Pricing
Monthly or annual. Cancel any time — your codes keep working for 90 days after.
Need more than Enterprise?
Enterprise Scale — custom code + scan limits, negotiated MSA, BAA, custom SLA, US / EU / FedRAMP residency, contract-defined analytics retention.
Side-by-side — every number in one screen
| Limit | Free | Solo | Business | Team | Agency | Enterprise | Enterprise Scale |
|---|---|---|---|---|---|---|---|
| Price (annual, /mo) | $0 | $9 | $29 | $99 | $349 | $1,500 | Custom |
| Price (monthly) | $0 | $12 | $39 | $129 | $449 | $1,800 | Custom |
| Dynamic codes | 1 (+1 per verification, up to 3) | 500 | 2,500 | 15,000 | 75,000 | 500,000 | Custom |
| Scans / month included | 500 | 50,000 | 250,000 | 1,000,000 | 4,000,000 | 25,000,000 | Custom |
| Overage rate (per 1K scans) | hard block | $0.18 | $0.116 | $0.099 | $0.087 | $0.06 | Custom |
| Seats | 1 | 1 | 5 | 12 (owner / admin / member) | 25 (owner / admin / member) | 100 | Custom |
| Teams per owner | — | — | 1 | 1 | Up to 10 | 50 | Custom |
| How to buy | Sign up free | Self-serve | Self-serve | Self-serve | Self-serve | Self-serve | Talk to sales → |
| Analytics retention | 30 days | 12 months | 24 months | 48 months + hourly buckets | 72 months + hourly buckets | 84 months + hourly buckets | Custom (10+ yr) |
| REST API | — | — | 1,000 req / day | 10,000 req / day | 50,000 req / day | Custom | Custom |
| Outbound webhooks | — | — | HMAC-SHA256 | HMAC-SHA256 | HMAC-SHA256 | + audit stream | + audit stream |
| SSO (SAML + OIDC) + SCIM | — | — | — | — | — | Yes | Yes |
| IP allowlist | — | — | — | — | — | CIDR-list per-org | CIDR-list per-org |
| Data residency | US | US | US | US | US | US | US / EU / FedRAMP |
| SLA | — | — | — | — | — | 99.9% w/ credits | Custom SLA |
| Support | Community | Email, best-effort | Email, best-effort | Email, best-effort | Priority <24h | Priority, 4-hr response | Dedicated CSM, 4-hr priority |
| Keep-Alive path on cancel | — | From $2/mo | From $2/mo | From $2/mo | From $2/mo | Custom contract | Custom contract |
| 90-day grace after cancellation | — | Yes | Yes | Yes | Yes | Yes | Yes |
| Static backup QR per code | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
| One-click data export (ZIP) | Yes | Yes | Yes | Yes | Yes | + audit CSV streaming | + audit CSV streaming |
| MSA + DPA | — | — | — | — | — | Click-through | Negotiated |
| BAA (healthcare) | — | — | — | — | — | — | Available |
Prices in USD. Every plan lists the exact number of codes and monthly scans included — we don't say "unlimited" when we mean "until you hit our hidden limit." Free starts at 1 dynamic code. Each verification (phone or payment method — no charge either way) adds 1 more code; verify both to reach the 3-code ceiling. Exceed your scan cap in a given month and the redirects keep working; we email you so you can decide whether to upgrade or ride out a one-off spike. Reasonable operational limits apply for traffic patterns that look like bot amplification, extortion, or other abuse, per our Terms of Service and Acceptable Use Policy. All paid plans include the static backup QR guarantee and 90-day grace period; Free ships with the static backup too, so codes keep scanning even if you never upgrade.