Simple, Transparent Pricing

A mesh object is a unique person or entity projected into the mesh from your connected systems. If the same person exists in Active Directory and Entra ID, they are joined into a single mesh object and count once. Group objects and service accounts also count. Erased subjects (right-to-erasure) keep a record stamped with ErasedAtUtc for the audit trail but the audit metadata row does not consume a license slot.

Three things: a mesh-object cap (new objects are refused once it is reached), a connector cap (adding a connector past it is refused and the sync engine runs only that many), and an advanced-transforms flag that enables the GeneratePassword transform used to set an initial password when provisioning AD users. Everything else — the full transform and precondition script DSL, attribute flow rules, audit and run-history retention windows, SIEM forwarding paths, the secret-store provider switch, hybrid authentication, the audit hash chain, DSAR endpoints, threat model, SBOM — ships in every plan and is selected through configuration, not license tier. Four modules are gated by tier name instead: IdentityMesh Vault, self-service group management, AI assistance and mesh workflows (including the workflow designer) require an Enterprise license.

Yes, you can upgrade or downgrade your plan at any time. Upgrades take effect immediately, and downgrades take effect at the start of your next billing cycle. Your data and configuration are preserved during plan changes.

For online purchases, we accept all major credit cards via Stripe. For larger organizations, we also accept ACH bank transfers and checks — contact sales for details. All Small Business, Professional and Enterprise licenses are billed annually.

Yes! The Starter plan is a free 30-day trial with up to 100 mesh objects and 2 connectors. No credit card required — just sign up and start synchronizing. When your trial ends or you need more capacity, upgrade to Small Business, Professional or Enterprise.

When your mesh object count reaches your plan's identity limit, the sync engine will immediately halt the active import and log a license error in the connector audit trail. Existing identities remain intact and accessible, but no new identities will be projected until you upgrade your license. Updates and deletes for already-projected identities continue to work on subsequent sync cycles. You can upgrade your plan at any time to resume full synchronization.

Yes. Enterprise pricing includes volume discounts, and we offer special pricing for nonprofits, educational institutions, and government organizations. All plans are billed annually. Contact our sales team for details.