The Stack
Complete service catalog with pricing — every SaaS, cloud platform, and operational tool the Foundation Architecture depends on.
The Stack
A complete inventory of every paid service behind the Foundation Architecture — what each one does, what it costs, and how the bill scales from a 3-person startup to a 100-person organization.
Prices are approximate and reflect publicly listed rates as of early 2026. Always confirm with each vendor before budgeting. Annual billing discounts (typically 10–20%) are available for most services but are not factored into the estimates below unless noted. Usage-based services (Neon, GCP, Cloudflare, etc.) are estimated for a typical SaaS product with moderate traffic.
Stack Cost Calculator
Wraps the role → cost API. Set MAU, HIPAA, and headcount; view by role group or by vendor.
Shared platform = usage/flat infra (Neon, GCP, PostHog, Clay, …) not attributable to one role. Vertical-specific services (e.g. WellSky, a rough per-seat estimate) are opt-in and excluded until checked above. Not modeled: Dropbox Sign (e-signature), AWS SES (transactional email — usage).
Service catalog — by vendor
Every service the architecture depends on, grouped by the vendor that provides it, with the logical function each one fills (sourced from the Recombinate IT Functions Map). Pricing detail and per-team totals follow below.
| Vendor | Service | Function | What it does | Pricing model | Est. cost / mo |
|---|---|---|---|---|---|
| GitHub (Microsoft) | GitHub Team | Source control (code repo) | Repository hosting, code review, CODEOWNERS enforcement, 3,000 CI/CD minutes | $4 / user / mo | $4 / user |
| ↳ Copilot Business | Coding agent (in-editor) | AI code completions, agent-mode PR generation, IP indemnity | $19 / user / mo | $19 / user | |
| ↳ Actions | CI / CD | CI/CD minutes beyond the 3,000 included in Team | $0.008 / min (Linux) — included minutes usually sufficient | ~$0 | |
| ↳ Codespaces | Remote dev environments (managed alt) | On-demand cloud dev environments (4-core default) | Usage — ~$0.36 / hr + $0.07 / GB storage | ~$18 | |
| Microsoft | Microsoft 365 (Business Premium) | Office suite / email / calendar + identity & security plane | Outlook, Teams, SharePoint, OneDrive + the security bundle: Entra ID P1, Intune (MDM), Defender for Business (EDR), Purview (DLP/labels) | $22 / user / mo | $22 / user |
| ↳ Teams | Team chat | Chat, channels, meetings — bundled in M365 Business Premium | $0 incremental | $0 | |
| ↳ Entra ID P1 | Workforce identity / SSO / MFA | SSO, MFA, Conditional Access — bundled in M365 (escalate to P2 for ID Protection / PIM as you grow) | Bundled in M365 | $0 | |
| ↳ Intune | Device management (MDM) | Mobile-device / endpoint management — bundled in M365 | Bundled in M365 | $0 | |
| ↳ Defender for Business | Endpoint security / EDR | Endpoint detection & response — bundled in M365 | Bundled in M365 | $0 | |
| ↳ Purview | Data governance / DLP / labels + compliance / GRC | DLP, sensitivity labels, and Compliance Manager (GRC / audit) — bundled in M365; replaces a separate Vanta/Drata | Bundled in M365 | $0 | |
| GCP | Cloud platform | Cloud Run (applications UI, marketing, API, worker), BigQuery, Artifact Registry, Secret Manager, Workload Identity Federation | Usage-based | ~$50 * | |
| ↳ Cloud Armor + Cloud Load Balancing | Edge / WAF (app/API PHI edge) | Global load balancing + WAF / DDoS for the app & API PHI path — the governed edge in front of Cloud Run (Cloudflare covers only the marketing edge / DNS) | Usage-based | usage * | |
| ↳ GCP-native observability | Observability + backend error tracking | Cloud Logging, Cloud Trace, Cloud Monitoring, Error Reporting (Cloud Run backend error tracking) — OpenTelemetry → GCP backends, inside the Google BAA | Usage — 50 GiB / mo logs free, then ~$0.50 / GiB | ~$0 * | |
| ↳ Vertex AI (Gemini) | AI — reasoning / embeddings / voice | Managed Gemini models for product reasoning, embeddings (pgvector retrieval) and voice | Usage-based (per token / request) | usage * | |
| Google Workspace (Essentials Starter) | Office suite (field / ops secondary) | Drive, Docs, Meet collaboration; no corporate Gmail seat needed | Free | $0 | |
