For US teams
Asset management that answers your auditor
Track every device, license, and seat in one register, wire it to your IdP, and export the access-control evidence your SOC 2 audit asks for. Built for mid-market IT teams that outgrew spreadsheets but don't want a six-figure ServiceNow commitment.
- US data residency
- US workspaces run in AWS us-east-1. Your data is never replicated outside your region.
- USD billing
- Plans from $2,600/yr, billed in US dollars. Public pricing, no quote gate.
- SOC 2 vocabulary
- The compliance hub speaks Trust Services Criteria to US teams: asset evidence mapped to CC3, CC6, CC7, CC8, CC9.
- Fast rollout
- Signed macOS .pkg + Windows .msi endpoint agent, pushed via Intune, Jamf, or Munki. CSV and Snipe-IT import for day one.
The identity stack, on every relevant tier
US mid-market buying starts with identity. This is what ships today, not a roadmap:
- SCIM 2.0 provisioning
- Okta + Microsoft Entra. Joiners get accounts, movers change roles, leavers lose access. Every grant and revoke audit-logged.
- SAML 2.0 single sign-on
- Any SAML IdP, with just-in-time provisioning and group-to-role mapping. SHA-256 signatures enforced, replay-defended.
- MFA + passkeys
- Enforced TOTP and WebAuthn passkeys, with org-wide policy and enrolment reporting your auditor can read.
- IP allowlists
- Per-workspace and per-API-token CIDR restrictions on the admin surface.
USD pricing, public like everything else
Starter at $2,600/yr, Business at $3,900/yr with SAML, SCIM, and the compliance evidence packs bundled, Enterprise from $26,000 with a named CSM and a custom SLA. Above each tier's included count, Starter and Business publish a per-device rate on the pricing page, billed at renewal. Enterprise negotiates its rate per contract. US workspaces are set up with you on a call, so bring your device count to the demo and leave with a number.
Posture · from the security page · as of 2026-10-17
Where we stand ourselves: we're an EU-built platform with GDPR-native architecture, database-per-tenant isolation, and a public security page. Our own SOC 2 Type II clock has not started; what we generate for you today is audit evidence, not a certification.
Next step
See it against a live workspace
A 30-minute walkthrough with a founder. Bring your rough asset count and your auditor's evidence list; leave with a price and a rollout plan.
or email sales@ontrackio.com