Agreely Docs
FR EN

Team and billing

This page brings together team management, billing, API keys, and account security.

Team and seats

The team is managed under Settings > Team. Every member of the workspace carries a role:

  • Member: read-only. A member sees the whole workspace without changing anything;
  • Administrator: the writes (catalog, forms, requests, compliance registers) and invitations;
  • Owner: full control. Only an owner changes a member's role, disables or reactivates them, and requires multi-factor authentication. The last active owner cannot be demoted.

An owner or an administrator invites a person by email and assigns them a role. An invite can be resent or revoked, and a member can be disabled and later reactivated. Invites are throttled to prevent abuse.

Each tier enforces a seat cap. The interface shows seats used, the cap, and seats available; some tiers are unlimited on seats.

Accepting an invite happens through a public tokenized join link that expires. The invited person opens it to join the workspace with the intended role.

Billing tiers

Billing is annual, in Canadian dollars; prices are shown as a monthly equivalent.

Tier Price Clients in the register Published products or services Seats API keys Custom domain Support
Starter $99 CAD / mo 1,000 1 2 2 no email
Growth $349 CAD / mo 10,000 3 15 10 yes priority
Business $999 CAD / mo 100,000 10 unlimited unlimited yes priority

The Enterprise tier is custom. Contact us to discuss your organization’s needs.

The cookie banner is a capability of the same platform, billed separately: a plan does not include banner sites. Every Agreely account gets one free site (in Agreely's branding, 5,000 loads per month), then each site in your own brand is $15/month per site, flat price (100,000 loads per month per site). The banner and the plan live on the same account but are paid for independently; see the banner pricing.

Taking a plan and paying

The Billing menu shows what the company owes, the current plan and its renewal, the plan catalog and the invoice history. Choosing a plan goes through a commitment page that issues an annual invoice. It is paid by bank transfer, by cheque, or by credit card (processed by Stripe) from the billing page or the payment link received by email. Every invoice and every receipt downloads as a PDF. The renewal can be stopped, resumed, or moved to another plan.

API keys and scopes

API keys are created under Settings > API keys and look like agr_live_.... Each key carries one or more capabilities (scopes):

  • check: check consent (and read the catalog and published documents);
  • issue: issue consent requests;
  • attest: record offline consents;
  • attest_verbal: record verbal consents;
  • relationship: end a customer relationship;
  • registry: maintain the customer register;
  • retention: read retention rules and declare purges;
  • inventory: declare the record inventory;
  • withdraw: record withdrawals on a person's behalf;
  • holds: read the legal holds in place;
  • diffusion: declare a policy dissemination.

At least one capability is required, and none is ticked in advance: tick only the ones the key needs. The number of active keys is capped per plan. A key is revealed once, at creation: copy it then, because it is never shown again. A key can be revoked at any time.

For using keys in your calls, see the API reference.

Two-factor authentication and security

Two-factor authentication and account security are managed under the personal profile, at /me/security, along with the password (/me/password) and open sessions (/me/sessions). The methods on offer are:

  • TOTP (authenticator app);
  • email one-time code;
  • passkey;
  • recovery codes.

An owner can require multi-factor authentication for the whole workspace.

Next