| Neon | Neon (Scale) | OLTP database + vector search | Serverless PostgreSQL — branch-per-PR, autoscaling, pgvector. HIPAA on Scale: set hipaa:true + self-serve BAA, no separate add-on | Usage-based — ~$0.26 / CU-hr compute + storage, no monthly minimum | ~$15 * |
| Anthropic | Claude (Team Standard) | Coding agent (primary) + AI assistant | AI assistant for writing, analysis, code review — 200K context | $25 / user / mo | $25 / user |
| Linear | Linear (Business) | Project / issue tracking | Issue tracking, sprint planning, triage — the ticket system that drives the AI-native workflow | $16 / user / mo | $16 / user |
| Notion | Notion (Business) | Docs / knowledge base + business PM + meeting notes + M&A deal pipeline | Internal wiki, runbooks, company knowledge base, business PM (tasks / milestones), M&A deal-pipeline / target database, and AI Meeting Notes (bundled — replaces Granola) | $20 / user / mo | $20 / user |
| Figma | Figma (Professional) | Design / prototyping | Design + prototyping — the design-system & brand source of truth, paired with AI-in-code prototyping | $15 / editor / mo | $15 / editor |
| Sanity | Sanity.io (Growth) | Marketing CMS | Headless CMS / Content Lake — structured content for the marketing site (Next.js on Cloud Run) + in-app copy | $15 / seat / mo | $15 / seat |
| PostHog | PostHog (Cloud, Boost+) | Product analytics + flags / experiments + session replay + client error tracking + LLM observability | One BAA-covered vendor that consolidates analytics, feature flags, experiments, session replay, client-side error tracking (web + Expo/React Native) and LLM evals — backend/Cloud Run errors go to GCP Error Reporting (above) | Usage-based (events + replays) — Boost+ platform package carries the BAA | ~$50–100 * |
| Cloudflare | Cloudflare (Pro) | DNS / DDoS / CDN (marketing edge) | DNS, DDoS protection, CDN, Pages for static assets — marketing edge only; the app/API PHI edge + WAF is GCP Cloud Armor (above) | $20 / mo flat (not per-user) | ~$7 * |
| Tailscale | Tailscale | VPN / secure access | Tailnet — SSO-gated WireGuard mesh for access to infra, preview environments, and internal services | $6 / user / mo (builder + office) | $6 / user |
| Pulumi | Pulumi Cloud | Infrastructure as code + secrets (ESC) | IaC state management, CI/CD drift detection, Pulumi ESC secrets | Individual free (1 user); Team $40 / mo flat (≤ 10 users); Enterprise $400 / mo (unlimited) | ~$0–$4 * |
| Restate | Restate Cloud (managed) | Durable execution | Durable-execution runtime for background jobs and the agentic, human-in-the-loop agent loop — managed serverless runtime (us) driving Cloud Run scale-to-zero handlers | Managed service — free tier: 50k actions/mo, then usage-based | ~$0 * |
| Cerbos | Cerbos (self-hosted OSS) | Authorization (app-level) | Stateless authorization policy-decision-point — policy-as-code (YAML + CEL); Query Plan API emits SQL WHERE filters that pair with Neon RLS | Open-source, ~$0 license — cost ≈ underlying GCP compute | ~$0–3 * |
| Coder | Coder (Community — self-hosted) | Remote dev environments | Self-hosted cloud dev workspaces on GCP — the primary development environment | OSS, no license — pay only for the underlying GCP infra | ~$25 / dev * |
| Telnyx | Telnyx | Telephony — SMS / voice | Programmable voice, SMS / MMS, SIP trunking — customer + patient notifications, support lines, 2FA, product voice | Usage-based — voice ~$0.002 / min, SMS ~$0.004 / msg, DIDs ~$1 / number / mo | ~$50 * |
| Clay | Clay.com (Growth) | Sales data / enrichment | Data enrichment & prospecting automation — unlimited seats, credit-based | $446 / mo flat (unlimited users) | ~$149 * |
| ReachInbox | ReachInbox (Growth) | Cold outreach / deliverability | AI-powered cold email sequencing with unlimited sending accounts | $99 / mo flat | ~$33 * |
| WellSky | WellSky Personal Care | Home-care platform / EHR (+ referral mgmt · e-fax · Family Room) | Clinical system of record — scheduling, EVV, billing, referral / e-fax intake, family portal (API integration) | Contract-based (per-agency / per-seat) | Quote |
