Compare
Evaluation · Team · Enterprise
For procurement and technical evaluation. /pricing explains why to upgrade; this page explains exactly what you get.
| Capability | Evaluation | Team | Enterprise |
|---|---|---|---|
| Plan | |||
| Price | Free | $99/mo per workspace ($990/yr) | Consultative |
| Members per workspace | 1 (local operator) | Up to 25 | Custom |
| Identity & access | |||
| Local operator + workspaces | |||
| Role-based access (workspace) | |||
| SAML SSO | |||
| SCIM 2.0 provisioning | |||
| MDM provisioning | Roadmap | ||
| Policy | |||
| Local policy engine + redaction | |||
| Author your own policies | |||
| Per-tool allow / ask / deny + signed connector allowlist | |||
| Shared policy push across devices | |||
| Governance change sets — draft, simulate, rollback (local) | |||
| Governance change sets — approval and shared activation history | |||
| Policy simulation (replay changes before you deploy) | |||
| Custom conformance attestation (AVAR suite) | |||
| Evidence | |||
| Signed receipts + local replay | |||
| Tamper-evident audit log | |||
| Independent verification (avar CLI, offline) | |||
| Evidence portability (exports verify with no Aarmos component) | |||
| Evidence delivery to your existing tooling (Splunk / Datadog / webhook) | |||
| Advanced routing (Kafka, EventBridge, OTel, filters) | |||
| Optional evidence relay (aggregation across devices) | |||
| Customer-hosted relay (BYOS) | |||
| Operational limits (relay ingest) | Best-effort | Higher | Enterprise-scale |
| Evidence retention | Local history | Durable shared history | Customer-defined retention |
| Intelligence | |||
| Operational intelligence from signed evidence | |||
| Derived observations (cited to evidence) | |||
| Counterfactual replay | |||
| Organization-wide posture analytics | |||
| Operations | |||
| Break-glass kill switch | |||
| BYO LLM keys (held on-device; sent only to the provider you configure) | |||
| Central audit relay | |||
| Fleet posture dashboard | |||
| Federated evidence sources | |||
| Optional white-label | |||
| Support | |||
| Public docs & forum support | |||
| Email support | |||
| Private channel + design-partner roadmap access | |||
Evaluation, Team and Enterprise are packaging labels. They name a bundle of capabilities and a level of support — they are not switches inside the product. What a workspace can do is decided by the capabilities granted to it, and governance semantics (policy evaluation, decisions, receipts, replay, verification) behave identically in every package.
"Roadmap" means the capability is planned and not shipped today. Policy evaluation, receipt signing, and key custody always run locally and never require Aarmos infrastructure — the evidence relay is an optional transport and aggregation layer. Evidence retention is controlled by you: receipts and audit entries stay on your device under a retention window you set, and any relayed copies are kept under your storage policy. Operational limits are fair-use reliability guardrails, not metered pricing — Team is a flat $99/mo per workspace. Current values are published on the Limits page. See shared responsibility and the conformance statement. Last reviewed 2026-08-07.