Pricing
Pricing and license bands
One price per tenant size, paid up front for one, three or five years. Every tier includes the whole product, runs on your servers and keeps your permission data in your database. Prices in Canadian dollars (CA$), plus applicable taxes.
License prices
| Tier | 1 year | 3 years | 5 years | How to buy |
|---|---|---|---|---|
| PrivateUp to 1,000 licensed usersOne deployment for one Microsoft 365 tenant with up to 1,000 licensed users. | CA$12,000 | CA$30,000CA$10,000 a year | CA$45,000CA$9,000 a year | Get a quote |
| PrivateUp to 5,000 licensed usersOne deployment for one Microsoft 365 tenant with up to 5,000 licensed users. | CA$24,000 | CA$60,000CA$20,000 a year | CA$90,000CA$18,000 a year | Get a quote |
| EnterpriseMore than 5,000 licensed usersPriced on your user count and the tenants or deployments you need. Five-year terms can also be set per quote. | from CA$36,000 | from CA$90,000 | from CA$135,000or custom | Request a quote |
Three years cost 2.5 times the one-year price and five years 3.75 times, and the price is fixed for the term. Online purchase is being set up; until then we send a quote and an invoice.
Every tier includes
- The Dashboard and the Collector, with setup wizards, on one server or two
- Permission Structure, Access Map, Access History, Investigations, Alerts, Applications and Reports
- Signed updates for the whole term, installed automatically in a weekly window you set, or whenever you choose
- Your permission data stays in your own database; none of it is sent to us
Evaluation and deployment help
- 60-day evaluationCA$2,500
- The full product on your servers, against your own tenant. What it records stays in your database. The evaluation fee is separate from the license price.
- Assisted DeploymentCA$3,500 one-time
- We work with your administrator through the installation and the first full scan.
- Complex enterprise deployment
- Several tenants or deployments, or an unusual network: contact us to scope it.
Before you buy
What to know before you pay.
How the product is licensed, what it needs from you, and what happens if things change.
- What you need
- Windows Server 2019 or later, on one server or two, and SQL Server 2019 or later. A Global Administrator approves access during setup. Outbound HTTPS only: nothing needs to reach you from the internet. The full list is on the requirements page.
- How users are counted
- The product counts the users in your tenant who have at least one Microsoft 365 license assigned, so unlicensed guests and accounts don't count. It reports that single number once a day, never a list of people.
- If you outgrow your tier
- The Dashboard tells you and gives you 5 days to move to the right tier. After that, scanning, reports and exports stop until you move to the right tier; everything already recorded stays viewable on screen, and nothing already recorded is lost.
- Does licensing need internet access?
- Yes. The license is confirmed with the Access Witness licensing service once a day over outbound HTTPS, the same way the product reaches Microsoft 365. If it cannot be confirmed for more than a day, scanning pauses until it can, and nothing already recorded is lost. There is no offline mode.
- Updates
- New versions for the whole term, installed by themselves in a weekly update window you set, or by an administrator whenever they choose. An update that fails its health check is rolled back automatically.
- Refunds
- A full refund within 30 days of purchase, as long as the license key has not been activated. After activation there is no refund; the 60-day evaluation is the way to try the product on your own tenant.
- Taxes and currency
- Prices are in Canadian dollars and exclude taxes; applicable sales taxes are added at purchase. A term is paid up front, and the price is fixed for the term.
- What happens to the data if we stop?
- It stays in your database. Permissions and audit records are never sent to us, so there is nothing of yours to return or delete on our side.
The full terms are in the license agreement. What you need is on the requirements page, and what it sends us is on the security page.
Pricing
Talk to us about your deployment.
See how Access Witness records SharePoint permissions as they change and answers who had access on any past date, on a server you control.
Private deployment. Customer-controlled SQL database. Outbound-only connectivity.