| AWS | AWS SES | Transactional email (product) | Product transactional email (us-west-2, co-located with Neon) — free self-serve BAA, no PHI in bodies | Usage — ~$0.10 / 1,000 emails | ~$0–1 * |
| 1Password | 1Password (Business) | Password / secrets manager (people) | Team password vaults, secrets sharing, SSO integration | $7.99 / user / mo | ~$8 / user |
| Sage | Sage Intacct | Finance / accounting | Core accounting / GL, AP / AR, financial reporting | Quote-based (annual contract) | Quote |
| Ramp | Ramp | Corporate cards / expense | Corporate cards, expense management, bill pay | Free (interchange-funded) | $0 |
| Dropbox | Dropbox Sign (Standard) | E-signature | E-signature with BAA (annual) | $15–25 / user / mo (Standard, annual) | ~$15 / user |
| Peony | Peony Data Room | Virtual data room (M&A / diligence) | Diligence / fundraising data rooms — unlimited rooms, watermarking, advanced NDA, AI doc chat; SharePoint convention retained for small tuck-ins | $52 / admin / mo (self-serve, flat per-admin; unlimited free viewers, no per-GB fees) | ~$52 / admin |
* Shared / usage-based services — the per-user figure is the total monthly bill divided by team size; actual unit cost drops as the team grows. Usage-based estimates (Telnyx ≈ 5 numbers + moderate volume; PostHog ~$50/mo light → ~$100/mo heavier; Clay / ReachInbox flat-rate shown as a 3-person share) scale with traffic, not headcount.
Microsoft 365 Business Premium is the primary productivity and security plane for office / clinical / engineering / sales staff — one $22 bundle covers Office, email, and Teams plus the whole security stack (Entra P1 SSO/MFA/Conditional Access, Intune MDM, Defender for Business EDR, Purview DLP/labels), so those show as $0 bundled sub-rows above rather than separate line items. Escalate to Entra P2 (ID Protection, PIM) as you grow; the governed-PHI-plane controls are detailed in Business Operations + HIPAA Compliance. Google Workspace is carried only for field / operations staff, on the free Essentials Starter tier (Drive/Docs/Meet, no paid seat). (Field caregivers authenticate to the product via Better Auth — they don't consume a workforce M365 seat.)
Open-source stack — $0 license
The product itself runs on an open-source build/runtime stack — no license cost. Runtime for the self-hosted pieces (Better Auth, FastAPI, plus Cerbos / Coder above) folds into the GCP compute already counted.
| Steward | Product | Function | Cost |
|---|---|---|---|
| TanStack (OSS) | Vite + TanStack (Router + Query) | Web application UI | $0 |
| Vercel (OSS) | Next.js | Marketing site | $0 |
| Expo (OSS) | Expo + React Native | Mobile app | $0 |
| Better Auth (OSS) | Better Auth (self-hosted) | Product auth | $0 |
| Open source | FastAPI (Python) | Backend API | $0 |
| Open source | OpenAPI → openapi-typescript | API contract | $0 |
| Drizzle (OSS) | Drizzle Kit | Schema & migrations | $0 |
| dbt Labs | dbt (on BigQuery) | Data transform (ELT) | $0 (OSS core) |
| Vercel (OSS) | Turborepo | Monorepo / build | $0 |
| Astral / Biome | Biome (TS) · Ruff (Py) | Lint / format | $0 |
| Open source | Lefthook | Git hooks | $0 |
| Jetify (OSS) | Devbox + direnv + process-compose | Local dev environment | $0 |
Undecided / WIP
Functions still in bake-off or active build — tracked in the IT Functions Map; no line-item cost committed yet.
| Function | Candidates | Owner | Status |
|---|---|---|---|
| Enterprise productivity AI | M365 Copilot vs Gemini for Workspace | All staff | ⚠️ Bake-off |
| Marketing / lifecycle email | Customer.io vs Iterable vs Loops | Marketing / Growth | ⚠️ TBD (BAA gating) |
| Caregiver scheduling AI (on WellSky) | Zingage vs Phoebe vs Alden | Ops / Eng | ⚠️ TBD |
| Product voice / telephony | Telnyx + Pipecat + Gemini Live (currently favored setup) | Engineering | ⚠️ WIP |
HR & Payroll — pick one
Rippling and Deel serve the same function — you choose one based on your team's location and employment model. Rippling is strongest for US-centric teams; Deel excels at international contractors and Employer-of-Record (EOR) arrangements.
