Bigger than our largest published plan?

If you need identity-provider sign-in, a signed availability commitment and an environment of your own, we are not the right vendor yet, and we would rather say so now than sell you something you unwind in six months.

If what you need is more seats than the published plans carry, or a group of businesses that has to report together, that is a conversation we can have today. It starts with the shape of the group: how many businesses, how many people in each, and what has to roll up to head office.

What you get instead of an enterprise tier

There is no enterprise edition, no account manager and no implementation partner. Rather than dress that up as a feature, here is what it means in practice at your size. The person who answers your email is the person who writes the code. There is no support tier to escalate through and no partner network sitting between you and the product, because the team behind OneBookPlus is small enough that the distance between a problem and the person who can fix it is one message. Email and in-app support from the founder on every plan, including Free, usually answered the same business day in Australian hours. There is no priority queue and no paid support tier, so there is nothing here we can sell you again at the top of the range.

The advantage that comes with that is speed. A change that fits the product can ship in an ordinary week rather than waiting on a release train, and what ships is published in the OneBookPlus changelog rather than announced at your renewal. The limit that comes with it is scope. We say no to work only one customer would ever use, because a product this size cannot carry bespoke branches and remain the same product everyone else runs. So the useful conversation about a missing capability is whether it belongs in the product for everybody, not whether we will build you a private version of it.

Where the group's data sits, and what we are not certified for

For an Australian group the residency question usually arrives before the feature list, so it is worth answering precisely. Your business data is hosted in Australia, on managed Postgres in the AWS Sydney region (ap-southeast-2), with the dashboard application running on AWS Fargate in the same Sydney region. It is encrypted in transit and at rest, and every table is scoped to a single business at the database layer, which is the control that stops one company in a group reading another's takings even if application code gets a query wrong.

What we do not hold is a certificate of our own, and that is the answer most procurement teams are really asking for. AWS, our managed database host and Stripe each publish independent SOC 2 or ISO 27001 attestations, and those controls are part of the posture underneath us, but an attestation held by a supplier is not an attestation held by us. We have scoped an ISO 27001 program targeting a first certification in 2027, which is a plan rather than a credential. If your process needs a current certificate on file before it can proceed, we will not clear it this year. Every practice behind these claims, including the hosting detail and how tenant scoping is enforced, is written up in the OneBookPlus security and compliance overview.