Pricing
Priced per app you bring under control.
Never per user, run or token. Every plan includes every integration. No setup fees: start with a pilot that is credited to your first year.
Connected apps
$2,500 per app per year
Every app StitchOps runs for you, with or without SCIM. Flat, with unlimited users and runs within fair use. Compare it with your SCIM tax
HR integration
From $5,000 per year
Three levels, priced by the work. Nothing to add when your Identity Provider already has your HR data. See the options
30 day pilot
$5,000 credited to year one
Your HR system integrated into your Identity Provider, plus 1 app, working. No setup fees. How it works
Integrating your Identity Provider with your HR system and 20 apps without SCIM comes to $55,000 a year.
Teams
One team, a handful of connected apps.
From $10,000 / year
Billed annually. No setup fees.
Includes 4 connected apps
Additional apps at $2,500 / year each
- Every automation type
- All integrations
- AI assistants over MCP
- SSO
- Bring your own vault
- Email support
Business
Most commonSeveral teams, many systems.
From $30,000 / year
Billed annually. No setup fees.
Includes 12 connected apps
Additional apps at $2,500 / year each
- Everything in Teams
- Shared support channel
- Run logs and evidence exports
- BAA available
Enterprise
Regulated, multiple entities, or embedded.
Sized with you
Above $100,000 a year: volume, multiyear and outcome based pricing
- Everything in Business
- Negotiated DPA and BAA
- Custom security reviews
- Named contact
- Deployment options on request
- Volume and outcome based pricing
Unlimited users and runs on every plan, within fair use.
Every plan runs on the same platform.
- SOC 2 Type 1
- SOC 2 Type 2
- ISO 27001
- GDPR ready
- HIPAA ready
Your HR integration, priced by the work.
Three levels, from hires and terminations to every lifecycle event across companies. Already have your Identity Provider reading your HR system? Nothing to add: StitchOps takes it from there.
| Essential$5,000per year | Full lifecycle$10,000per year | CustomQuotedscoped with you | |
|---|---|---|---|
| Connectivity | Native Identity HR Connector (Workday, SuccessFactors, UKG Pro, BambooHR) | Native connector or documented API | No native connector: partial API, flat file feed (SFTP or CSV), or UI automation; or more than one HR system |
| Hires | New hires created in your Identity Provider on their start date | Adds future dated hires: account created before start, activated on day one | Adds rehires (reactivating the original account), contractor to employee conversions, interns and seasonal workers |
| Changes | Not included; handled manually | Title, department, manager, and location changes sync automatically | Adds transfers between legal entities, leaves of absence (suspend and restore), worker type changes |
| Terminations | Immediate deactivation when HR terminates | Scheduled deactivation honoring the effective date and time | Custom rules: grace periods, legal hold, regional requirements, offboarding workflow triggers |
| Attribute mapping | Up to 15 standard attributes, one username format | Up to 40 attributes including custom fields, manager lookup, conditional mapping, username collision handling | Unlimited attributes with complex transformations and rules that vary by entity or country |
| Population | One HR source, employees only, one country | One HR source, up to 3 worker types | Multiple HR sources or legal entities, international, acquired companies |
| Downstream impact | Identity Provider user creation only | Group rules, birthright app access, Active Directory provisioning, write back of email or username to HR | Multiple AD domains or directories, custom provisioning workflows, downstream app logic |
| Existing data | New tenant, or existing users already clean and matched by email | Matching existing Identity Provider users to HR records with light cleanup | Full reconciliation, duplicate resolution, and HR data remediation |
| Delivery | Production configuration, one test cycle, 2 weeks hypercare | Sandbox build, formal UAT, runbook, 30 days hypercare | Multiple UAT cycles, phased cutover, full documentation, 60 to 90 days hypercare, optional ongoing maintenance |
| Typical timeline | 1 to 2 weeks | 3 to 4 weeks | 6 weeks or more, scoped individually |
Essential
$5,000 per year
- Connectivity
- Native Identity HR Connector (Workday, SuccessFactors, UKG Pro, BambooHR)
- Hires
- New hires created in your Identity Provider on their start date
- Changes
- Not included; handled manually
- Terminations
- Immediate deactivation when HR terminates
- Attribute mapping
- Up to 15 standard attributes, one username format
- Population
- One HR source, employees only, one country
