Plans & tiers
SuperSecure is priced per person per month, monthly or annually (annual billing is 20% less). An account is an account: a person can hold a free personal account and a paid seat in their company at the same time. The pricing page is the authoritative price list; this page explains what each tier is for.
| Tier | Price | For |
|---|---|---|
| Free | $0 | Anyone. Protect, share and see. Unshare is metered at $1 each; API events at $0.02 each. |
| Individual | $20 / month | One person, unlimited unsharing, a branded extension of your own. |
| Business Core | $100 / seat / month | A growing team: shared company name, one registry entry, team sharing, a lighter console than a full enterprise rollout. |
| Enterprise Core | $200 / user / month (minimum 5) | Organisations: SSO (SAML / OIDC), compliance packs (audit export, retention, DPA), org-wide policies. |
| Institutional | $1,000 / user / month | Banks, funds, governments, health systems: on-premises or self-hosted deployment of the packaging and viewing pipeline, customer-held keys (your KMS or HSM holds your half), dedicated infrastructure and region pinning, air-gapped export, custody attestation for auditors, named contact and custom SLA. |
#What is metered
Every tier meters the same events into an append-only billing ledger you can read from your account:
- Unshares on Free personal accounts ($1; included above).
- API events on keyed calls from Free accounts ($0.02).
- Seats: inviting someone into an organisation meters a seat at the tier price; removing them stops it.
Idempotency keys mean a retried request never double-charges.
#Organisations
A company on Business tiers and above is an organisation: it owns a verified domain (a DNS TXT record, superfile-verify=<org id>), holds seats, and can name teams as share targets. The org owner invites people; a pending seat shows up in the invitee's sign-in chooser as Join <org>.
#Institutional and on-premises
Institutional is the tier where the customer holds the keys. The viewing and packaging pipeline runs on infrastructure you control, and the split key's second half lives in your KMS or HSM, so SuperFile alone can never open a file. The licence server that makes this possible is SuperDRM, and its on-premises install is documented in Deployment overview and On-premises install. Talk to us on the Become a customer page to scope a rollout.
#Changing plans
Upgrade or downgrade from your account's plan panel. A downgrade takes effect at the end of the billing period; an upgrade is immediate and pro-rated. Refunds follow the refund policy.
Updated September 2026