Foundation

Your team, your data, under your control.

Account is the layer underneath every Vendably capability: identity, permissions, audit, GDPR, billing. The plumbing you stop thinking about, because it just works.

4 RBAC roles Owner to Viewer
GDPR + SOC 2 compliance path
Stripe self-serve billing
// overview

Foundations that don't get in the way.

Four capability areas cover the complete account lifecycle: identity and sign-in, team and permissions, compliance and audit, and billing. Each area ships complete. None requires configuration to be useful.

Identity

Sign in securely, verify everything.

Email + password, social SSO, multi-factor. Optional SAML on enterprise plans.

Team & permissions

Four roles, zero ambiguity.

Four roles: Owner, Admin, Editor, Viewer. Per-merchant. Agencies bring their own role set.

Audit & compliance

Every action, timestamped.

Every change logged. GDPR export and erasure self-serve. SOC 2 Type II in progress.

Billing self-serve

One price, self-service.

Stripe customer portal: invoices, plan changes, payment methods. No tickets.

Identity

Sign in once, everywhere it matters.

Passwords are Argon2-hashed, never stored in plain text. Google and Microsoft OAuth let team members sign in without maintaining a separate password for each service.

TOTP multi-factor authentication is available as an additional layer for accounts that need it. SAML is available on enterprise plans for organisations running a central identity provider. Session policy controls manage concurrent sessions and idle timeouts.

  • Argon2-hashed passwords, never stored in plain text
  • Google + Microsoft SSO via OAuth
  • TOTP MFA optional, per account
  • SAML on enterprise plans
Request access
Sign in to Vendably
Team & permissions

Four roles, clear boundaries.

Owner has billing access and full control. Admin manages configuration, content, and invitations. Editor works on content and campaigns. Viewer sees everything but can change nothing. Roles are per-merchant: the same user can be Admin on one merchant account and Viewer on another.

Agency teams operate under their own role set, keeping their identity separate from the merchant's internal team. MerchantConnectedAccount links an agency's portfolio access to specific merchants without surfacing the connection owner's identity in merchant-scoped views.

  • Owner: billing and full control; Admin: config, content, invites
  • Editor: content and campaigns; Viewer: read-only
  • Per-merchant invitations with expiring tokens
  • Agency client access via MerchantConnectedAccount, separate roster
Request access
Role permissions
Capability
Owner
Admin
Editor
Viewer
Agency
Billing
Members
read
DataHub
read
Channels
read
Content
read
Reports
read
read
read
Audit & compliance

What happened, logged forever.

Every change on the platform is written to an immutable audit trail: sign-ins, role changes, password and email updates, OAuth connection events, data exports, and content changes. Each entry carries a timestamp, the acting user, and the before/after diff where applicable.

GDPR data export produces a one-click ZIP of all personal data held against an account. Erasure requests can be self-served from the privacy settings screen, with retention overrides available where legal obligations require it. SOC 2 Type II audit is currently in progress.

  • Immutable audit trail with actor, timestamp, and before/after diff
  • GDPR data export self-serve, no support ticket required
  • GDPR erasure flow with configurable retention overrides
  • SOC 2 Type II audit in progress
Read our security overview
Recent activity
Updated billing email view diff →
Today, 09:14
Invited new Admin user@example.com view diff →
Yesterday, 16:42
Exported GDPR data view diff →
10 May, 11:27
Removed Editor access for user@oldcompany.com view diff →
9 May, 14:09
Billing self-serve

Plan, invoices, payment methods in one tab.

The Stripe customer portal gives you full control over your subscription without contacting support. Change your plan to a different SKU range, update your payment method, add a tax ID for VAT purposes, and download any invoice from the full history.

Vendably is priced by active SKU count per ADR-026: one subscription, every capability across the platform. No line items per capability, no commission on sales, no usage gate on any feature. Currency is settled in EUR, GBP, or USD at your choice.

  • Stripe customer portal: full self-service, no support tickets
  • Plan tier changes self-serve, effective next billing cycle
  • All invoices downloadable as PDF
  • Multi-currency settlement: EUR, GBP, USD
See pricing
Billing
Current plan
Growth £289 /month
1 May 2026 £289.00 Paid ↓ PDF
1 Apr 2026 £289.00 Paid ↓ PDF
1 Mar 2026 £289.00 Paid ↓ PDF

Stacking it up

What this would cost separately.

Most platforms charge extra for advanced RBAC, SSO, audit, and compliance tooling. Here is what a typical mid-market merchant pays for identity, billing portal, audit, and compliance tools separately, and what changes when they are all part of one Vendably account.

Specialist tools

Stitching together identity, billing portal, audit, and compliance tools

£200–£2,000/month

Per month for identity tool + billing portal + audit stack at SME scale. Source: auth0.com. see pricing ↗

  • SSO often gated behind enterprise tier
  • Audit logs limited or require an add-on purchase
  • GDPR tools separate from the platform
  • Five separate vendors, five integrations, separate compliance evidence per tool
One Vendably platform

Account, included.

Includedin every plan

One subscription. Pricing scales with SKU range, not per-tool seats.

  • SSO, RBAC, and audit in every plan from day one
  • GDPR export on demand, no support ticket
  • No per-seat billing on roles
  • All five working from one user record and one audit stream

See full Vendably pricing

// included in every plan

Foundations that just work.

Account is included in every Vendably plan. Set up your team and invite your first colleagues during onboarding.

No per-capability charges All capabilities on every plan Cancel any time