Subscription plans and pricing
ISMS Copilot plans from free exploration through Unlimited. Session credits, uploads, Plus trial, and what each tier unlocks.
Contenu en anglais
ISMS Copilot pricing is plan-based. Usage for capped paid tiers is measured in session credits that reset every 4-hour UTC window, plus a monthly upload allowance. Exact Stripe prices and currency options appear in the app upgrade dialog; treat the in-app checkout as the source of truth for amounts if they ever differ from this page.
Unlimited is the $1,000/month self-serve top chat plan. Buy it in the app upgrade dialog or billing portal, the same way as Business. This page is not a checkout.
Plan comparison (product truth)
Self-serve sold lineup today (upgrade dialog PLANS_V2) is Plus, Standard, Pro, Business, and Unlimited. The free-to-paid acquisition grid stays Plus / Standard / Pro. Unlimited sits on billing the same way Business does.
| Feature | Free | Plus | Standard | Pro | Business | Unlimited |
|---|---|---|---|---|---|---|
| Typical price | Free | $20/mo or $200/yr | $40/mo or $400/yr | $100/mo or $1,000/yr | $200/mo or $2,000/yr | $1,000/mo or $10,000/yr ($1,000 = €1,000) |
| Credits per 4h session | 10 | 50 | 100 | 250 | 500 | Unlimited (no commercial token cap) |
| Messages per 4h | 10 successful messages | Unlimited (credits still apply) | Unlimited | Unlimited | Unlimited | Unlimited |
| Tokens per conversation | 300,000 (does not reset; start a new conversation) | No cap | No cap | No cap | No cap | No cap |
| File uploads / month | 10 | 500 fair use | 500 fair use | 500 fair use | 500 fair use | Unlimited (upload top-up is hidden) |
| Think | No | Yes | Yes | Yes | Yes | Yes |
| Beyond / web research | No | Yes (10 Beyond attempts per user per UTC day) | Yes (10 per day) | Yes (10 per day) | Yes (10 per day) | Yes (50 Beyond attempts per user per UTC day) |
| heyGRC PR compliance review | Not included | Not included | 100 private PR reviews a month | 100 private PR reviews a month | 100 private PR reviews a month | 2,000 private PR reviews a month |
| Plus trial (eligible free accounts) | Can start 7-day trial | Included while trial active | N/A | N/A | N/A | N/A |
heyGRC pull request compliance review is included with Standard, Pro, Business, and Unlimited. Standard, Pro, and Business include 100 private PR reviews per month. Unlimited includes 2,000 private PR reviews per UTC month. A PR review counts one pull request once a month; re-pushes to the same pull request do not count again. The inclusion is on one heyGRC organization at a time, activated in the heyGRC console with the same account you use here. Public repositories do not count against the private allowance. They stay on the platform 500 reviews per organization per month fair-use cap. Do not treat public reviews as unlimited. Trials do not qualify. There is no on-demand overage and no buffer on the included allowance: when it is used up, reviews pause with a link to pick a heyGRC plan. Prepaid API credits are a different product and are not included. See heyGRC included with your plan.
Essential still exists for grandfathered subscribers (25 credits/session, Think available, no Beyond / web research by default). It is not offered as a new self-serve purchase in the current upgrade grid.
Session = fixed 4-hour UTC bins, not a timer that starts when you first send a message. Credits and Free message counts reset on those boundaries. Unlimited does not use a commercial credit cap in that window.
What “credits” mean
Credits are a display unit for remaining capacity in the current 4-hour window on capped plans (Free through Business). The product enforces token-based limits under the hood; the usage meter scales that consumption onto the credit numbers above so the gauge matches the upgrade dialog.
Unlimited has no commercial token cap, so the usage pane shows Unlimited instead of a credit ratio. There is no silent monthly token ceiling.
Uploads (fair use)
- Free: 10 completed uploads per calendar month (UTC).
- Plus, Standard, Pro, Business, and grandfathered Essential: 500 completed uploads per month (fair use).
