Billing here is deliberately small: two plans, one dial, and a payment company on your receipt that isn't us. That last bit throws people, so we'll get to it. First, what you get on each plan, how the one paid knob works, why a plan change locks until your next renewal, and what Stripe is doing in the middle of it all.
Free and Pro, and nothing in between
There's a Free tier you never pay for, and a single paid tier, Pro. No bronze, silver, gold maze. The difference is the limits.
| Free | Pro | |
|---|---|---|
| Price | Free, always | €19.95 / seat / month |
| Users | 1 | One per seat, up to 100 |
| Observations | 10 | Unlimited |
| Evidence storage | 25 MiB | 2 GiB per seat |
| AI engine | Built-in fallback model | Advanced AI included |
Free is a real tier, not a time-bomb trial. It runs indefinitely inside those limits. Pro lifts the caps and adds Advanced AI, and it's priced per seat rather than as a flat bundle.
Seats are the only dial
Pro is €19.95 per seat, per month. One seat is one user. A five-person team buys five seats; add a sixth when the sixth person joins. You can run anywhere from 1 to 100 seats, and your evidence storage scales with them: 2 GiB per seat, so five seats is 10 GiB to share across the org.
That's the entire pricing model. No per-feature add-ons, no metered surprises at the end of the month. Seats up, seats down, that's the lever.
Advanced AI comes with Pro
The AI that drafts your findings, reassesses risk, and runs the advisor chat has a better engine on Pro, included, with nothing to configure. The managed tier defaults to Anthropic (Claude), chosen for richer, more accurate output, processed in the US under our DPA and Zero Data Retention agreement with no training on your data. Organisations that need EU data residency can switch the managed tier to Mistral (a European, EU-based provider with EU data centres, under a DPA and zero data retention) in one click. Free runs on a built-in fallback model so the features still work; Pro swaps in Advanced AI automatically the moment you're on the plan.
If GPT is your house standard, Pro can also switch the managed tier to OpenAI (GPT-5.6, processed in the US under the same DPA and no- training posture). The provider choice is per organisation and takes one click in Account settings.
If you'd rather run your own provider for data-sovereignty reasons, you can bring your own key (OpenAI, Anthropic, or Mistral) and it takes priority over ours. That's an option, not a requirement. Out of the box, Pro just works.
Why a plan change locks until renewal
You get one subscription change per billing cycle. Change your seat count once and the controls lock until your next renewal. It reads like a restriction; it's actually a guard rail against accidental charges and seat-thrash. Here's how the two directions behave:
- Upgrades apply immediately. Add seats and they're live now, with the prorated difference billed straight away so you only pay for the slice of the cycle you use.
- Downgrades wait for renewal. Drop seats and you keep them all until the cycle ends, then the lower count takes effect. No mid-cycle cut-off, no credit, just a clean change at the boundary.
Either way, that's your one change, and the subscription locks behind it. The app spells out why:
To prevent accidental charges, SecurityTrackr allows one subscription change per billing cycle. Your next change unlocks at renewal.
The escape hatch: a scheduled downgrade can always be called off. Hit Cancel scheduled change on the banner and the pending change clears and the lock lifts, so you can make a different change. Cancelling a pending change isn't counted against you. So the three states you'll ever see are simple:
- Clean. No change this cycle. Adjust seats freely.
- Locked. You upgraded this cycle. Further changes wait for renewal.
- Pending. You scheduled a downgrade for renewal. Let it ride, or cancel it to unlock.
Who's Stripe, and why does my statement say LINK.COM*?
You buy through Stripe. You get SecurityTrackr. And the line on your card statement reads LINK.COM* SecurityTrac, which can look odd if you weren't expecting it, so here's the why.
Stripe is our merchant of record, selling through its checkout brand, Link. That means Stripe is the company that actually sells you the subscription and takes the payment, while we provide the service behind it. They handle checkout, card processing, invoices, and (the big one) sales tax and VAT compliance across every country we sell into, including the EU B2B reverse-charge when you buy with a VAT number. We'd rather build a security register than run a global tax department, so we don't.
- Your card never touches our servers. Checkout happens on Stripe's own hosted page. The app hands you over and takes you back. We never see or store card details; we only hear back that a payment succeeded.
- The statement line is Link's. Charges appear as LINK.COM* SecurityTrac, with the receipt naming SecurityTrackr ApS as the provider. That's the charge for your SecurityTrackr Pro plan.
- Payment method and invoices live with Stripe. Updating a card or pulling past invoices goes through Stripe's billing portal, reachable from your subscription page.
- Stripe tells us what changed. When you pay, renew, or cancel, Stripe notifies the app and we flip your plan to match. Those notifications are the single source of truth for your billing state, so the app always reflects what you actually paid for.
Renewals, cancelling, and your data
At each renewal the cycle rolls over and the change lock clears, so a new billing period is a clean slate for seat changes.
Cancel whenever you like. Cancelling isn't the guarded once-per-cycle change, so it's never blocked. You keep Pro until the end of the period you've already paid for, then the org drops to Free automatically. Nothing gets cut off mid-cycle.
Dropping to Free, whether by cancelling or downgrading, doesn't delete anything. Your observations, companies, and evidence stay put. The Free limits just apply going forward, so you can't add past the caps until you're back under them. If a scheduled downgrade leaves you with more members than seats, nobody gets kicked out; existing members are grandfathered, and you simply can't invite new ones until your member count is back under the seat count.