Our pricing does not include any hard caps or pricing cliffs. If you surpass the 10,000 MAUs, 5 SSO or SCIM connections, 1000 M2M tokens, or 10,000 fingerprints included in our free tier, you'll pay for only what you use at the rates outlined above.

Stytch services are designed, developed, monitored, and updated with security at our core to protect you and your customers’ data and privacy.

In addition to holding ourselves to the highest level of infrastructure, service level, and personnel security requirements, we also build best-in-class security into the products we offer customers with features like breached password detection, bot prevention, and more.

Stytch is committed to helping our customers comply with the various regulatory frameworks our customers operate under (including but not limited to HIPAA, GDPR, CCPA, PSD2, and PCI). We also maintain a SOC 2 Type II audit and conduct continuous penetration testing. Reach out if you'd like more information.

While we're sorry to see you go and would love your feedback, we'll make sure to make your data export and transition as smooth as possible. Reach out to support@stytch.com for more information.

You can follow Stytch's uptime and status here. Stytch's systems have over 99.999% monthly uptime figures, and we also provide service level agreements for contracted customers.

Yes! We offer a generous deal for startups - Stytch is free until your Series A or three years of incorporation, whichever comes first. Please reach out to our startups@stytch.com for more information.

Stytch passes through the cost of sending SMS and WhatsApp messages to end users outside of the United States or Canada. SMS and WhatsApp One-Time Passcodes (OTPs) to end users in the United States and Canada are currently included with Stytch at no additional charge.

For international OTPs, we charge you the same amount that we are charged by our SMS and WhatsApp providers with no upcharge. You can see the pricing for each country by visiting Twilio's pricing pages for SMS and WhatsApp. This is important to keep in mind as you plan costs and which countries you want to support as pricing can vary significantly by country.

Pricing example: if a user logs in via SMS OTP twice per month, you'd be charged the base MAU rate, e.g. either $0.00 or $0.05 after your plan's free MAU allotment, plus the market rate cost of sending two SMS messages. If the user had a United Kingdom phone number (+44), that would be an additional $0.042 per SMS on top of thebase MAU rate. When you receive an invoice from Stytch, SMS and WhatsApp OTP charges are split out to allow you to see and understand your costs on a granular level.

Other benefits that are included in this passthrough cost are built-in provider failover, no need to configure or manage additional third party services like Twilio or Sendgrid and optimized templates for high deliverability out of the box.

Volume discounts are available, so reach out to our Sales team if you'd like to learn about volume discounts on messaging.

Additionally we'd encourage you to read our article on toll fraud aka SMS pumping; Stytch has built-in protections against this type of attack, but it’s important to take precautions where possible to limit your risk.

A monthly active user (MAU), also referred to as a 'member' in many B2B contexts, is defined as a user that actively engages with one of Stytch’s products in a given month. The factor and frequency of logins do not impact the price. You will not be charged for any users that don’t hit an /authenticate endpoint.

Example: in month 1, a user interacts with your application and sign-ups and logs in multiple times with multiple products (e.g. Email Magic Links and OAuth). In month 2, they are dormant and don’t interact with your application. In Month 3, they come back to your application and log in multiple times. In this example, that user would only be billed for months 1 + 3, not 2.

An SSO Connection is any SAML or OIDC connection that you configure for an organization. For example, if your app has 2 organizations, where one organization uses Okta OIDC and one organization uses both Okta OIDC and an Azure Active Directory SAML connection, your Stytch workspace would have 3 total SSO connections.

It’s important to note that some Identity Providers (IdPs), such as Google or Microsoft, offer login via both OAuth and Enterprise SSO. Stytch makes it possible for organizations to configure login with Microsoft or Google via either OAuth or via Enterprise SSO Connections or both. However, if the organization wants the benefits of a fully managed IdP (e.g. the ability to manage employee’s app access via Google Workspace/Azure), it’s necessary to configure access via an Enterprise SSO connection.