days, expired — grace to March 13, closed. A Release verb for the odd case. The renew-from-the-pool flag on each sheet.
Mail, from your own server
If the organization's mail is set up in Sonda, the administrators get one mail per account entering the fifteen-day state — sent by your SMTP, inside the air gap. LockFlare sends nothing: it does not know the day.
Buy the number you need
Any count from 1 to 500 in one checkout, at $60 a seat. Larger organizations buy in several checkouts or write to us for an invoice; the key is issued the same way.
No refunds
Every organization has ten seats free with every capability on them — that is the trial. A purchase is final: not for a change of mind, not for a license left in the pool. The checkout asks you to say you understand, and refuses without it.
Earned seats
A YouTube tutorial on any Sonda feature earns your organization ten more seats, free and never expiring, issued as a key like any other. How it works.
The license, the seats, the paste.
The whole of it, from the first email to the organization running on paid seats.
1. The account license
lockflare.com/sonda/license: your email and your organization id — Organization settings › Licensing shows it, with a Copy button — and the license comes back, shown the first time, mailed every time. A known email gets a six-digit code mailed first; nobody pulls a license off the site without reading your mail.
2. The seats
lockflare.com/sonda/seats: the same email, the code mailed to it, how many. Pay with Stripe; the seat key is issued on the spot and mailed.
3. In Sonda
Organization settings › Licensing: paste the account license, then the seat key. The licenses land in the pool; the accounts waiting for one come alive, the rest wait for the next account or the next renewal. That is all there is to do.