- Downstream impact
- Identity Provider user creation only
- Existing data
- New tenant, or existing users already clean and matched by email
- Delivery
- Production configuration, one test cycle, 2 weeks hypercare
- Typical timeline
- 1 to 2 weeks
Full lifecycle
$10,000 per year
- Connectivity
- Native connector or documented API
- Hires
- Adds future dated hires: account created before start, activated on day one
- Changes
- Title, department, manager, and location changes sync automatically
- Terminations
- Scheduled deactivation honoring the effective date and time
- Attribute mapping
- Up to 40 attributes including custom fields, manager lookup, conditional mapping, username collision handling
- Population
- One HR source, up to 3 worker types
- Downstream impact
- Group rules, birthright app access, Active Directory provisioning, write back of email or username to HR
- Existing data
- Matching existing Identity Provider users to HR records with light cleanup
- Delivery
- Sandbox build, formal UAT, runbook, 30 days hypercare
- Typical timeline
- 3 to 4 weeks
Custom
Quoted scoped with you
- Connectivity
- No native connector: partial API, flat file feed (SFTP or CSV), or UI automation; or more than one HR system
- Hires
- Adds rehires (reactivating the original account), contractor to employee conversions, interns and seasonal workers
- Changes
- Adds transfers between legal entities, leaves of absence (suspend and restore), worker type changes
- Terminations
- Custom rules: grace periods, legal hold, regional requirements, offboarding workflow triggers
- Attribute mapping
- Unlimited attributes with complex transformations and rules that vary by entity or country
- Population
- Multiple HR sources or legal entities, international, acquired companies
- Downstream impact
- Multiple AD domains or directories, custom provisioning workflows, downstream app logic
- Existing data
- Full reconciliation, duplicate resolution, and HR data remediation
- Delivery
- Multiple UAT cycles, phased cutover, full documentation, 60 to 90 days hypercare, optional ongoing maintenance
- Typical timeline
- 6 weeks or more, scoped individually
Not sure which level? Start with Essential. We confirm it in the pilot.
Start with a 30 day pilot.
No setup fees. Prove it on your own systems first, then the $5,000 comes off your first year.
Step 1
Pick what to prove
Integrate your HR system into your Identity Provider plus 1 app. We agree on the tasks and what success looks like on a free workflow audit.
Step 2
30 days, working
StitchOps runs on a worker in your environment, with your logins in your vault. You see every step it records.
Step 3
Credited in full
Sign within 30 days of the pilot ending and the full $5,000 comes off your first year.
Security and compliance on every plan.
Your data gets the same protection on every tier. Higher tiers add more help with the paperwork.
| Teams | Business | Enterprise | |
|---|---|---|---|
| Compliance | SOC 2, ISO 27001, GDPR ready, HIPAA ready | SOC 2, ISO 27001, GDPR ready, HIPAA ready | SOC 2, ISO 27001, GDPR ready, HIPAA ready |
| Bring your own vault | Included | Included | Included, with custom vault configurations |
| Audit reports | SOC 2 report and ISO certificate under NDA | SOC 2 report and ISO certificate under NDA | SOC 2 report and ISO certificate under NDA, reviewed with your team |
| Data processing agreement | Standard DPA | Standard DPA | Negotiated DPA |
| HIPAA BAA | Not offered | Available | Available, negotiated terms |
| Security questionnaires | Answers in our trust center | Standard questionnaire completed for you | Custom questionnaires and security reviews |
Teams
- Compliance
- SOC 2, ISO 27001, GDPR ready, HIPAA ready
- Bring your own vault
- Included
- Audit reports
- SOC 2 report and ISO certificate under NDA
- Data processing agreement
- Standard DPA
- HIPAA BAA
- Not offered
- Security questionnaires
- Answers in our trust center
Business
- Compliance
- SOC 2, ISO 27001, GDPR ready, HIPAA ready
- Bring your own vault
- Included
- Audit reports
- SOC 2 report and ISO certificate under NDA
- Data processing agreement
- Standard DPA
- HIPAA BAA
- Available
- Security questionnaires
- Standard questionnaire completed for you
Enterprise
- Compliance
- SOC 2, ISO 27001, GDPR ready, HIPAA ready
- Bring your own vault
- Included, with custom vault configurations
- Audit reports
- SOC 2 report and ISO certificate under NDA, reviewed with your team
- Data processing agreement
- Negotiated DPA
- HIPAA BAA
- Available, negotiated terms
- Security questionnaires
- Custom questionnaires and security reviews
Reports and certificates are shared under NDA. See our trust center →
Estimate your price.
