How do plans and billing work?

The three plans

• Free ($0): 1,000 guarded calls a month, 1 team member, 2 API keys, 2 connected tools, 3 policies, email approval alerts, 7-day audit history.
• Pro ($29/month): 50,000 calls a month, 5 team members, 20 keys and connected tools, unlimited policies, Slack/Teams/Telegram notifications, custom SMTP, standing grants, webhooks, authenticated approvals with reversal, 90-day audit retention.
• Scale ($199/month): 1,000,000 calls a month, unlimited members, keys, connected tools and policies, white-label branding with a custom domain, audit export, and 1-year audit retention, plus everything in Pro.

What's actually enforced

Two different kinds of limit, and they fail differently:

• Resource counts (seats, API keys, connected tools, policies) are hard caps. Creating one more than your plan allows returns an error at creation time, not a warning after the fact.
• Monthly call volume is soft.Going over your plan's call limit never blocks traffic. The Usage pageshows an over-limit banner, and that's it, your agents keep working while you decide whether to upgrade.

Capability gates (custom SMTP, multi-channel notifications, standing grants, webhooks, white-label branding, audit export) check your plan the moment you try to use them and return a plan-upgrade error if you're not entitled, rather than silently no-op'ing. Audit retention works as a read boundary: you can search and export history back to your plan's retention window, not further, on Free that's 7 days back.

Checkout, upgrades, and downgrades

Upgrading opens an inline Paddle checkout right on the /dashboard/plans page. Paddle (not Enforgate) is the merchant of record and handles the card details directly, Enforgate never sees or stores a card number. Once Paddle confirms payment, a webhook flips your org onto the new plan, usually within a couple seconds of the success screen.

Switching plans while already subscribed reuses the same checkout flow. Canceling takes effect at the end of the current billing period, you keep paid-plan access through the period you already paid for, and your org reverts to Free automatically once it ends. There's no immediate-cutoff cancellation.

The Manage subscriptionbutton opens Paddle's self-serve customer portal (payment method, invoice history, cancellation) in a new tab, pre-authenticated so you don't need a separate Paddle login.

Promo codes

A promo code redeemed on the Plans page comps your org onto a higher plan for a fixed number of days, no card required. It's independent of your actual subscription state, a comped org can still be on Free underneath; the comp just raises the effective plan until it expires.

Refunds

Refunds are handled manually, by design, not as a self-service button. Submitting a refund request (admin-only) requires the transaction ID from your receipt and a description of at least 30 characters, and acknowledging the refund policy. The request is logged for a human to review; Paddle, as merchant of record, issues any actual refund.