Pricing that scales with your compliance needs.
merlon is priced by the depth of governance you need — not by nickel-and-diming features. Every plan includes encryption, the immutable audit trail, and a choice of US or Swiss data residency. We quote each customer directly so pricing reflects your size, region, and requirements — billed in USD, CHF, or EUR.
Three plans, one secure foundation
Start with the essentials, add governance and identity as you grow, or go all-in with dedicated support and custom residency. There is no monthly/annual gimmick and no public list price — you get a clear quote for your situation.
For small teams bringing their first sensitive document processes under control.
- Documents, versioning & e-signature
- Up to 5 secure vaults
- Immutable audit trail
- Role-based access (RBAC)
- US or Swiss residency
- Email support (standard)
For growing organizations that need identity federation and enforced workflows.
- Everything in Team, plus:
- Unlimited secure vaults
- Approval workflows & SoD
- SSO & SCIM provisioning
- ERP & storage integrations
- Priority support
For regulated buyers who need dedicated support, custom residency, and DPAs.
- Everything in Business, plus:
- Dedicated Customer Success Manager
- Custom data residency region
- DPA, security review & questionnaires
- 24/7 enterprise support & SLA
- Legal hold & advanced retention
Feature-by-feature comparison
Everything each plan includes, grouped by area. When a capability is available, it's marked; when it isn't, it's clearly noted.
| Feature | Team | Business | Enterprise |
|---|---|---|---|
| Documents | |||
| Version history & diff | ✓ | ✓ | ✓ |
| Compliant e-signature | ✓ | ✓ | ✓ |
| Legal hold | — | ✓ | ✓ |
| Advanced retention policies | — | — | ✓ |
| Security | |||
| AES-256 encryption at rest | ✓ | ✓ | ✓ |
| Secure vaults | Up to 5 | Unlimited | Unlimited |
| Per-vault residency choice | ✓ | ✓ | ✓ |
| Custom residency region | — | — | ✓ |
| Segregation of duties | — | ✓ | ✓ |
| Compliance | |||
| Immutable audit trail | ✓ | ✓ | ✓ |
| Evidence pack export | ✓ | ✓ | ✓ |
| Data Processing Agreement (DPA) | — | ✓ | ✓ |
| Security review & questionnaires | — | — | ✓ |
| Admin & identity | |||
| Role-based access (RBAC) | ✓ | ✓ | ✓ |
| SSO (SAML / OIDC) | — | ✓ | ✓ |
| SCIM provisioning | — | ✓ | ✓ |
| Approval workflows | — | ✓ | ✓ |
| API & webhooks | ✓ | ✓ | ✓ |
| Support | |||
| Support channel | Priority | 24/7 + CSM | |
| Uptime SLA (99.9%) | — | ✓ | ✓ |
| Dedicated Customer Success Manager | — | — | ✓ |
Feature availability is indicative; final scope is confirmed in your quote. See support tiers for response-time detail.
What's in every plan
Some things aren't a paid upgrade. The security foundation is the same whether you're a five-person team or a regulated enterprise.
AES-256 encryption
At rest and in transit (TLS 1.2+), on every plan and every vault.
Immutable audit trail
The hash-chained event log runs underneath everything you do.
Regional residency
Choose US or Swiss data residency — not an enterprise-only feature.
24/7 monitoring
Our Blue Team watches telemetry around the clock for all customers.
API & webhooks
Programmatic access to build on the platform is standard.
e-Signature
Identity-verified signing with an evidentiary trail, included.
Options for the most demanding buyers
Enterprise agreements can layer on the extras regulated organizations and security teams ask for.
People & process
- Dedicated Customer Success Manager
- Onboarding & migration assistance
- 24/7 enterprise support with SLA
- Security questionnaire support
Governance & residency
- Custom data residency region
- Data Processing Agreement (DPA)
- SSO / SCIM with your identity provider
- Advanced retention & legal hold
From first call to a clear quote
There's no self-serve checkout because there's no one-size price. Here's how a typical engagement gets from an initial conversation to a signed agreement.
Tell us your setup
Share your team size, the documents you need to govern, your region, and any compliance obligations. A short call is usually enough.
Get a tailored quote
We match you to a plan and price it for your seats, residency, and add-ons — in USD, CHF, or EUR — typically within one business day.
Contract & onboard
Sign with the right entity for your region, review the DPA where applicable, and onboard with guided setup on Business and Enterprise.
The core protections aren't behind a paywall
Some vendors reserve encryption strength, audit logging, or SSO for their most expensive tier — effectively charging extra to be secure. merlon doesn't. AES-256 encryption, the immutable audit trail, regional residency, and 24/7 monitoring are on every plan. Higher tiers add governance depth and support, not the baseline right to be protected.
Encryption included
AES-256 at rest and TLS 1.2+ in transit, always.
Audit trail included
The hash-chained ledger runs on the Team plan too.
Residency included
Choose US or Swiss hosting on any plan.
Monitoring included
24/7 Blue Team telemetry for every customer.
What a governed workspace replaces
merlon typically consolidates several point tools and a lot of manual effort. The savings show up in fewer subscriptions, faster contract cycles, and audits that take hours instead of days.
Illustrative outcomes based on typical customer results; not a guarantee. See Solutions for real-world scenarios.