# Plans & Features
URL: https://docs.autociso.io/getting-started/plans-and-features/
Description: The four AutoCISO plans — Free, The Seed, The Growth and The Scale — their limits, and exactly which features each one includes.

AutoCISO has four plans. Each plan includes everything in the plan before it.

| Plan | Built for |
|---|---|
| **Free** | Getting a first picture of who has access to what: employee directory, asset inventory, access audits, ghost-account detection, the AI assistant |
| **The Seed** | Running access governance: joiner and leaver workflows, the review queue, CISO reports, the vCISO Workspace, exports, the Partner Portal |
| **The Growth** | Getting certified: ISO 27001 workspace, risk management, compliance cockpit, supply chain security, audit trail, single sign-on, automated evidence |
| **The Scale** | Operating at scale: privacy operations, continuous control monitoring, board reporting, audit simulator, HIPAA, certificate management |

Docs pages say "requires The Growth plan or higher" when a feature starts at The Growth. Your current plan, usage
and the same comparison are in the user menu → [**Billing & Subscription**](https://docs.autociso.io/console/settings/billing/) → **Plan & Usage**.

## Feature comparison

The table is built from the same plan catalogue the console uses, so it always matches **Billing & Subscription**.

## What happens at a plan boundary

- **In the console**, menu items for features outside your plan show a lock and a tooltip such as **Requires The
  Growth**. Opening the page shows the plans that include it and a **View Plans** link.
- **Over the REST API**, an endpoint for a feature outside your plan answers `402 FEATURE_GATED`; the error names the
  lowest plan that includes it. See [When a gate refuses](https://docs.autociso.io/developers/access-model/#when-a-gate-refuses) and
  [Errors & rate limits](https://docs.autociso.io/developers/errors-and-limits/).
- **Over MCP**, tools for features outside your plan are not listed at all. See
  [Scope is not entitlement](https://docs.autociso.io/developers/mcp/authentication/#scope-is-not-entitlement).
- **Monthly limits** (audits, AI assistant requests) reset each calendar month. The console warns you as you approach
  a limit.

**Note — Downgrading keeps your data**

When you move to a lower plan, AutoCISO lists the features you will lose before you confirm. Your data is kept; if
you upgrade again, you regain full access to it.

## Change your plan

Owners change the plan in the user menu → **Billing & Subscription**. Upgrades take effect immediately, for the
console, the API and MCP alike — existing [API tokens](https://docs.autociso.io/developers/api-tokens/) do not need to be re-issued.