Plans, usage and leaving
What each plan includes, how report volume is counted, what happens when a subscription ends, and how to take your data and records with you. Prices are on the pricing page.
What each plan includes
| Starter | Business | Agency | |
|---|---|---|---|
| Hosted DMARC and TLS-RPT | Yes | Yes | Yes |
| Hosted SPF, DKIM, BIMI and MTA-STS | No | Yes | Yes |
| Client compliance reports | No | No | Yes |
| Domains | 5 | 20 | 50 |
| Team members | 1 | 5 | 20 |
| Organizations you can own | 1 | 1 | 50 |
| Messages reported per month | 1,000,000 | 5,000,000 | 10,000,000 |
| Report history kept | 90 days | 180 days | 365 days |
Enterprise plans are sized to the account; contact us.
Report volume
Volume is the number of messages counted in the DMARC reports we store for your domains, per calendar month. Settings → Billing shows it under "Report volume this month".
- At 80%, you get an alert.
- At 100%, further reports that month are held, not deleted. Your dashboards show a gap until they are restored: upgrade, then contact support and we restore the held reports into your data.
When a subscription ends
Cancellation takes effect at the end of the period you have paid for. When a subscription ends, because you cancelled or because a payment failed, its paid features are locked, and every DNS record we publish for you stays published for 60 days.
- About a week before the 60 days end, we email a warning for each affected domain.
- At the end, we withdraw the DMARC and TLS-RPT reporting records from our zone and switch those two tools off. A
_dmarcor_smtp._tlsCNAME still pointing at us then resolves to nothing. - The SPF, DKIM, BIMI and MTA-STS records are not withdrawn: withdrawing an SPF include or DKIM target you still point at would fail your mail. They stay published and maintained until you delete the domain or your account.
- Subscribing again within the 60 days cancels the withdrawal and keeps everything as it is.
Reports that keep arriving after the subscription ends are stored under the Starter volume and 90-day history until you delete the domain or the account. The Terms and the Data Processing Agreement are the binding text.
Leaving cleanly
- Publish your records yourself first. Copy the current value of each hosted record from its tool page and publish it as a TXT (or your own MTA-STS setup) in your zone. Then remove the CNAMEs that point at us, and only then delete the domain. The delete dialog says the same.
- Export what you want to keep (below).
- Delete the domain, or your account.
Exports
- DMARC reports: the Export Audit button on the dashboard downloads report rows as CSV for a date range, within your plan's report history. Each report can also be downloaded as its original XML from the DMARC page.
- TLS reports: Export CSV on the TLS-RPT page, one row per failure cause.
- Your account: Download my data in Settings gives one JSON file of your account data (report rows come from the CSV exports). One export every 15 minutes.
Deleting a domain
Deleting a domain deletes its reports and withdraws every DNS record we publish for it, so any CNAME still pointing at us stops resolving. We remove the records first: if that fails, the domain is kept and you are asked to try again, rather than leaving records behind that nothing could reach. In an organization, the owner or an admin can delete a domain.