Provisioning
Get Started
Pay, receive a provisioning token, run the Navigator. The whole flow is designed so the operator never touches your storage credentials.
Selected tier:
Provisioning is not live yet
The payment buttons below are stubs. We are pre-launch — no charges process and no token is issued. Join the waitlist to be notified when provisioning opens. Founding-user rates apply to waitlist members.
What happens when you click Pay
You pay through the funnel that fits
Stripe for Practitioner and Institutional. Monero for Mission and Crypto-Sovereign. The architecture is identical either way — only the front door differs.
The operator allocates a bulb to the pool
A storage bulb is provisioned and added to the operator pool. The operator generates a Shape Key and Coordinate at this step, in operator memory only — these never persist on the operator side past the moment of handoff.
You receive a one-time provisioning token
Delivered through your payment confirmation. The token is single-use and short-lived. It identifies the bulb in the pool, not you.
Open the Navigator and paste the token
The Navigator connects to the operator over Tor, redeems the token, and receives a sealed envelope containing your Shape Key and Coordinate. The envelope can only be opened by the Navigator on your device.
Write down your Shape Key and Coordinate
The Navigator displays them once. Without them, you cannot recover access if your Drive A is lost. The operator cannot recover them either — that is the architecture, not a policy. Read the best practices guide before you start.
Choose your funnel
The two payment paths serve different privacy requirements. The data architecture is identical — the operator still cannot read your files either way.
Anonymous funnel
Pay with Monero
No name. No email. No phone. Signup via .onion. The operator has no identifying information about you because none was ever provided.
Institutional funnel
Pay with Stripe
Card payment. Stripe handles OFAC compliance. The operator sees your organization at the corporate level — your individual files remain unreadable to anyone but you.
⚠ Test mode · Mock activation
Local fgsp-payment-portal detected with --enable-mock-charge.
This drives the full customer flow without any payment provider.
Click below to mint a token + claim code, then follow the success page
to activate Navigator. Visible only to operator-side testers.
Before you start
- → Read the Navigator app guide — what to download, how to verify, what running it looks like.
- → Read the Drive A guide — what your hot-path bundle is and how to look after it.
- → Read the best practices guide — key storage discipline that the architecture relies on.
- → Read the security model — what FGSP defends against, and what it does not.