Path: Settings → Billing (/settings/billing)
Plans
| Starter | Plus | Pro | |
|---|---|---|---|
| Price | $100/mo (annual) | $250/mo | $500/mo |
| Saved scenarios | 3 | 10 | 20 |
| Completed exercises w/ reports | 3 | 10 | 20 |
| Facilitator seats | 1 | 3 | 10 |
| Participants per exercise | 15 | 30 | 60 |
| Custom participant roles | 8 | 15 | 30 |
| Breachday templates | ✓ | ✓ | ✓ |
| CISA CTEP templates | — | ✓ | ✓ |
| AI Scenario Builder | — | 5 runs / 1 save | 15 runs / 3 saves |
| IT assets / vendors / business processes | — | 50 each | Unlimited |
| Playbooks | — | 5 | 20 |
| Crisis comm plans | — | 3 system | Unlimited |
| Scenario export (JSON/DOCX/PDF) | — | ✓ | ✓ |
| Data protection mode | — | ✓ | ✓ |
| Lessons learned | ✓ | ✓ | ✓ |
| SSO | — | — | Coming soon |
Biennial billing: 10% discount.
Subscription flow
- Signup → billing page with onboarding flag
- Choose plan and term → Stripe Checkout (15-day trial on first subscription)
- Manage via Stripe Customer Portal
Subscription statuses
- Incomplete — signed up, no plan; app blocked except billing
- Trialing / Active — full access per plan
- Past due — payment issue; resolve in portal
- Canceled — may enter read-only grace period
Data protection mode Plus Pro
Per-exercise toggle: remove session data after org retention window. Configure retention hours in Organization settings.