PopiaSafe logo
PopiaSafe
Skip to plans

Pricing

Self-serve plans below. Enterprise Platform is custom—talk to sales after you review the grid.

Plans and prices

Loading plans

Outcomes

Days, not quarters

Typical Core go-live for a focused POPIA workstream.

Evidence by default

Checklists, exports, and logs that stand up to internal audit.

Procurement-ready

Enterprise paths for DPA/MSA, SLA, and security review packs.

POPIA depth in every tier

  • Digital consent, proofs, and record-keeping aligned to South African law.
  • Processing records and activity trails your auditors expect to see.
  • Controls designed for regulated data — not generic checklistware.

Not sure which plan fits?

Share your entity structure, integrations, and risk profile — we'll map you to the right tier or a custom order.

Book a demoSecurity-first architecture

Compare all features

High-signal view for legal, risk, and procurement. List prices above are the source of truth; this table summarises limits and governance. Posture highlights: audit-ready exports, 99.9% uptime target, encryption in transit and at rest; DPA/MSA from Enterprise upward.

API quotas reflect default configuration; Platform is set in your order form. Developer docs

Feature comparison across Compliance Core, Compliance Growth, Enterprise, and Enterprise Platform
CapabilityCoreGrowthEnterprisePlatform
Included users (guidance)Up to 3Up to 10UnlimitedCustom
Support tierStandardPriorityNamed account managerSolutions engineering
SLAOptions in contractCustom SLA
SSO / advanced authAvailable (contract)Custom (SCIM, etc.)
Public API (monthly quota)1,000 requests10,000 requestsUnlimited (fair use)Negotiated volume
OnboardingSelf-serveGuided + docsEnterprise onboardingIntegration programme
Security & legal packagingStandard termsStandard termsDPA / MSA availableFull procurement pack
Consent webhooks & domains1 domain · 1 webhook5 domains · 5 webhooks50 / 50Custom limits

Procurement & security FAQ

Answers legal and risk teams ask before a signature — without the jargon wall.

Can we execute a Data Processing Agreement (DPA) or MSA?
Yes. Growth and Core ship with our standard terms. Enterprise and Enterprise Platform include procurement-friendly DPA/MSA tracks and security documentation for vendor review.
What does implementation look like?
Core is designed for self-serve setup in days. Growth typically goes live in a few weeks with checklist-driven onboarding. Enterprise and Platform engagements include a scoped rollout plan, integration milestones, and named contacts.
Where is data hosted and can we discuss residency?
PopiaSafe is built for POPIA-first operations with secure cloud hosting. Enterprise and Platform customers can discuss regional and contractual requirements with our team during sales.
How does support differ by tier?
Core includes standard support. Growth adds priority response paths. Enterprise adds a named account manager. Platform adds solutions engineering aligned to API and embedded programmes.
Are API limits hard caps?
Public API quotas are enforced per organisation per calendar month on Core and Growth. Enterprise is unlimited within fair use. Platform limits are set contractually to match your traffic profile.