# Stytch

Canonical: https://inetgeek.com/auth/stytch/

Pay-as-you-go auth for B2B and consumer apps, with five SSO or SCIM connections included free — the most generous enterprise allowance in this set.

## Who it suits

B2B products selling to several SSO-using customers early — five connections free is the difference between paying per logo and not paying at all.

Consider something else if There is no flat plan to budget against: everything above the free allowances is metered, so the bill tracks usage rather than a number you agreed to.

## iScore

76 / 100 (80% interval 72–81), rank 4 of 8 in auth — interval overlaps the next rank, so this is an ordering, not a finding.

inetGeek's own reading, computed from sourced facts against category peers by disclosed rules. Not a provider claim. Intervals are 80%; a provider with few documented facts is pulled toward the category middle rather than scored on what little is known.
Read this score with care:
- Adoption is thin: 0 of 2 criteria are scored, so it sits near the category middle with a wide interval (13–87). Read the interval, not the point.
- Documented but not scored, because the page states it as text with no comparable number or a yes/limited/no (a one-time, usage-based or other-vendor price, or a per-site choice): minimum_paid_price, sso_connection_price, audit_logs, support_included. Read them on the provider page; the score neither rewards nor penalises what it could not compare.

Method: https://inetgeek.com/iscore/. Full output with every criterion's basis: https://inetgeek.com/scores.json. Every auth peer ranked: https://inetgeek.com/auth/stytch/alternatives/

- Price: 76 (70–83), weight 32%, 3 of 6 criteria scored; scored for peers, not here — undocumented or stated without a number or a yes/limited/no: free_card_required, minimum_paid_price, sso_connection_price
- Capacity and limits: 46 (25–68), weight 5%, 1 of 1 criteria scored
- Capabilities: 86 (79–92), weight 13%, 1 of 2 criteria scored; scored for peers, not here — undocumented or stated without a number or a yes/limited/no: self_hostable
- Trust and compliance: 79 (73–85), weight 32%, 11 of 15 criteria scored; scored for peers, not here — undocumented or stated without a number or a yes/limited/no: audit_logs, customer_managed_keys, private_networking, support_included
- Evidence: 96 (96–96), weight 10%, 4 of 4 criteria scored
- Adoption: 50 (13–87), weight 10%, 0 of 2 criteria scored

## What the documentation says

### Pricing

- Free tier: Yes ([source](https://stytch.com/pricing), read 2026-09-06)
- Kind of free offer: Always free ([source](https://stytch.com/pricing), read 2026-09-06)
- What the free plan includes: 10,000 monthly active users, 5 SSO or SCIM connections, 1,000 machine-to-machine tokens and 10,000 fingerprints; usage beyond that is billed at list rates. ([source](https://stytch.com/pricing), read 2026-09-13)
- Entry paid plan: No priced paid plan: Pay as you go starts at $0/month and meters usage above the free allowances; the only other tier, Enterprise, is quoted "Custom". ([source](https://stytch.com/pricing), read 2026-09-13)
- Pricing model: Pay as you go with no platform fee: usage above the always-free allowances is metered, and the estimator on the page prices monthly active users, SSO connections, SCIM connections and M2M tokens as separate lines. ([source](https://stytch.com/pricing), read 2026-09-06)

### Infrastructure

- Regions: United States only — Stytch runs exclusively on U.S. servers, so strict in-region data localization is not possible. ([source](https://stytch.com/docs/resources/policies/security-and-trust/compliance/data-compliance), read 2026-09-13)
- Uptime SLA: 99.99% on Enterprise, which is custom-priced. The self-serve plans publish no uptime commitment. ([source](https://stytch.com/pricing), read 2026-09-14)

