title: Pricing: one plan, everything included category: Billing & Pricing tags: pricing, plan, whats included, $20 per identity priority: Normal
Pricing: one plan, everything included
Certification Center has one plan at $20 per governed identity per year, and everything is included — no per-module upsells, no add-on tiers, no enterprise-edition gate. This article lists exactly what that plan covers.
One plan, one price
| Price | $20 per governed identity per year |
| Billed on | Identities under governance (the people you certify), not every directory object |
| Plans | One — there is no basic/pro/enterprise ladder |
| Add-on modules | None — every capability is in the plan |
| Delivery | Cloud SaaS — isolated workspace, no install |
| Founding offer | First 3 months free |
Because there is a single plan, you never have to guess which edition you need or discover a feature is locked behind a higher tier. You can always see the current price on our pricing page.
What is included
Every workspace includes all seven capabilities:
- Access certifications — quarterly campaigns, per-manager routing, one-click approve/revoke, write-back to the source directory, and a full attestation trail
- License-waste monitoring — reconciles assigned Microsoft 365 / Entra licenses against real sign-in activity, ranks recoverable spend, and lets you reclaim unused seats as a certification action
- Directory sync connectors — Active Directory, Entra ID, Google Workspace, AWS (IAM), and SCIM 2.0, with read and optional write-back; surfaces orphaned and duplicate accounts
- Separation of Duties — an editable, SOX-oriented rule set with toxic-pair detection; conflicts flow into the certification queue
- Audit reporting — attestation history with export
- Policy-driven governance — birthright provisioning plus drift alerts
- RBAC / business roles
There is no separate charge for any of these. The $20-per-identity price is the whole price.
What is not an extra cost
| Concern | Answer |
|---|---|
| Extra fee for license reconciliation? | No — included |
| Extra fee for additional connectors? | No — connect all five connector types |
| Per-campaign or per-report charges? | No |
| Setup or professional-services fee? | No — self-serve signup, no install |
| Charge per directory object? | No — you are billed per governed person only |
Who it fits
Certification Center is built for mid-market organisations, roughly 200 to 2,000 identities. The per-identity model and self-serve onboarding are sized for teams that want enterprise-grade governance without an enterprise-scale rollout.
At that size the pricing is predictable: multiply your governed identities by $20 and you have your annual cost. Reclaiming unused Microsoft 365 seats through license monitoring frequently offsets a meaningful part of it.
How your bill is calculated
Your bill is your number of identities under governance × $20 per year. Governance means a person is in an active review scope, has licenses being reconciled, or is subject to a policy or SoD rule. Directory clutter and duplicate accounts do not count. For the exact rules, see What counts as an identity for billing?.
Frequently asked
Is there a cheaper tier with fewer features? No. There is one plan and it includes everything — a smaller bill comes from governing fewer identities, not from a lesser edition.
Can I self-host to avoid the per-identity price? No. Certification Center is cloud-only SaaS; each customer runs in an isolated cloud workspace.
Does the price change as I add connectors or campaigns? No. Price is driven only by the number of governed identities.