Start in observe mode at no cost: actions are evaluated against policy and recorded, while policy effects stay non-blocking. Turn on enforcement when you are ready to stop governed actions before they execute.
Pricing is per organization (tenant), not per user. Each plan has fixed organization-wide limits.
Registered organization
$0 per organization
Evaluate real policy decisions with a small team. Nothing is blocked by tenant-authored policy effects.
Start with FreeNo card required
Registered organization
$100 USD / month, per organization
Choose observe or enforce for each supported policy, with higher fixed limits, exports, customer-managed SSO, and longer history.
Start 14-day trialCard required · plus applicable taxes · cancel before renewal
Limits apply to the whole organization. Requests above a limit are declined rather than billed as overages. Enforcement itself is not metered.
| Capability | Free | Premium |
|---|---|---|
| Policy mode What happens when a tenant policy says no | ||
| Policy evaluation and decision record | Yes | Yes |
| Action gating Block before the governed action executes | Observe only | Optional enforcement |
| Organization limits | ||
| Active human users | 3 | 10 |
| Tenant administrators | 2 | 3 |
| Active service accounts | 25 | 250 |
| Active agent principals | 10 | 100 |
| Active workflow deployments | 5 | 50 |
| Governed runtime starts / UTC month | 500 | 25,000 |
| Concurrent workflow executions | 1 | 10 |
| Active execution duration Active compute, not elapsed wait time | 10 min | 60 min |
| Workflow session retention | 7 days | 30 days |
| Telemetry, audit, and alert history | 2,000 records / 7 days | 100,000 records / 30 days |
| Monitoring query window | 15 min default, 1 hr max | 1 hr default, 24 hr max |
| Workflow, execution, and audit export | No | Yes |
| Customer-managed SSO federation | No new setup | One active IdP |
A tenant administrator starts the one 14-day trial and manages the subscription for that organization. User roles and model-provider credentials are managed separately.