Pricing
Pay per connected tenant
Create your account, set up a workspace, and get 14 days of Pro - connect tenants, detect drift, and run impact analysis. No credit card required. After trial: Pro from $9.99/mo (first tenant included) + $10/mo per additional tenant, or Enterprise from $29.99/mo + $4.99/mo per additional tenant. Enterprise adds a dedicated database (provisioned after upgrade), outbound alerts, CSV exports, and extended retention.
No standalone Free plan. After your 14-day Pro trial, choose Pro or Enterprise to keep using Policytab.
Start with a 14-day Pro trial
Create your account, set up a workspace, and get 14 days of Pro - connect tenants, detect drift, and run impact analysis. No credit card required.
There is no standalone Free plan. After the trial you must choose Pro or Enterprise to keep using Policytab.
Pro
One tenant or a growing fleet
$9.99/mo
+ $10/mo per additional tenant
First customer tenant included
- $9.99/mo includes your first connected tenant
- $10/mo for each additional tenant
- Per-tenant baseline drift detection
- Policy writes with preview, optional approval, and rollback
- Impact analysis and compliance reports
- MFA posture and sign-in drill-down
- Bulk changes, groups, and risk-user actions
- In-app alert triage
- 30-day history · email support
Enterprise
For regulated teams and larger tenant fleets
$29.99/mo
+ $4.99/mo per additional tenant
First customer tenant included
- $29.99/mo includes your first connected tenant
- $4.99/mo for each additional tenant
- Everything in Pro
- Dedicated database
- Slack, Teams, email, and signed webhook alerts
- Scheduled compliance digests to your channels
- CSV exports of reports and audit data
- Unlimited audit and alert history
- Sign-in analysis up to 90 days (Graph limit)
Example for MSPs: 3 customer tenants on Pro = $9.99 + (2 × $10) = $29.99/mo. Internal IT with one production tenant pays $9.99/mo on Pro. Annual Pro base is $99.90/yr ($8.33/mo). Checkout happens in-app at Settings → Billing after you sign in.
Compare plans
Pricing
- Pro
- $9.99/mo + $10/tenant
- Enterprise
- $29.99/mo + $4.99/tenant
Drift detection & policy writes
- Pro
- Yes
- Enterprise
- Yes
Impact analysis & compliance reports
- Pro
- Yes
- Enterprise
- Yes
Exports & outbound webhooks
- Pro
- -
- Enterprise
- Yes
Scheduled compliance digests
- Pro
- -
- Enterprise
- Yes
Dedicated database
- Pro
- -
- Enterprise
- Yes (provisioned after upgrade)
Audit retention
- Pro
- 30 days
- Enterprise
- Unlimited
Sign-in analysis window
- Pro
- 30 days
- Enterprise
- Up to 90 days (Graph limit)
Support
- Pro
- Enterprise
- Priority
- Annual billing: $99.90/yr for Pro ($8.33/mo equivalent) and $300/yr for Enterprise ($25/mo).
- Upgrade anytime via in-app Stripe checkout at Settings → Billing.
- Enterprise includes a dedicated database, outbound notifications, CSV exports, and unlimited audit retention.
- On request: A countersigned DPA and custom MSA support when procurement requires them.
FAQ
What counts as a connected tenant?
One Microsoft Entra ID directory (tenant) you add to your Policytab workspace under Tenants. For internal IT that is usually your production Entra tenant; for MSPs it is each customer Entra tenant you onboard. Each distinct Entra tenant ID counts once in your workspace. Entra users, groups, Azure subscriptions, and Microsoft 365 licenses inside a directory do not add billing line items. If you connect separate dev, test, and prod Entra tenants, each one counts separately. Adding an organization starts the count (including while connect or admin consent is still in progress). Disconnecting or pausing does not remove it from billing until an owner permanently deletes the tenant (Settings → delete, after disconnect when required). The same Entra tenant cannot be onboarded twice in one workspace. Your first connected tenant is included in the Pro or Enterprise base fee; each additional tenant is $10/mo on Pro or $4.99/mo on Enterprise, synced to Stripe when you have an active subscription.
Is there a Free plan?
No. Every new workspace starts with a 14-day Pro trial (no credit card). When the trial ends, choose Pro or Enterprise to continue. There is no read-only tier after trial.
What happens after the 14-day Pro trial?
Your trial ends and the console locks until you subscribe to Pro ($9.99/mo + $10/tenant) or Enterprise ($29.99/mo + $4.99/tenant). Pick a plan at Settings → Billing after you sign in.
Do I need a credit card to start the trial?
No. Create a workspace and run the 14-day Pro trial without entering payment details. Subscribe at Settings → Billing before or when the trial ends to keep using Policytab.
Can I move between plans?
Yes. Subscribe or change plans from Settings → Billing (Stripe checkout or Customer Portal). Upgrades apply once Stripe confirms the subscription. Plan-change timing for downgrades follows your Stripe subscription settings. When you add or remove tenants in Policytab, we sync the per-tenant add-on quantity on your subscription automatically.
What does Enterprise include in the product?
Enterprise unlocks a dedicated database (provisioned after upgrade), outbound Slack, Teams, email, and signed webhook alerts, scheduled compliance digests, CSV exports, unlimited audit retention, and sign-in analysis windows up to 90 days (Microsoft Graph limit). Configure notification channels at Settings → Notifications after upgrading. First tenant is included in the base fee; each additional tenant is $4.99/mo (Pro add-ons are $10/mo).
Can I get Entra SSO for the Policytab console?
Not currently. Policytab operator sign-in uses email and password. Microsoft Entra admin consent connects customer tenants to Policytab and is separate from console sign-in. Contact us if console SSO is a procurement requirement so we can discuss the roadmap.
Where do you store our data?
Hosted on AWS (ca-central-1 by default). Each connected Entra tenant is scoped to your workspace. Customer Entra credentials are encrypted at rest. Contact us if you need a specific region or DPA.