Plans, billing and upgrades

Organisation → Billing & plan shows your current plan, its caps and a usage meter, and — once billing opens — lets you move between plans. Billing is an Org admin capability. Every plan uses the same engine; plans differ in how many systems can have obligations generated, how many members you can have, and which features are unlocked.

Early access — a mode, not a tier

Right now the platform is a free public release while it is opened up. The billing tab says exactly that: there is nothing to pay and no card on file; paid plans open on 13 October, and the early-access discount is applied to your invoice automatically when you sign up for a regular plan after launch. Every checkout and plan-change route is switched off until then. Early access is never a trial or a free month.

While the early-access-mode switch is on, every organisation runs on the Govern level of capability — whatever its stored plan says — with caps of its own:

The workspace banner reads Early access — free until 13 October and states the rate you are on: 30% off, permanently, when billing opens. That window closes at midnight on 13 October 2026, Dublin time; an organisation created before then carries the 30% discount for as long as it stays. When you reach a cap, the app tells you inline — Early access includes three AI systems. Paid plans open on 13 October — and that your rate is locked in, with no upgrade button, because there is nothing to buy yet.

The plans, from 13 October

Pricing follows how much of the Act's work you have to do, not the role the EU AI Act gives you — because that is what decides the work. A free tier, three self-serve plans and a quoted Enterprise tier:

Two add-ons, and no per-framework fees anywhere else: an extra high-risk system is €49 a month each on any plan that already includes one (Govern and above), and the ISO/IEC 27001 programme is €199 a month on Govern and already part of Manage and Enterprise. Add-ons are never discounted.

A few things worth calling out:

• Your plan sets how many systems the register holds — three on Classify, five on Starter, twenty-five on Govern, unlimited from Manage — and how many of them may be high-risk. A system you archive stops counting against your allowance.
• Classify finds out what you have, what it is classified as, and which rules reach it — with a dated, watermarked classification report — and shows the obligation list read-only.
• Starter is for one or two systems, getting the basics right — the Art. 4 literacy and Art. 50 transparency duties every user of AI has, the GDPR records behind them, and working obligation sets for systems that are not high-risk.
• Govern is a governance programme across frameworks — every system worked, one high-risk system included, GDPR in full, ISO/IEC 42001 and the NIST AI RMF crosswalk, policies, the risk register and the evidence behind them.
• Manage is for providers of high-risk systems — the full provider programme, including the Art. 17 quality management system. That is a statutory duty and it is included; you never buy your own legal obligation back. ISO/IEC 27001 is part of the plan.
• Enterprise is Manage plus multi-entity, single sign-on, API access and a custom Data Processing Agreement — no self-serve checkout; talk to us for a quote.
• On a plan from before September 2026? Nothing changes for you: your plan, its limits and its price are kept for as long as you stay on it. Those plans are no longer offered to new customers, and your billing screen marks them legacy.

The programmes

ISO/IEC 42001, ISO/IEC 27001 and NIST AI RMF are programmes, not tiers. ISO/IEC 42001 and the NIST AI RMF crosswalk are included from Govern up — there is no per-framework fee for either. ISO/IEC 27001 is the one programme sold separately: €199 a month on Govern, and already part of Manage and Enterprise. GDPR is part of Starter (records) and Govern and above (in full). The programme cards are not shown while the crosswalk is switched off.

Veritome is not a certification body and does not audit or certify. Certification is granted by an accredited certification body following its own audit. NIST AI RMF has no certification at all.

Your assessment allowance

AI-assisted assessments are counted per calendar month, Dublin time — 100 during early access; Classify 5 · Starter 50 · Govern 250 · Manage and Enterprise on fair use afterwards. When you run out, the app tells you inline and the counter resets on the first of the month.

Choosing a billing period

Above the plan cards is a two-way toggle:

1. Monthly — pay per month, cancel any time.
2. Annual — billed yearly and charged ten months for twelve, so two months are free. That is where €790, €1,990 and €5,990 come from.

The founding rate — 30% off your plan for as long as you stay subscribed, for any organisation created before 13 October 2026 — is applied to your invoice automatically, with no code, and it stacks with annual billing: ten months for twelve first, then the 30%. Add-ons are never discounted.

Upgrading, once billing opens

1. Open Organisation → Billing & plan.
2. Choose your billing period.
3. On the plan you want, press Upgrade, and confirm the short purchase declaration.
4. You are taken to Stripe Checkout — enter payment details and confirm.
5. On return, your plan and its limits take effect immediately.

Once you have a paid subscription, Manage or cancel subscription via Stripe → opens Stripe's customer portal, where you can update your card, download invoices, or cancel. Cancelling ends access at the end of your current billing period — nothing is deleted before then.

Downgrading

Downgrades are allowed only if your current usage fits the smaller plan. If it does not, Checkout is blocked and tells you exactly what is over — for example Can't downgrade to Starter: you have 2 high-risk systems, Starter allows none. Archive the excess systems or remove members first, then downgrade.

What happens at a limit

You never lose data by hitting a cap. When you reach your system or member limit, the app blocks the new action and explains it inline; existing systems, members and documents stay exactly as they are until you free up space or, after launch, upgrade. The usage meter on the billing tab shows every count against its cap, and it mirrors the checks the API enforces — a meter that disagreed with the gate would offer a system the create button then refuses.