The safety rails are not the upsell
Approval gates, envelope-encrypted credentials, and an append-only run log are in every plan including the free one. What the paid tiers buy is history, identity controls, and key rotation on your schedule — the things an auditor asks for, not the things that stop an automation moving money by accident.
Run volume is what changes between tiers. Approval gates, encrypted credentials, and the audit log do not.
Free
₹0/month
Run one real workflow end to end, with approvals on, before you spend anything.
- Runs / month
- 500
- Seats
- 1
- Connectors
- 3
- Audit retention
- 7 days
- 500 workflow runs a month across up to 3 connectors
- Single-approver gate on any step that writes to an external system
- Immutable run log with the exact payload each step saw, kept 7 days
- Credentials stored as envelope-encrypted secrets, never in workflow JSON
- Data processed and stored in the Mumbai (ap-south-1) region
- Community forum support and the full product documentation
Starter
₹1,999/month
For a small ops team automating the daily queue without losing the paper trail.
- Runs / month
- 10,000
- Seats
- 3
- Connectors
- 8
- Audit retention
- 30 days
- 10,000 runs a month, 8 connectors, 3 seats with 3 preset roles
- 30-day audit retention, exportable to CSV or JSON by any Admin
- Named approvers per workflow, with the approval decision written to the run log
- Manual secret rotation with a re-key that leaves running workflows intact
- AI steps redact configured PII fields before the prompt leaves your tenant
- Email support with a 2-business-day first response
Growth
Most popular₹5,999/month
The tier most teams settle on: multi-step approvals, a sandbox, and 90 days of audit.
- Runs / month
- 100,000
- Seats
- 10
- Connectors
- 20
- Audit retention
- 90 days
- 100,000 runs a month, 20 connectors, 10 seats across 6 preset roles
- Multi-step role-based approvals with escalation after a configurable timeout
- Google and Microsoft OIDC sign-in, plus IP allowlisting on the console and API
- Scheduled 90-day secret rotation with drift alerts when a credential goes stale
- One sandbox environment with its own secrets, so tests never touch production data
- HTTP and webhook connector builder for internal services, request signing included
- Email and chat support with an 8-business-hour first response
Business
₹14,999/month
For regulated teams that have to hand an auditor a year of evidence on request.
- Runs / month
- 500,000
- Seats
- 40
- Connectors
- Unlimited
- Audit retention
- 1 year
- 500,000 runs a month, unlimited connectors, 40 seats with custom role definitions
- SAML 2.0 single sign-on and SCIM provisioning, so leavers lose access on deprovision
- Quorum approvals (any 2 of 3 approvers) on payment, refund, and customer-data steps
- 30-day scheduled rotation plus on-demand rotation from the API or console
- One-click DPDP evidence pack: consent state, access requests, erasure jobs, approver identities
- Audit log streaming to your own SIEM over HTTPS, with replay for missed windows
- Priority support with a 4-business-hour first response and a named onboarding engineer
Enterprise
Enterprise is quoted after a scoping call
Dedicated tenancy, contractual response times, and retention measured in years.
- Runs / month
- Custom
- Seats
- Unlimited
- Connectors
- Unlimited
- Audit retention
- Up to 7 years
- Dedicated tenant in the Indian region of your choice, isolated at the VPC boundary
- Encryption keys in an AWS KMS custom key store backed by HSMs you can revoke
- Break-glass access under dual control, time-boxed, and logged to your SIEM as it happens
- Attribute-based access rules on top of custom roles, plus enforced MFA through your IdP
- Private connectors built and code-reviewed with your team, deployed to your tenant only
- 24x7 support with a contractual 1-hour P1 response, quarterly architecture reviews
- Retention configurable to 7 years, with legal hold that blocks scheduled deletion
Enterprise is quoted after a scoping call: run volume, residency, retention window, and how your IdP handles break-glass. Expect a written architecture summary before any contract.
Prices in INR, exclusive of GST. GST at the applicable rate is added on your invoice.
Four numbers decide which plan fits: runs a month, seats, connectors, and how far back the audit trail goes. Everything else is the same platform.
| Capability | Free | Starter | Growth | Business | Enterprise |
|---|---|---|---|---|---|
| Workflow runs per month | 500 | 10,000 | 100,000 | 500,000 | Custom |
| Audit log retention | 7 days | 30 days | 90 days | 1 year | Up to 7 years |
| Approval gates | Single approver | Named approvers per workflow | Multi-step, role-based | Quorum, 2 of 3 | Quorum + dual-control break-glass |
| RBAC roles | 1 (Owner) | 3 preset | 6 preset | Custom roles | Custom + attribute rules |
| SSO / SAML with SCIM | Google & Microsoft OIDC | SAML 2.0 + SCIM | SAML 2.0, SCIM, enforced MFA | ||
| IP allowlisting | Allowlist + mTLS on egress | ||||
| Secret rotation | Manual | Scheduled, 90 days | Scheduled 30 days + on-demand | Custom schedule + external vault sync | |
| HSM-backed encryption keys | Optional add-on | AWS KMS custom key store | |||
| Data residency choice | Mumbai (ap-south-1) | Mumbai (ap-south-1) | Mumbai (ap-south-1) | Mumbai or Hyderabad | Any Indian region, dedicated VPC |
| DPDP evidence export | CSV and JSON, manual | CSV, JSON, scheduled | One-click evidence pack | Evidence pack + auditor read-only access | |
| Audit log streaming to your SIEM | HTTPS with replay | HTTPS, Kinesis, or syslog | |||
| Sandbox environment | 1 sandbox | 3 sandboxes | Unlimited | ||
| Custom connectors | HTTP + webhook builder | HTTP, webhook, signed JS steps | Private connectors, co-reviewed | ||
| Support response | Community forum | Email, 2 business days | Email & chat, 8 business hours | Priority, 4 business hours | 24x7, 1-hour P1, contractual |
Answers on quota overruns, annual billing, and what happens at renewal. The full set of security and compliance questions is on the FAQ page.
What next
Not sure which plan your review will pass
Book a scoping call and we will map your run volume, residency requirement, and retention window against the tiers, then tell you which one fits — including when the answer is the free tier for another quarter.