What happens during, and after, your trial
The honest version. Four reminder emails on a calm cadence, read-only mode after expiry rather than a hard cutoff, 30 days of data grace, and a one-click activate path that uses your real user count.
28-day trial · No credit card · Read-only Microsoft access
A calm cadence, no fake urgency
ScanPosture sends four reminder emails across the trial. Each comes from noreply@scanposture.com, addressed to the tenant owner plus anyone with the admin or billing role.
Microsoft sign-in completes. Your tenant, user account, 28-day trial, and UK data residency acknowledgement are written in a single atomic transaction. Land on /dashboard.
A calm midpoint email with your posture score, open findings count, your top three risks, and how many scans have run. No upsell pressure, just what the product has surfaced so far.
A short reminder with the activate-subscription link. One CTA. No countdown typography. If now isn’t the right time, no need to do anything.
Same shape as Day 21, slightly tighter copy. The only nudge before the trial ends.
Past-tense, factual email. Your data stays here. The dashboard stays available. Scanning + writes are paused until you activate.
The whole product, with no flagged-off features
The trial runs the same code path as a paying tenant. Nothing is feature-gated, no ‘upgrade to access’ walls, no truncated outputs.
201 read-only checks
Every check across nine posture domains runs every scan. The trial sees the full check set on day 1.
Eight framework views
Cyber Essentials, ISO 27001:2022, GDPR Article 32, NIST CSF 2.0, NIST SP 800-53 Rev 5, CIS Controls v8.1, SOC 2, NCSC CAF 4.0.
Priority actions
Score-impact-ranked remediation actions with evidence + remediation guidance. Same logic paying customers see.
AI executive summary
Optional Claude-generated narrative for stakeholder reports. Off by default; one click to enable.
Slack + Teams alerts
Per-event webhooks (critical / high / scan complete / scan failed / daily digest) with rate-limited test sends.
PDF + CSV exports
Executive PDF, framework readiness packs, finding exports, all available throughout the trial and the 30-day grace period.
Read-only mode, not a hard cutoff
If you don’t activate by Day 28, scanning and writes pause but you don’t lose access. The tenant stays usable for read + export through a 30-day data grace, then a further 30-day soft-deleted restore window.
Read access stays open
You can still sign in, view findings, run reports, export PDFs and CSVs, and review your historical posture trend. The data is yours either way.
Writes are gated
Triggering a new scan, changing finding status, requesting an exception, updating webhooks, or editing the scan schedule all return a "subscription required" response. Activate to resume them.
30-day data grace
Your tenant data stays in place for 30 days after the trial ends. Activate any time during that window and scanning resumes with no data loss. After 30 days, the tenant moves into a soft-deleted state with a further 30-day restore window.
One-click activation
The expired-trial banner CTA opens Stripe Checkout pre-filled with the user count from your most recent scan, at the per-Entra-user rate. No re-quote, no sales call, no support ticket.
Activation uses Stripe Checkout. Card details + VAT details + billing address are collected on Stripe’s page; ScanPosture never sees your card number. Your subscription quantity updates automatically after each completed scan, so the price you see at activation is your real price, not an estimate.
Ready to start? Or already on the trial and ready to activate?
Self-serve from start to finish. No sales call required at any step, though we’re happy to talk if you’d prefer.
Running an MSP? See the MSP partner trial.
Trial questions
Common questions from buyers and security teams about how the trial works in practice.
Yes. Email hello@scanposture.com and we’ll extend it. We just push out your trial end date. Same dashboard, same access, the trial runs longer with no other change to your account.
Nothing destructive. Your tenant moves to read-only mode (see above) but every piece of data, findings, scans, evidence, reports, audit history, stays in place for 30 days. Activate at any point during that window and scanning resumes immediately. After 30 days the tenant moves into a soft-deleted state with a further 30-day restore window before any data is removed.
Yes. Read endpoints stay open in the post-trial grace period, including PDF and CSV exports for findings, framework readiness, and the executive summary. You can also export the audit log if you need an evidence pack for a compliance review.
No. Each reminder is sent to the tenant owner and any users with the admin or billing role, typically one to three people. They’re deduplicated per recipient per reminder so you only ever receive each one once.
No. The 28-day trial requires only your Microsoft work account and your IT admin’s consent for read-only Microsoft Graph access. Payment details are only collected at the point you choose to activate via Stripe Checkout.
Per Entra ID user in your monitored tenant, billed monthly, ex VAT. Tiered: £3.50 / user / month for the first 100, £3.00 for 101–500, £2.50 for 501+. The user count comes from your most recent completed scan, so the Stripe Checkout price you see is your real price, not an estimate.
Your subscription quantity updates after each completed scan. Mid-cycle increases are charged immediately (Stripe proration); decreases generate credits applied to the next invoice. No manual quantity management required.
Try ScanPosture against your own tenant
The trial uses your real Microsoft 365 + Entra ID estate. Your posture score, your priority actions, your real pricing at activation.
28-day trial · No credit card · Read-only Microsoft access · Activate any time, no sales call