> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kvelden.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Plans & Storage

> The Enterprise license tiers for Enclave SaaS — what each tier includes, how much storage and how many users you get, and how to add more storage without changing your renewal date.

> [!NOTE]
>
> This page covers the hosted **SaaS** service. For what happens when a license
> nears or passes its expiry date, see [Licensing & Expiry](https://docs.kvelden.com/enclave/saas/licensing.md).
> The self-hosted appliance is licensed differently — see
> [Licensing & Activation](https://docs.kvelden.com/enclave/appliance/licensing.md).

## How plans work

Every organisation on Enclave SaaS runs on the **Enterprise** platform under one
of three license **tiers** — **Basic**, **Flex**, or **Advanced**. The tier sets
your usage limits (storage, users) and which capabilities are unlocked. All tiers
share the same zero‑knowledge encrypted platform; the tier defines scale and
which advanced features are available.

You can see your current tier, storage, and expiry at any time on the **License**
page (**Settings → License**, `/license`). To choose or change a tier, talk to
your account team — use **Contact Sales** from the License page or the in‑app
plans screen.

## Tier comparison

| | **Basic** | **Flex** | **Advanced** |
| - | - | - | - |
| Encrypted storage (platform) | 100 GB | 1 TB | 5 TB (**unlimited with BYOS**) |
| Users (any role, incl. pending invites) | 50 | 250 | Unlimited |
| Org units (tenant structure) | 25 | Unlimited | Unlimited |
| Secure Rooms (internal) | ✓ | ✓ | ✓ |
| Single sign‑on (SAML & OIDC) | ✓ | ✓ | ✓ |
| Tamper‑evident audit logs | ✓ | ✓ | ✓ |
| Classification labels & clearance (MAC) | ✓ | ✓ | ✓ |
| Room: external party access & approvals | ✗ | ✓ | ✓ |
| Audit log export to SIEM | ✗ | ✓ | ✓ |
| Custom SMTP relay | ✗ | ✓ | ✓ |
| **DLP content scanning** (in‑VPC OCR) | ✗ | ✓ | ✓ |
| BYOK — bring your own KMS key | ✗ | ✓ | ✓ |
| Room: e‑signature (PAdES) & secrets vault | ✗ | ✗ | ✓ |
| **Automated data classification (C1–C4)** | ✗ | ✗ | ✓ |
| Bulk data import (S3 connector) | ✗ | ✗ | ✓ |
| BYOS — bring your own storage | ✗ | ✗ | ✓ |
| BYOD — bring your own database | ✗ | ✗ | ✓ |
| Co‑owner escalation (up to 3 owners) | ✗ | ✗ | ✓ |

> [!NOTE]
>
> **Single sign‑on is included on every tier** — there is no "SSO tax". DLP
> **content scanning** unlocks at **Flex**; **automated C1–C4 classification** and
> the premium AWS Textract OCR engine are **Advanced** (the in‑VPC OCR used for
> scanning is included from Flex).

## Storage

Each tier includes an amount of **platform storage** — encrypted file data stored
on the Enclave‑managed backend. The included allotment is:

| Tier | Included platform storage |
| - | - |
| Basic | 100 GB |
| Flex | 1 TB |
| Advanced | 5 TB |

Only files stored on the **platform** backend count toward this limit. Files kept
in your own bucket via **Bring Your Own Storage (BYOS)** do **not** count — BYOS
storage is effectively unlimited and billed by your own cloud provider.

### Need more storage?

You have two ways to grow beyond the included allotment:

> [card] Storage add‑ons
>
> Buy additional **platform** storage in blocks. Add‑ons stack on top of your
> tier's included allotment — your License page then shows, for example,
> **"1 TB + 2 TB add‑on = 3 TB"**. Request add‑ons from your account team.

> [card] Bring Your Own Storage (BYOS)
>
> On **Advanced**, connect your own S3‑compatible bucket. Your encrypted files
> live in your cloud account at your cost, with no platform‑storage limit — the
> best fit for very large or fast‑growing data. See
> [Storage](https://docs.kvelden.com/enclave/platform/storage.md).

> [!NOTE]
>
> **Storage add‑ons keep your renewal date.** When you add storage mid‑term, the
> new allotment is **co‑terminous** — it takes effect immediately and expires with
> your existing license term. A top‑up never moves your renewal date forward or
> back. At renewal, you renew the tier and any add‑ons together.

> [!TIP]
>
> For large or rapidly growing datasets on Advanced, **BYOS** is usually the better
> choice than stacking add‑ons: there's no platform‑storage limit, and your data
> stays in your own cloud account — reinforcing the zero‑knowledge model.

## Viewing your plan and storage

The **License** page (**Settings → License**) shows your current tier, the
capabilities included, your storage (included allotment plus any add‑on), and your
expiry date. Only the organisation **owner** (and a **security officer**, for
infrastructure settings) can see and change the license.

## Changing tiers or adding storage

Tier changes and storage add‑ons are issued by your Kvelden account team as a new
license, which applies immediately with no downtime:

* **Upgrading a tier** (e.g. Flex → Advanced) unlocks the new tier's capabilities
  and limits right away.
* **Adding storage** raises your platform allotment co‑terminously, as above.
* Existing data is never deleted when limits change. If a new, lower limit is ever
  applied and you are above it, existing files stay **readable**; only *new*
  uploads are paused until you are back within the limit.

Use **Contact Sales** from the License page to request a change.

> [!NOTE]
>
> For the full expiry and grace‑period behaviour after a license lapses, see
> [Licensing & Expiry](https://docs.kvelden.com/enclave/saas/licensing.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.