Choose the plan that suits you best.

    Prices update with the currency you choose.

    Currency

    QuartzID Essentials

    $750/month

    ≈ $1.50/user/mo at 500 identities

    Billed annually

    From $9,000/yr

    Governed joiners, movers and leavers for a single directory, with scheduled reviews.

    • Up to 500 managed identities
    • HR-driven joiner/mover/leaver automation
    • Role-based provisioning
    • Scheduled access certification
    • Admins and reviewers always free
    Start free trial
    Most Popular

    QuartzID Professional

    $1,833/month

    ≈ $1.83/user/mo at 1,000 identities

    Billed annually

    From $22,000/yr

    Attribute-driven access, AI-assisted reviews and preventive separation of duties.

    • Managed identity bands: 1,000 · 2,500 · 5,000 · 10,000
    • Roles and attributes, with birthright access
    • AI-assisted reviews and risk scoring
    • Scheduled, ad hoc and event-triggered certification
    • SAML SSO and SCIM provisioning included
    Start free trialRequest a quote

    QuartzID Enterprise

    Custom

    From $66,000/yr

    Continuous governance across every application, deployed where your policy requires.

    • Unlimited managed identities
    • Continuous certification with custom workflows
    • Real-time, cross-application separation of duties
    • SaaS · Private cloud · Self-hosted / on-prem
    • Custom connectors and a named account manager
    Book a callContact us
    Book a call

    Using two or more QuartzX products? Ask about suite pricing.

    What counts as a user?

    QuartzID is priced per managed identity: each person or service account whose access QuartzID governs. A person counts once, however many applications and accounts they hold.

    Counted

    • Employees, contractors and partners whose access QuartzID manages
    • Service accounts and other non-human identities placed under governance

    Not counted

    • Admins and reviewers who configure QuartzID or approve and certify access
    • People who have left, once their access is fully deprovisioned
    • The separate accounts one person holds across applications

    Buying for the public sector?

    Standing offers, tender responses, data residency and accessibility. Talk to our public sector team.

    Talk to public sector

    Compare Features

    What each tier includes, so you can see where the line falls before you talk to us.

    FeaturesEssentialsProfessionalEnterprise
    Core capabilities
    HR-driven joiner/mover/leaver automation
    Access is created, changed and removed automatically from the HR record, not by a ticket.
    ProvisioningRoles onlyRoles & attributesRoles & attributes
    Birthright access & dynamic roles
    		Birthright only
    Access everyone in a given role or department gets on day one.
    AI-assisted reviews & risk scoring
    Access certificationScheduled (quarterly/annual)Scheduled, ad hoc & event-triggeredContinuous + custom workflows
    Separation of Duties
    		Detective (reported in reviews)Detective + preventive at request timeReal-time enforcement, cross-application
    Stops one person holding two rights that together allow fraud — raising and approving the same payment, for instance.
    Unlimited identities & consolidation
    Self-service access catalog
    Risk-driven approvals & routing
    Policy-as-code (OPA/Rego compatible)
    		Basic policiesFull ABAC + context-aware
    Authorization rules kept in version control and reviewed like code.
    Customizable dashboards
    Standard reports
    Report builder
    Custom fields
    Custom domain
    Full white-label (remove branding, custom logos)
    Custom email templates & documentation
    High availability & disaster recoveryStandardStandardMulti-region active-active, customer-controlled
    Additional non-production environments
    Seamless future migration to cloud
    Usage & limits
    Managed identities
    		Up to 500Bands: 1,000 · 2,500 · 5,000 · 10,000Unlimited
    The paid unit. Every person or service account QuartzID governs.
    Admins and reviewers
    		FreeFreeFree
    Never charged for, on any tier.
    Connected applications1050Unlimited + custom connectors
    Security & access
    Multi-factor authentication (MFA)
    SAML single sign-on
    Sign in with your own identity provider instead of a separate password.
    SCIM provisioning
    Open standard that lets your identity provider create, update and deactivate accounts automatically.
    Multiple identity providers
    Audit logs90 days1 yearCustom retention
    SIEM log export
    Stream audit events into your own security monitoring platform (Splunk, Sentinel, Elastic).
    Deployment & data residency
    SaaS
    Private cloud / self-hosted
    Data residency (Canada / EU)CanadaCanada or EUYour choice
    Integrations & API
    Automated provisioning connectorsBasic connectorsBasic connectorsFull connectors toolkit
    Data access governance (Snowflake, Databricks, BigQuery)Add-on
    Integration with Snowflake / BI tools
    MCP server
    Lets an AI agent query and act on governed access through the Model Context Protocol.
    Support & services
    OnboardingOnboarding callGuided onboardingData migration, onboarding & training
    SupportBusiness hoursPrioritySLA options & 24/7
    Named account manager
    Compliance & contract
    SOC 2 Type II report accessOn requestOn requestIncluded
    Data Processing Agreement (DPA)
    The contract covering how we process personal data on your behalf, for GDPR and Law 25.
    Custom agreement / MSA
    Pay by invoice / purchase order
    Public sector procurement (standing offer, tender)
    Standing offers, tender responses and the documentation a public body needs to buy.

    Security and compliance

    • SOC 2 Type IIAudited by Sensiba LLP.
    • ISO/IEC 27001Certified by Sensiba LLP, an ANAB-accredited certification body.
    • GDPRCompliant with the EU General Data Protection Regulation.
    • PIPEDAReady for Canada's Personal Information Protection and Electronic Documents Act.

    Reports available upon request