Start with a free 30-day trial, then pick the tier that fits your team: more generation volume, more control packs, and the governance and isolation regulated organizations require. Every tier includes everything in the tiers below it.
Self-serve plans start with a 30-day free trial
For small teams getting started with compliant-by-construction design.
For growing regulated teams shipping reviewed designs at pace.
For enterprise security and regulated industries.
Starting price for the most demanding security and procurement requirements; final pricing is tailored with our sales team.
Design Team, Governance, and Portfolio start with the 30-day trial and upgrade seamlessly with no data re-entry. Billing runs through Stripe; choose monthly, or pay annually and get two months free. Enterprise is sales-led: no self-serve trial, reach us at [email protected]. A design run is one AI generation of a design; refinements and re-evaluations of the same package draw from the same monthly quota. Get a tailored quote.
Tiers are cumulative: every plan includes everything in the plans before it.
| Capability | Design Team | Governance | Portfolio | Enterprise |
|---|---|---|---|---|
| Design runs / month | 25 | 150 | 600 | Negotiated |
| Design packages | 25 | 100 | 300 | Unlimited |
| Members | 10 | 25 | 100 | Unlimited |
| Concurrent design runs | 1 | 2 | 4 | 8 |
| Overage beyond quota | Upgrade | Additional cost | Volume rate | Custom |
| Priority generation queue | ✕ | ✕ | ✓ | ✓ |
| AI design generation | ✓ | ✓ | ✓ | ✓ |
| Multi-agent AI design review (5 agents) | ✕ | ✕ | ✓ | ✓ |
| Discovery agents (cloud, APIs, databases, CMDB, knowledge) | ✕ | ✕ | ✓ | ✓ |
| Control packs | Core | ✓ all 15 packs | ✓ all 15 packs | ✓ all 15 packs |
| Well-Architected scoring + ROI value model | ✕ | ✓ | ✓ | ✓ |
| Knowledge base RAG | ✕ | ✓ | ✓ | ✓ |
| Reference architectures & package tagging | ✕ | ✓ | ✓ | ✓ |
| Continuous compliance drift alerts | ✕ | ✓ | ✓ | ✓ |
| Full auditor deliverable set | ✕ | ✓ | ✓ | ✓ |
| IaC export (Terraform, Bicep & Pulumi) | ✕ | ✕ | ✓ | ✓ |
| Jira requirements sync (import + export) | ✕ | ✓ | ✓ | ✓ |
| Public API, SDKs & webhooks | 5 API keys | ✓ | ✓ | ✓ |
| Segregation of duties + custom roles | ✕ | ✓ | ✓ | ✓ |
| SSO, SCIM 2.0 & enforced MFA | ✕ | ✕ | ✓ | ✓ |
| Evidence ledger + legal holds | ✕ | ✕ | ✓ | ✓ |
| SIEM audit export (Splunk, Datadog, syslog) | ✕ | ✕ | ✓ | ✓ |
| Trust center + data subject requests | ✕ | ✕ | ✓ | ✓ |
| Architecture chat + ADR capture | ✕ | ✕ | ✕ | ✓ |
| Single-tenant, data residency + CMEK/BYOK | ✕ | ✕ | ✕ | Add-on |
Rather than designing first and checking compliance later, IronArchitects constrains generation to the controls that apply from the start. Every component and decision cites the control or policy clause that justifies it, so the design is defensible the moment it's produced.
Fifteen control packs cover HIPAA, HITRUST CSF, PCI-DSS v4, SOC 2, ISO 27001, ISO 27018, NIST 800-53, NIST 800-171, CMMC L2, GDPR, GLBA Safeguards, SOX ITGC, NYDFS 500, and FedRAMP Moderate, plus Well-Architected pillars for AWS, Azure, and GCP. You can also layer your organization's own policies on top of any pack.
A design run is one AI generation of a design. Each tier includes a monthly quota: Small 25, Medium 150, Large 600, and Enterprise a custom volume; the trial includes 15 runs to explore. Refinements and re-evaluations of an existing package draw from the same quota. On Medium, runs beyond the quota are available for an additional cost; Large adds a priority generation queue and volume rates; Enterprise is sized to your throughput. Usage is always visible in the app, so you can see where you stand before you hit a limit.
Yes. Choose monthly or annual on any paid plan. Annual billing gives you two months free (pay for ten, get twelve) in exchange for an annual commitment, billed through Stripe. You can switch from monthly to annual at any renewal.
Self-serve plans start with a 30-day free trial with the core capabilities enabled, one trial per business domain. Upgrade any time during or after the trial; your teams, packages, and designs carry over with no data re-entry.
Yes. That's the point. You maintain an approved/candidate technology catalog, and generation assembles designs from it. Designs stay within the technology your organization actually permits.
No. Generation runs on Google Vertex AI under terms that prohibit training on your data, and Customer Content is never used to train models. Enterprise adds a provider BAA, CMEK/BYOK encryption, and single-tenant isolation. See the Security & Trust page for details.
Single-tenant deployment and data-residency options are available on Enterprise. Talk to Sales about your requirements.
Create a free account, pick a control pack, add a few approved technologies, and describe what you want to build. You'll have a review-ready design in minutes.
Start free today, or talk to us about a deployment that meets your compliance bar.