| Vendor | Service | Function | What it does | Base platform fee | Per-employee / mo | Per-contractor / mo |
|---|---|---|---|---|---|---|
| Rippling | Rippling (Core HR + Payroll) | HR / payroll / benefits | US payroll, benefits admin (device management migrates to Intune) | $35–$40 / mo | $20 | — |
| Deel | Deel (Global) | Global payroll / EOR / contractors | International payroll, contractor management, EOR | Free HRIS (≤ 200 employees) | $29 (payroll) / $599 (EOR) | $49 |
Remote Development Environments
The architecture assumes Coder (self-hosted, Community edition) as the primary development environment. GitHub Codespaces is a viable managed alternative — pricing for both is shown below.
Coder (Community — self-hosted)
Coder is free and open-source; you pay only for the underlying infrastructure. The estimates below assume GCP, no HA, and no paid Coder support.
| Component | What it is | Spec | Est. cost / mo |
|---|---|---|---|
| Control plane | Coder dashboard, provisioner, workspace metadata | 1 × e2-medium VM (2 vCPU / 4 GB) | ~$25 |
| Dev workspace | Primary development machine (one per developer) | 4-core / 16 GB spot instance (GCP e2-standard-4) + 50 GB SSD | ~$25 / dev |
| GPU add-on (optional) | Beefy GPU for direct AI / ML development — not every developer needs this | RunPod A100 80 GB VRAM, ~40 hrs / mo on-demand | ~$55 / dev |
GitHub Codespaces (managed alternative)
| Service | What it does | Pricing model | Est. cost / user / mo |
|---|---|---|---|
| GitHub Codespaces | Managed cloud dev environments integrated with GitHub | Usage — ~$0.36 / hr (4-core) + $0.07 / GB storage | ~$18 |
Total Cost Estimates by Team Size
Assumptions
The estimates below apply these conventions:
- Neon (Scale) is the database. Pricing is usage-based with no monthly minimum (~$0.26 / CU-hr compute + storage). HIPAA is included on Scale — set
hipaa:trueand accept the self-serve BAA at no separate add-on cost. Because HIPAA no longer changes the bill, the totals below are a single figure — there is no separate "+ HIPAA" column, as there was under the old Supabase-based estimates. - All web runs on GCP Cloud Run — the applications UI (Vite + TanStack) and the marketing site (Next.js). Vercel is not used.
- Observability is GCP-native (Cloud Logging / Trace / Monitoring via OpenTelemetry) — effectively free at launch volumes and folded into GCP usage. No Elastic / ELK.
- Durable execution (background jobs + the agentic human-in-the-loop agent loop) runs on Restate Cloud (managed, serverless) driving Cloud Run scale-to-zero handlers — no always-on node to operate; its free tier (50k actions/mo) covers launch volumes, moving to usage-based pricing as traffic grows.
- Microsoft 365 Business Premium is the primary productivity + security suite for office / clinical / eng / sales staff; Google Workspace Essentials (free) covers field / ops collaboration.
- Microsoft 365 is added for a subset of employees who need Office desktop apps (Excel, etc.).
- Rippling is the HR / payroll provider (US-centric team).
- Coder (Community, self-hosted on GCP) is the dev environment — not Codespaces.
- GPU add-on is excluded from the base estimates (add ~$55 / mo per AI-focused developer).
- Pulumi Cloud is tiered by the number of Pulumi users, not total employee count: Individual (free, 1 user), Team ($40 / mo flat, up to 10 users), Enterprise ($400 / mo, unlimited). In the estimates below, even larger companies can remain on Team if only a small platform / infra group needs Pulumi access.
- Shared / usage-based services (Neon, GCP, Cloudflare, Telnyx, Clay, ReachInbox, PostHog) appear once in the total — they are not duplicated per user. PostHog is billed on event / session-replay volume, not seats.
- Usage-based cloud services scale sub-linearly with headcount.
