Simple answers.

OmniStrat AI is cryptographic infrastructure for professional work. Three products on one substrate: Foundry (one API across 17 US + allied Western AI providers with cost caps and audit chain), Terminal (a broker-agnostic trading platform with an AI Analyst and compliance workstation), and Agora (attestation signing, peer cohorts, encrypted-identity matchmaking). All share one Passport identity, one hash chain, and one signature primitive (Ed25519).

Solo builders, small teams, and mid-market companies who need serious infrastructure without renting five separate vendors. The Foundry side is for anyone routing to LLMs. The Terminal side is for retail-to-mid-market traders who want a full desk without paying $20k/mo for Bloomberg. The Agora side is for any professional who signs documents, works in cohorts, or needs a portable reputation across employers.

No. Every subscription includes access to Foundry. Terminal and Agora unlock at Solo tier and above. You can use one, two, or all three under the same Passport, billing is per seat, not per product.

Free access opens in windows and is currently closed — join the list to hear when the next one opens. When a window is open, Foundry Free gives you Router basics: one active Taskforce (rate-limited) and BYOK, with no card required. Terminal and Agora are not included on Free. Paid tiers are open continuously.

• Solo ($100/mo), 1 seat. Foundry Pro or Terminal Pro (pick your track) + Agora participant access.
• Team ($1,000/mo), up to 5 seats. Everything in Solo plus live Terminal execution, multi-tenant Router, and Agora cohorts.
• Growth ($3,000/mo), up to 10 seats. Team plus basic SSO, audit log, role-based access.
• Scale ($12,000/mo), up to 20 seats. Growth plus SSO/SAML, SCIM, matchmaking pipelines, and the Terminal Compliance workstation.
• Enterprise, dedicated deployment, CMEK across AWS + GCP + Azure, full vertical compliance suite, named account team. Custom pricing.

Annual plans save ~5% versus paying monthly. Annual is charged upfront on renewal date; monthly is charged on the same day each month.

Yes. Cancel from your Passport’s billing portal at any time. Cancellation stops the next renewal, you keep access through the end of the current billing period. No cancellation fees.

We’ll refund a charge made in the last 30 days if you ask and haven’t used materially more than 10% of the included usage. Enterprise contracts are governed by their own MSA.

The Router refuses the request. No overages. No surprise bill. You get an immediate 402 response with the current cap, current spend, and a link to raise the cap or upgrade. Caps are enforced per-org, per-key, and per-call.

Bring Your Own Keys. You provide your own Anthropic, OpenAI, Google, xAI, etc. API keys. Foundry still routes, caches, adds observability, and enforces cost caps, but the LLM cost lands on your provider account, not ours. You pay us for the routing layer, not the tokens. Keys are encrypted at rest with your Vault passphrase; we never see plaintext.

No. We do not sell, share, or trade your personal information. We do not run ad networks. We do not embed ad pixels. We do not use third-party analytics that fingerprint. See the Privacy Policy and privacy rights section.

Yes, that’s the whole point of the chain-anchored architecture. Every attestation, cohort event, taskforce charter, and match certificate is hash-chained and Ed25519-signed, and each is verifiable with no account required. But they resolve at their own endpoint, not a single one:

• Attestations (att_…)./api/attest/verify/<id>
• Cohort events./api/agora/cohorts/<cohort_id>/events
• Match certificates./api/matchmaking/verify/<cert_id>
• Decision receipts (Foundry)./api/decision/verify/<receipt_id>

Each returns the signature bytes, the public key, and the exact message signed, so you can re-verify locally rather than take our word for it.

Broker keys used by the Terminal are encrypted client-side with AES-GCM-256 using a key derived from your Vault passphrase (PBKDF2-SHA256, 250,000 iterations). Only the ciphertext, salt, and IV are sent to the server. The plaintext key never leaves your device. If we get subpoenaed, we hand over ciphertext, useless without your passphrase.

Personal information is deleted within 30 days (backup rotation). Audit-chain records are retained for the 90-day security-audit window unless legal hold applies. See Section 6 for CCPA/GDPR delete-request procedure.

No. OmniStrat AI is a technology platform, not a broker-dealer or investment adviser. Your broker (Alpaca, IBKR, Tradovate, etc.) executes your trades. We never take custody of funds or securities.

No. Nothing on this site, in the Terminal, in the AI Analyst, or in any communication from OmniStrat AI constitutes investment, tax, legal, or financial advice. Every model output is illustrative technology output. Verify anything before you act on it. See the full financial services disclaimer.

Treat AI Analyst output as one input, not the answer. Large language models can be wrong, out of date, or hallucinated. Every backtest, every options-flow reading, every regime call, verify before you size a position.

A 26-workstream compliance workstation covering CAT, Rule 606/605, FOCUS, Form CRS, Reg SHO, trade + communications surveillance, AML/KYC, 17a-4 WORM archive, WSPs/policies, testing program, complaint log, position and cash reconciliation. Every artifact chain-anchored to the same substrate as your Attestation and Match Certificates, verifiable by regulators without account access. See the Compliance hub.

No. OmniStrat Compliance is a workflow and reporting workstation. Your Chief Compliance Officer, General Counsel, or equivalent remains responsible for interpretation, filing, and defense of every regulatory obligation. We help you organize and evidence the work; we don’t do the work.

Foundation ($1,500/mo) covers cross-vertical compliance: AML/KYC, WORM archive, supervision, testing, communications review, workflows that apply to any regulated business. Vertical packs add domain-specific workstreams (BD, AI Governance, Attestation) at +$1,000/mo each.

Not yet certified, and we’d rather say so than imply otherwise. OmniStrat is built to SOC 2 control objectives: column-level encryption at rest, an append-only hash-chained audit log, least-privilege access, MFA on every administrative surface, and per-org data residency. The underlying infrastructure (Cloudflare) is itself SOC 2 Type II certified, which covers the physical and platform layer but not our application controls.

A SOC 2 Type II report requires an independent auditor over an observation window; we have not completed that engagement. HIPAA is the same picture, the technical safeguards are in place and we can execute a BAA, but there is no third-party attestation behind it yet.

If you need evidence today, contact enterprise@omnistrat.ai and we will walk you through the control set, our architecture, and the audit-chain verification you can run yourself. If your procurement process requires a completed SOC 2 report, we will tell you that up front rather than waste your time.

Free tier: community + docs. Solo/Team: email support, 1 business day target. Scale: priority queue. Enterprise: named account team + private Slack channel to the engineer who wrote the code. 30-minute P1 response, 24/7, per our published SLO.

Email hello@omnistrat.ai for general support, enterprise@omnistrat.ai for procurement, or check the contact list for specific departments.