- Unlimited: monthly uploads are unlimited. Upload top-up is not offered on this plan.
- Workspace-pinned reference files are not counted the same way as chat uploads; see upload docs. The workspace still stores up to 50 files (availability, not a plan credit).
- Failed or stuck processing files do not permanently burn your quota the way completed files do.
Free plan
No card required. Good for exploring frameworks, light Q&A, and deciding whether to upgrade.
Included: chat on supported frameworks, workspaces, history, community-style support path.
Limits: 10 session credits per 4h window and 10 successful messages per 4h window; 300,000 tokens per conversation (then start a new conversation); 10 uploads/month; no Think, Beyond, or web research.
Plus trial (7 days, no card)
Eligible free accounts can start a 7-day Plus trial from the app (including when you click Think, Beyond, or web search). One trial per account. While the trial is live you get Plus capabilities (Think, Beyond, higher limits, uploads). When it ends, your workspaces and history stay; paid-only modes lock again until you subscribe. The app then shows Upgrade, not a second Start free trial.
Essential (grandfathered)
Not sold as a new plan in the current upgrade grid. Existing Essential subscribers: 25 credits/session, Think available, Beyond / web research not part of the default Essential package, 500 upload fair use.
Plus ($20/mo or $200/yr)
Daily compliance work: 50 credits/session, Think, Beyond, web research, 500 uploads fair use.
Standard ($40/mo or $400/yr)
More headroom: 100 credits/session, same Plus feature set, 500 uploads.
Pro ($100/mo or $1,000/yr)
Heavy use: 250 credits/session, 500 uploads, priority response positioning in-app.
Business ($200/mo or $2,000/yr)
Highest capped self-serve capacity: 500 credits/session, 500 uploads, priority support. Business is not the top chat plan. Unlimited is.
Unlimited ($1,000/mo or $10,000/yr)
Self-serve top chat plan for individuals and organizations. Same SKU for both. Same models as Plus and above (GLM-5.3 family). Unlimited is not a Claude Opus plan. Advanced Data Protection still uses Mistral. Agent Tasks are unlimited except under Advanced Data Protection, where Agent Tasks stay unavailable.
Buy it in the app. There is no Contact Sales path and no live checkout URL on this page.
What is commercially unlimited
- Chat tokens on the shared 4-hour pool (solo or team). The shared pool is not capped at a token limit.
- Monthly file uploads. Upload top-up is hidden.
- Agent Tasks, except under Advanced Data Protection.
What still has a number (availability, not a credits quota)
- 2,000 private heyGRC PR reviews per UTC month, on one organization. Public reviews: platform 500 per organization per month fair-use.
- 50 Beyond attempts per user per UTC day. Search still has a per-user daily abuse cap.
- 100 documents per analysis.
- 50 stored workspace files.
- 8 concurrent generations per account, 16 per organization.
- Account MCP: 120 requests per minute per token.
- Team member cap stays 50. Extra teammates are free up to that cap.
- Prepaid API credits are a different product and are not included.
Extra usage is not available on Unlimited. Solo overflow (continue on a faster model past the included session) is off on this plan, because the included pool does not run out.
Teams and shared usage
- A paid subscriber creates a team in Settings → Team (Free cannot host a team).
- Invitees join for free, up to 50 members; the plan is billed once for the whole team.
- Chat, uploads, and Agent Tasks share one usage pool. On Plus through Business, chat has a hard stop at the included session unless the owner buys Extra usage. Unlimited is the exception: the shared pool is not capped at a token limit, and Extra usage is not offered. See Manage Teams billing and usage.
Payment methods
- Cards (self-serve tiers) via Stripe, when the plan is offered in checkout.
- Bank transfer / invoice: Business annual (€2,000) and Unlimited annual (€10,000), on request. Monthly invoice is on request only, not the default. Not every annual upgrade.
Where prices can change
Checkout and the upgrade dialog are authoritative for live Stripe amounts and currency. This page tracks product structure (credits, uploads, mode access, Unlimited). For privacy and provider routing, see Advanced Data Protection and the Trust Center.