Pay for editors. Viewers are free.

Editors are the people who create, score, and treat risks — anyone with the Admin or Editor role. Only Editors count toward your seat total. Free includes 1 Editor; Team and above are unlimited.

Yes. Viewers and stakeholders read without using a seat — you never pay to share visibility. The number of viewers is capped per plan: 5 on Free, 50 on Team, 500 on Business, unlimited on Enterprise.

No. Every plan includes unlimited risks. You should never have to choose which risks to track. Paid plans unlock more risk boards and Editors, not more risks.

Yes, on every plan. Every change to a risk — score, treatment, owner, status — is tracked with who and when. The immutable audit trail is included on Free; auditability is a basic feature everyone gets.

No. The Free plan needs no card and does not expire. A card is only asked for when you move to a paid plan.

Nothing breaks and nothing is deleted. When you try to create a second board or invite a second Editor, we show an upgrade prompt for Team, and everything you already have stays untouched. A workspace that ends up over the limits the other way round — after a downgrade — gets three days' notice, then content becomes read-only until it fits again. Reading and anything that shrinks the workspace stay available throughout, and the lock lifts by itself.

Pro rata, in both directions. A seat added during a period is charged for the remaining time; a seat removed is credited for the unused remainder. Credits are netted against your next invoice.

Your paid plan runs to the end of the period you already paid for, and until then one click takes the cancellation back. Nothing is deleted and no roles are changed — the workspace moves to Free. If it is over the Free limits at that point, you get three days' notice before content becomes read-only, and the lock lifts by itself as soon as the workspace fits again.

Two ways, on every plan and for Viewers too: any risk downloads as an editable PowerPoint deck, and its change history as CSV. A single export of an entire register will be available soon.

Yes, for the part such a questionnaire actually asks: who is accountable for a given risk, when it was last reviewed, and what you decided to do about it. Every risk carries an owner, a review date, a treatment with its justification and an immutable change history, so the answers come from the record instead of from memory. Supplier and provider risks sit in the same register as the rest — Third-Party / Vendor is one of the default categories. Any risk exports as a slide deck — scores, justification, treatment and owner, with the workspace, the date and who exported it on every slide — ready to attach to your answer. Reviewers who would rather look for themselves read the register as Viewers, who never use a seat. The questions such a form asks about us — where the data sits, who processes it, how workspaces are kept apart — are answered in our Trust Center at easyrisk.io/trust.

Yes. EasyRisk.io can run entirely on your own infrastructure, in the environment you choose.