Team of 3
At three people everyone wears every hat — founder, engineer, salesperson, support. All three need access to every service. Pulumi starts free on the Individual tier — one person can manage deployments for the whole team.
| Category | Services included | Cost |
|---|---|---|
| Engineering platform | GitHub (Team + Copilot) × 3, Neon, GCP, GCP-native observability, Pulumi (free), Cloudflare | $184 |
| Project management & knowledge | Linear × 3, Notion Business × 3, Figma × 3 (editors) | $153 |
| Productivity & identity | M365 Business Premium × 3 (Office + Teams + Entra P1 + Intune + Defender + Purview, all bundled) | $66 |
| AI & productivity | Claude × 3 | $75 |
| Sales & outreach | Clay, ReachInbox | $545 |
| Telephony | Telnyx (light usage) | $50 |
| Content & experimentation | Sanity × 3 ($45); PostHog (usage, light — ~$50) | $95 |
| HR & payroll | Rippling (base + 3 employees) | $100 |
| Dev environments | Coder control plane + 3 dev machines (4-core spot) | $100 |
| Grand total | ~$1,368 / mo | |
| Per person | ~$456 / mo |
Team of 20
At twenty people, light specialization begins. Not everyone needs every tool, but overlap is still high.
Assumed department split:
| Department | Headcount | What they need |
|---|---|---|
| C-Suite | 3 | Everything |
| Product | 3 | Everything |
| Engineering | 8 | Everything |
| Sales / Marketing | 4 | Notion, Communication, Sales & Outreach, AI & Productivity, HR |
| Operations / Support | 2 | Communication, Identity, HR only |
| Category | Who uses it (seats) | Cost |
|---|---|---|
| Engineering platform | 14 × GitHub + Copilot; Neon; GCP; GCP-native observability; Pulumi Team ($40 flat); Cloudflare | $532 |
| Project management & knowledge | 14 × Linear; 18 × Notion Business; 5 × Figma (editors) | $659 |
| Productivity & identity | 18 × M365 Business Premium (office/clinical/eng/sales); 2 × Google Workspace Essentials (field/ops — free) | $396 |
| AI & productivity | 18 × Claude | $450 |
| Sales & outreach | Clay, ReachInbox | $545 |
| Telephony | Telnyx (moderate usage) | $150 |
| Content & experimentation | 5 × Sanity ($75); PostHog (usage, moderate — ~$75) | $150 |
| HR & payroll | Rippling (base + 20 employees) | $440 |
| Dev environments | Coder control plane + 8 dev machines (4-core spot) | $225 |
| Grand total | ~$3,547 / mo | |
| Per person | ~$177 / mo |
Team of 100
At a hundred people the company has distinct departments. Not every role needs an engineering seat or a sales tool.
Assumed department split:
| Department | Headcount | What they need |
|---|---|---|
| C-Suite | 5 | Everything |
| Product | 10 | Everything |
| Engineering | 30 | Everything |
| Sales / Marketing | 25 | Notion, Communication, Sales & Outreach, AI & Productivity, HR |
| Field / Operations | 30 | Communication, Identity, HR only |
| Category | Who uses it (seats) | Cost |
|---|---|---|
| Engineering platform | 45 × GitHub + Copilot; Neon; GCP; GCP-native observability; Pulumi Team ($40 flat); Cloudflare | $1,921 |
| Project management & knowledge | 45 × Linear; 70 × Notion Business; 12 × Figma (editors) | $2,300 |
| Productivity & identity | 70 × M365 Business Premium (office/clinical/eng/sales); 30 × Google Workspace Essentials (field/ops — free) | $1,540 |
| AI & productivity | 70 × Claude | $1,750 |
| Sales & outreach | Clay, ReachInbox | $545 |
| Telephony | Telnyx (higher volume) | $500 |
| Content & experimentation | 15 × Sanity ($225); PostHog (usage, higher volume — ~$100) | $325 |
| HR & payroll | Rippling (base + 100 employees) | $2,040 |
| Dev environments | Coder control plane + 30 dev machines (4-core spot) | $775 |
| Grand total | ~$11,696 / mo | |
| Per person | ~$117 / mo |
Per-person cost drops dramatically at scale because usage-based infrastructure (Neon, GCP, Cloudflare, Telnyx, Clay, ReachInbox, PostHog) is shared, and many employees (Field / Operations) only need basic communication and HR tooling. The largest variable-cost drivers remain per-seat services: GitHub Copilot ($19), Claude ($25), and Linear ($16).
