Skip to main content
Skip to main content
Pricing

Simple, honest pricing.

All plans include SSO, MFA, SCIM, and the full hash-chained audit — no upsell tax on the fundamentals.

USD · United States
Starter

Up to 5 users · single workspace

$0
forever
  • SSO (SAML/OIDC)
  • MFA & step-up
  • Hash-chained audit
  • Basic PIP views
  • Community support
Most popular
Growth

Up to 250 users · unlimited workspaces

$24
per user / month
  • Everything in Starter
  • Full FHPI (14 views)
  • Beacon Intelligence + NLQ
  • SCIM 2.0 provisioning
  • Cross-tenant benchmarks
  • Email + chat support
Enterprise
Enterprise

Dedicated tenancy · unlimited seats

Custom
annual contract
  • Everything in Growth
  • Dedicated tenancy option
  • 4-eyes SoD enforcement
  • 7-year WORM audit archive
  • SLA + 24/7 support
  • Named CSM
  • BAA / DPA on request

Frequently asked

Where is my data stored?
Your primary tenant sits in your chosen region — EU (Frankfurt), US (Iowa), or IN (Mumbai). No data leaves that region except explicit exports you initiate. Data-residency addendum available on Enterprise.
Which SSO IdPs do you support?
Any SAML 2.0 or OIDC-compliant IdP — Okta, Microsoft Entra (Azure AD), Google Workspace, OneLogin, Ping, Auth0, JumpCloud, Rippling, and generic OIDC. SCIM 2.0 provisioning included.
Can I bring my own LLM key?
Yes. Copilot and Elevia use the Lovable AI Gateway by default. On Enterprise you can point them at your own OpenAI, Anthropic, or Azure OpenAI account — model calls stay in your subscription.
What happens on account deletion?
GDPR Art. 17 erasure workflow with SA-1/SA-2 4-eyes sign-off. Rows are tombstoned, PII is wiped, hash-chain integrity preserved. Full data export delivered before deletion.
Do you charge extra for SSO?
No. SAML 2.0, OIDC, and SCIM 2.0 are included on every plan, including the free Starter tier.
Do you support Razorpay for India?
Yes — pay in INR via Razorpay, or in USD via Stripe. GST invoice generated automatically.
Can I self-host?
Enterprise customers can opt for dedicated tenancy in their preferred Cloudflare region. Full on-prem is on the roadmap.
What's the audit retention?
7 years, Object-Lock COMPLIANCE mode on Cloudflare R2. Anchors published nightly.