Skip to main content

Billing & Subscription

The Billing & Subscription settings allow administrators to manage the financial aspects of their CVD Portal usage. Ensuring uninterrupted access to the portal is crucial for maintaining your Coordinated Vulnerability Disclosure (CVD) program and remaining compliant with the ongoing obligations of the Cyber Resilience Act (CRA).

Within this section, authorized personnel can view their current subscription tier, monitor usage metrics (such as API call volume or active user counts), and manage payment methods. You can seamlessly upgrade your plan to access advanced features like dedicated compliance analytics or increased API limits as your organization's vulnerability management needs scale.

Invoices and payment history are readily accessible for internal accounting purposes. Clear visibility into your subscription status ensures that your team always has the tools necessary to securely manage and coordinate vulnerability disclosures without disruption.

What happens when a trial ends

A trial needs no cancellation. No card is held during a trial, so nothing bills automatically and the account moves to the Free plan on the end date.

Administrators receive two emails. The first arrives three days before the end date and names the date. The second arrives after the end date and lists what changed.

ItemDuring the trialOn the Free plan
Product assessments30
Team seats51
Vulnerability disclosure portalIncludedIncluded, at no cost
Report intake and trackingIncludedIncluded, at no cost

Both emails go to users with the Administrator role. Members and auditors cannot change a plan, so they are not notified.

What happens when a paid subscription is cancelled

Administrators receive one email that names the cancelled tier and lists the same changes. Stripe sends the payment receipt separately.

Your data after a downgrade

Nothing is deleted when a trial ends or a subscription is cancelled. Every assessment, document and report is preserved and unlocks again when you subscribe. You can also download the all-products HTML archive, so work built during a trial is never locked in.

An account becomes eligible for deletion only after 90 days of inactivity. We then give 30 days of written notice before anything is removed.