Programmatic pricing — role → cost
The tables above are reference snapshots. The live model is a typed function that prices any team from a request object:
import { calculateStackCost } from '@/lib/pricing/stack-calculator';
calculateStackCost({
composition: { cto: 1, 'software-engineer': 6, scheduler: 2, caregiver: 25 },
mau: 15000, // REQUIRED — drives usage-based services (Neon, GCP, PostHog, Telnyx)
hipaa: true, // default true — toggles per-service HIPAA add-ons
overrides: { // optional, per service id
github: { billTier: 'office' }, // switch which tier a per-seat tool bills against
linear: { seats: 5 }, // hard-code the scale factor
clay: { disabled: true }, // turn a service off
gcp: { usageMultiplier: 2 }, // scale a usage service
},
});
// → { headcount, lines[], perCategory[], grandTotalMonthly, perPersonMonthly, hipaaPremiumMonthly, notModeled, warnings }- Roles + tiers in
src/lib/pricing/team.ts(Builder / Office / Field); the service cost model instack-model.ts(per-seat / flat / MAU-usage, each with optional HIPAA add-ons). The "everyone builds" rule: all Office + Builder get Linear + a Claude coding-agent seat + Tailscale; only Builders add GitHub + Copilot + Coder. - MAU is required — usage services (Neon, GCP, PostHog, Telnyx) scale with monthly active users, not headcount.
- HIPAA (default
true) adds per-service premiums (M365 Business Premium, Neon Scale, PostHog Boost); the total is returned ashipaaPremiumMonthlyso the HIPAA delta is visible directly. - Overrides per service id:
billTier(switch group),seats(hard-code scale),usageMultiplier(scale usage),disabled(off). - CLI:
pnpm pricing '{"composition":{"software-engineer":2},"mau":5000}';pnpm pricing:genregenerates the static JSON. - OpenAPI spec (for agents): served at
/api/pricing/openapi.json. The docs UI and this API run in one Cloud Run service (fronted by Cloudflare); the API is mounted under/api, soPOST /api/pricing,POST /api/pricing/export.xlsx,GET /api/pricing/roles.json/scenarios.json, and MCP-over-HTTP atPOST /api/mcpare all live. The spec'sserversURL is relative (/api), so it resolves against whatever origin serves it —http://localhost:8080/apilocally (pnpm api),https://foundation.h11h.io/apiin prod. - Role-tied services: WellSky (caregivers + clinical), Sage/Ramp (finance + C-suite), Clay/ReachInbox (billed only if a sales role is present), Figma (design/PM), Sanity (marketing), Peony data room (admin seats: CEO + CPO/CTO + the Corporate Development / Strategy role, which defaults to 0). Still not modeled (in
notModeled): Dropbox Sign, AWS SES.
The reference tables above still reflect the earlier headcount model; the function encodes the newer everyone-builds tiering + MAU/HIPAA, so its totals differ. The tables can be regenerated from the function when we want it to be the single source of truth.
As You Grow
The services above cover a team from founding through Series A. As the organization scales beyond ~50 people or traffic grows significantly, consider adding:
| Service | What it does | When to adopt | Pricing model |
|---|---|---|---|
| Jetify Cloud (Starter → Scaleup) | Private Nix binary cache for Devbox — eliminates redundant builds and speeds up onboarding from minutes to seconds | > 10 developers sharing a Devbox config | $25 / mo (10 users) → $150 / mo (50 users); $0.60 / GB cache storage |
| Neon (Business) | Higher compute + storage ceilings, longer point-in-time recovery, more branches — same HIPAA posture as Scale | High-availability or heavier OLTP / branch-per-PR volume | Usage-based with higher included limits (contact sales for committed-use discounts) |
| Microsoft Entra ID (P2) | Identity Protection, PIM, access reviews, lifecycle governance | Privileged-access governance / regulated-industry audit requirements | $9 / user / mo |
| PostHog (Scale / Enterprise platform) | Advanced permissions, SSO/SAML, audit logs, higher included volume, dedicated support — layered on the same BAA-covered Cloud | Large product org running heavy analytics / many concurrent experiments / high replay volume | Usage-based + platform add-on (contact sales) |
| Datadog or New Relic | Advanced APM, infrastructure monitoring, real-user monitoring — complements the GCP-native stack | When OpenTelemetry + Cloud Monitoring alone can't keep up with multi-region, multi-service sprawl | Usage-based — typically $15–$35 / host / mo |
| Pulumi Cloud (Enterprise) | Unlimited resources, SAML/SSO, audit logs, dedicated support | > 10 Pulumi users | $400 / mo flat (unlimited users) |
| Coder (Premium) | Multi-org RBAC, audit logging, workspace proxies, SLA-backed support | > 25 developers or compliance-driven workspace isolation | Custom pricing — annual per-user |
| Lightdash or Wren AI | Governed BI / conversational analytics on top of your data warehouse | When stakeholders need self-serve reporting beyond raw SQL | Lightdash: OSS or Cloud from $0; Wren AI: OSS |