$2,500 per app per year. Your first 4 apps are covered by the $10,000 minimum. Unlimited users and runs, within fair use.
Suggested plan: Business
$30,000 / year
Billed annually. No setup fees.
- 10 connected apps
- $25,000
- HR: Essential
- $5,000
Start with a 30 day pilot for $5,000, credited to year one. Then $25,000 for the rest of your first year.
Estimate only. Final pricing is confirmed in your free workflow audit.
Confirm this in a workflow auditBuilding it into your product?
StitchOps Edge puts the execution layer inside your product. Your brand and your customer; our runtime doing the work in the systems your product cannot reach, from a worker in their environment.
Questions we get here.
How is my price worked out?
Each connected app is $2,500 a year. Add your HR integration: Essential at $5,000, Full lifecycle at $10,000, or Custom, quoted with you. Plans start at $10,000 a year, which covers your first 4 apps. We confirm the number with you in a free workflow audit before you sign anything.
What counts as a connected app?
Each system StitchOps gives and removes access in, or runs tasks in, for you: a SaaS app without SCIM, a portal, a desktop app or an on premises system. Your identity provider and your HR system are not counted as apps.
Which HR option do I need?
If your Identity Provider already gets your people from HR, you need nothing extra. Essential ($5,000 a year) uses your Identity Provider's native HR connector for hires and terminations. Full lifecycle ($10,000) adds future dated hires, job changes, scheduled terminations and Active Directory. Custom is quoted for HR systems without a native connector, more than one HR system or legal entity, or a full data cleanup.
Do you charge setup fees?
No. Start with a 30 day pilot for $5,000: your HR system integrated into your Identity Provider, plus 1 app, working. Sign within 30 days of the pilot ending and the full $5,000 comes off your first year.
What does unlimited users and runs mean?
Unlimited users and runs cover the normal day to day work of your connected apps: hires, changes, leavers, access checks and the tasks you set up with us. Fair use excludes one time bulk migrations, load or stress testing, and reselling StitchOps as a service to others. If your usage ever looks unusual, we talk with you first. We never add charges automatically.
Will cost grow with our headcount?
No. Cost follows the apps you connect, never users, runs or tokens. Repeated workflows replay without a model in the loop, so the cost of each run stays flat.
Is it safe to connect our systems?
The agent runs on a worker VM in your environment and connects outbound only. Credentials stay in your vault or ours and never reach the model. SOC 2 Type 1 and Type 2, ISO 27001 certified, GDPR ready, and HIPAA ready with a BAA available on Business and Enterprise plans.
Do smaller plans get the same security?
Yes. Every plan runs on the same platform, with the same SOC 2 and ISO 27001 controls and the same GDPR and HIPAA readiness. Higher tiers add help with contracts and security reviews, not more protection.
Can we use our own vault?
Yes, on every plan. Credentials stay in your vault and never reach the model. Enterprise plans can add custom vault configurations.
Do you work with resellers and partners?
Yes. Partner pricing is available through our reseller and partner programs. Talk to us for details.
Size the first plan in fifteen minutes.
Bring your top three manual processes. We tell you which one to run first and what it will cost.