Short links your security review can actually sign off

Every self-serve tier has a public price, and Scale — the top one — is the ceiling of what you can buy with a card. Enterprise is not a bigger number on top of that; it is a contract. What it costs depends on committed volume, the term, the payment method and what support response you need, so it is quoted rather than listed. If you want a price today rather than a conversation, the pricing page has four of them.

Mostly no, and we would rather say so. Nearly everything described above ships on a self-serve plan: roles and teams from Growth, per-link permissions, multiple teams, custom certificates and priority support from Business, SSO and unlimited everything from Scale. The audit log, the API and automatic TLS are on every plan including Free; webhooks and exports start on Starter. An agreement buys contract terms, invoicing, a named response target and per-organisation limits — not a hidden feature set.

Annual is the normal term, and annual billing is a 17% saving on the published self-serve prices too. Monthly is possible on an agreement; it costs more per month for the same reason it does everywhere else. There is no multi-year lock-in requirement.

On an agreement, yes — that is arranged in the sales conversation. Be aware that the self-serve product has no PO workflow in it: card and UPI payments are taken by our payment provider and a numbered tax invoice is issued automatically for each one. Invoicing against a PO happens outside the checkout, not through it.

The published service level is 99.9% monthly availability on the redirect path, with service credits of 10%, 25% or 50% of the monthly fee depending on how far below that a month falls, applied automatically to the next invoice. The dashboard and the API are best-effort and carry no credit — they are separate from the redirect path on purpose, so an incident in one cannot take the other down. Full terms are on the service level page.

Yes. The status page is computed from recorded self-checks and from nothing else, which is why it tells you how far back it has measured instead of asserting a figure it cannot support. The band at the top of this page shows the same measured number. If the installation is new, it will say so.

The sub-processor list names every third party and what each one sees: the hosting provider, the payment provider, the email provider and a local IP geolocation database that sends nothing back. None of them is an advertising network, and none receives data for its own purposes. We give 30 days' notice before adding one, so you have time to object.

There is a published data processing agreement that forms part of the terms: we act as your processor for click data, process only on your documented instructions, bind everyone with access to confidentiality, help with subject requests, notify you of a personal data breach within 72 hours of becoming aware, and delete or return data at the end. Transfers out of the EEA or UK rely on the Standard Contractual Clauses. We will also review your own paper.

No. Nothing in this product has been through either audit, and we will not imply that it has. What we can give you is specific: the security page lists the technical measures, the sub-processor page lists who touches data, the DPA sets out the obligations, and the audit log lets you verify what happened in your own account rather than take our word for it.

Not as a setting. The platform runs in one place, on one database, wherever it is deployed — there is no per-customer region selection and no multi-region replication. If a residency requirement is firm, the realistic answer is a dedicated installation in that jurisdiction, which is a conversation rather than a checkbox.

It is self-service and usually a single sitting. You enable SAML on the workspace, paste in your identity provider's entry point, entity ID and signing certificate, and copy the ACS URL the settings screen shows you into your provider. A person signing in for the first time is provisioned automatically. SSO is included from the Scale plan onwards, so you do not need to talk to us to switch it on.

No. There is no SCIM endpoint. Accounts are created just-in-time on first SSO sign-in; removing someone is done by removing the member in the dashboard or through the API, or by cutting them off at your identity provider so they can no longer authenticate. If SCIM is a hard requirement, it is not built and we will not pretend otherwise.

A seat is a member of the organisation. Free is one, Starter two, Growth five, Business fifteen, and Scale is unlimited. Read-only members count as members. A single organisation can be given a higher seat count than its plan without moving plan, which is how a bespoke number is honoured.

The API limit is per plan — 50 requests a second on Free and Starter, 100 on Growth, 200 on Business, 500 on Scale — and it is enforced in the API middleware, not merely documented. An individual key can be given a lower ceiling than its plan. A higher ceiling than the plan is a per-organisation override, which is part of an agreement.

The importer recognises Bitly, Rebrandly, TinyURL, Cutt.ly and Short.io exports by their own column headings, previews every row before anything is written, and returns failed rows as a CSV you can fix and re-run. During the DNS cut-over, fallback resolution forwards any slug we do not know yet to your old domain and caches the answer, so nothing breaks while you switch. Every step of that is in the product.

Yes, from the Business plan. Certificates are normally issued and renewed automatically, apex domains included, but if your policy requires your own CA you can upload the certificate and key instead.

The software is a single Node process with a SQLite database and no third-party runtime dependencies, so it is genuinely deployable on your own machines — there is a Dockerfile and a deployment guide in the repository. Whether that is offered to you, and on what licence and support terms, is a conversation. It is not something you can buy from the pricing page.

Every message becomes a tracked ticket with a reference, whether it comes from this page, the contact form or the dashboard, and it is answered by email against that reference. Priority support puts a ticket higher in the queue from the Business plan onwards. A named response target and an escalation path to a person are part of an agreement rather than a plan.

You can put a request in front of the people who decide, and a large customer is heard sooner than a small one — that is honest rather than special. What we will not do is put a date on a feature in a sales conversation. If something on the roadmap section of this page is a condition of your purchase, say so now and we will tell you plainly whether it is being worked on.

You export it: the whole account as a JSON bundle, the links and click stream as CSV, the audit log as CSV, all from the product without asking us. Your branded domains are yours — you point the DNS somewhere else and the links keep working at whatever you point them at. After the agreement ends, the data is deleted or returned in line with the DPA.