### Auth

- Users included: 10,000 monthly active users free, permanently, alongside unlimited organizations and 1,000 M2M tokens. ([source](https://stytch.com/pricing), read 2026-09-06)
- Price per SSO connection: Five SSO or SCIM connections included free. Clerk includes one and charges $75 for each additional; WorkOS charges $125 each from the first. ([source](https://stytch.com/pricing), read 2026-09-06)
- SAML single sign-on: Supported ([source](https://stytch.com/pricing), read 2026-09-06)
- SCIM provisioning: Supported ([source](https://stytch.com/pricing), read 2026-09-06)
- Multi-factor authentication: Supported ([source](https://stytch.com/pricing), read 2026-09-06)
- Audit logs: Event logs cover API requests and dashboard admin actions, are visible in the Dashboard and retained 30 days; longer retention means streaming to Datadog Logs or Grafana Loki, the only supported destinations. ([source](https://stytch.com/docs/resources/workspace-management/event-logs), read 2026-09-13)

### Support

- Support on entry paid plan: Enterprise bundles an enterprise support SLA, a private support Slack channel and migration support. Below it the page offers a dev success team to contact, and names no tier. ([source](https://stytch.com/pricing), read 2026-09-14)

### Compliance

- SOC 2: SOC 2 Type 2, covering all Services, which the document defines as including the cloud-based identity platform branded Stytch. Stytch's own docs point to the Twilio Trust Center for the Stytch-named SOC 2 report. ([source](https://www.twilio.com/en-us/legal/security-overview), read 2026-09-13)
- ISO 27001: ISO/IEC 27001, ISO/IEC 27017 and ISO/IEC 27018 certified for the Twilio Services, defined to include the identity platform branded Stytch. Stytch's docs list an ISO 27001 certification among Stytch's own compliance documents. ([source](https://www.twilio.com/en-us/legal/security-overview), read 2026-09-13)
- HIPAA: HIPAA/BAA is listed only under Enterprise, which is custom-priced; the Pay as you go tier does not list it. ([source](https://stytch.com/pricing), read 2026-09-13)
- GDPR / data residency: GDPR compliance via a DPA with Standard Contractual Clauses and EU/UK/Swiss Data Privacy Framework self-certification; data sits on U.S. servers only. ([source](https://stytch.com/docs/resources/policies/security-and-trust/compliance/data-compliance), read 2026-09-13)
- PCI DSS: PCI SAQ-A covers the Stytch identity platform; PCI DSS Level 1 applies only to services named in Twilio's PCI DSS Responsibility Matrix. ([source](https://www.twilio.com/en-us/legal/security-overview), read 2026-09-13)
- Encryption at rest: Customer Data is encrypted at rest in AWS and GCP using the Advanced Encryption Standard. Scope: all Twilio Services, which the same document defines as including Stytch. ([source](https://www.twilio.com/en-us/legal/security-overview), read 2026-09-13)
- Role-based access control: Five dashboard roles — Admin, Developer, Support Manager, Support Agent and No Access — each with a published per-permission matrix. Stytch's own dashboard roles; RBAC for your end users is a separate product feature. ([source](https://stytch.com/docs/resources/workspace-management/dashboard-roles-and-permissions), read 2026-09-13)
- Dedicated infrastructure: Multi-tenant: the production environment is shared and logically isolated in a VPC, with Customer Data segregated by unique per-customer identifiers. Scope: all Twilio Services, which the document defines as including Stytch. ([source](https://www.twilio.com/en-us/legal/security-overview), read 2026-09-13)

## Compared with

- [Stytch vs Clerk](https://inetgeek.com/compare/stytch-vs-clerk/)
- [Stytch vs WorkOS](https://inetgeek.com/compare/stytch-vs-workos/)
- [Stytch vs Auth0](https://inetgeek.com/compare/auth0-vs-stytch/)
- [Stytch vs Better Auth](https://inetgeek.com/compare/better-auth-vs-stytch/)
- [Stytch vs Kinde](https://inetgeek.com/compare/kinde-vs-stytch/)
- [Stytch vs SuperTokens](https://inetgeek.com/compare/stytch-vs-supertokens/)