Your workspace, your money, your people.
Sign in the way your company already does, decide who can do what, and keep the money side legible. Credits, plans, invoices, referrals, and the controls that decide who reaches which part of the workspace.
Everything here sits around the work rather than inside it. You are not asking an employee to do a job, you are deciding how the account behaves: who gets in, what they may touch, how the bill is paid, and what happens to your data over time.
Access starts at the front door. Sign in with Google or Microsoft so people use the identity your company already manages, add two-factor when you want a second lock, and give each person a role that matches what they actually do. Offboarding somebody upstream closes their route in here too.
The money side is deliberately boring and visible. You can see what credits you have, what they were spent on, and what a plan change would do before you make it. Invoices and receipts download straight from the workspace, and referral and affiliate credit lands without anyone chasing it.
Almost all of it is self serve, which is the point. Adding a card, swapping the default one, pulling an invoice for your accountant, redeeming a code, or moving up a plan are all things you do yourself inside the workspace. Upgrades apply the moment you confirm them, so a busy week never waits for a billing cycle, and a downgrade holds off until the end of the period you already paid for. Change your mind before that date and you can replace the pending change, or cancel it outright by upgrading instead.
Credits are the single unit that pays for everything your AI employees do, so this is also where you find out where the work went. A usage breakdown shows what went to thinking, tool calls, media, voice, and meetings, and the grants history lists every top up, promo code, and referral bonus with its date, source, and amount. If a number looks strange you can trace it yourself rather than opening a ticket and waiting. Nothing about the balance is hidden behind a support conversation.
Access is built in two layers on purpose. Your role in the workspace decides what kind of action you may take, such as inviting people or changing the plan, and a separate grant on each resource decides which particular document, contact, or conversation you may open. That split is why a collaborator can get on with normal work instead of pinging an Owner every hour, while money, identity, and destructive actions stay locked down. An Owner can also hand one specific permission to one specific person without promoting them, and the server checks both layers before it returns anything.
Your data sits on a schedule instead of piling up forever. A cleanup job runs once a day, off peak and in small batches, and clears operational records once they pass their published retention window. The things you would actually miss are treated differently: chat messages, the documents your employees produce, and their notes are kept until you remove them yourself. The windows are the same for every workspace, they are listed publicly, and there is no setting for you to get wrong.
Google or Microsoft sign-in, so access follows the identity your company already manages. Turn on two-factor authentication from your profile when you want a second lock, and an ordinary email and password stays available for anyone who prefers it.
Decide who can invite, who can spend, and who can only read, per workspace. An Owner can also grant one extra permission to one person without promoting them, so nobody ends up with more reach than the job needs.
Credits, plan changes, invoices, and receipts, all readable without asking us. Every charge links to its own document and every credit grant shows where it came from, so an accountant gets a clean set of records.
The account layer is everything that sits around the work: who gets in, what they are allowed to touch, how the bill gets paid, and how long your data sticks around.
There are three ways in: an email address and password, a Google account, or a Microsoft account. Signing in through Google or Microsoft means Sistava never handles a password, and because the provider has already confirmed the address, there is no verification email to chase before your first employee starts working. For a second lock, switch on two-factor authentication with any standard authenticator app. Turning it on signs out every other active session immediately, so a session created earlier cannot be used to walk around it.
Inside a workspace, every person holds one of three roles. An Owner can do everything, including billing and removing people. An Admin runs the day to day without touching the money or the workspace settings. A Collaborator does the work. On top of that, an Owner can open a single person's access and grant individual permissions, such as inviting members or managing resource access, without changing their role. A workspace always keeps at least one Owner, so ownership has to be handed over before the last one can leave.
The billing side runs through Stripe, so your full card number never reaches Sistava. Your transaction history lists every subscription charge and every credit purchase with a link to the matching invoice or receipt, ready to hand to an accountant or file for tax. Plan changes, credit packs, promo codes, and referral bonuses all land in the same place. One login can also belong to several workspaces, which is how agencies keep client work separated without juggling separate accounts.
Invite people by email, give each one a role, and see the whole roster with pending invitations included so your seat count is never a surprise. When somebody's job changes, adjust the one permission they actually need instead of promoting them to a role that hands over far more. Anyone who is not an Owner can ask every Owner to review their access in a single click, which beats a chain of messages.
An upgrade takes effect the moment you confirm it, so a project that suddenly needs more capacity is not stuck waiting for the next billing cycle. A downgrade waits until the end of the period you already paid for, and it never archives, pauses, or removes anything you have built. If you change your mind, pick a different plan again before the period ends and the pending change is replaced.
Open your transaction history, pull the invoice or receipt for any charge, and export the list. Subscription payments and credit purchases both carry documents with the full line items, billing period, tax, and payment method, so there is no gap to explain at year end. You do not need a Stripe account of your own to open them.
Share your personal referral link or send an invite by email, and both you and the person who signs up receive credits as soon as their account is created. Promo codes redeem from the same page for a one time grant of bonus credits. If you want to promote Sistava at a larger scale, there is an affiliate program and a reseller program you can apply to.
Billing runs on credits. Each paid plan includes a credit allowance that refills at the start of every billing period, and those credits pay for everything your AI employees do: thinking, tool calls, media generation, voice, and meetings. If you run low before the next reset, you can add a credit pack at any time on any plan, including free. A usage breakdown inside the workspace shows exactly which activity spent what.
You can invite teammates by email up to the seat count your plan allows, and each of them signs in with their own account rather than sharing yours. The members roster shows accepted people and pending invitations together, so the seat count is always honest. One login can also belong to several workspaces and switch between them, which is how agencies keep separate clients apart.
Google sign-in and Microsoft sign-in are both supported, so people use the identity your company already manages instead of inventing another password. Because the provider has already confirmed the email address, the account counts as verified from the start and there is no confirmation step to clear first. Anyone who prefers an ordinary email and password can still use one, and two-factor authentication works either way.
A downgrade takes effect at the end of the billing period you already paid for, so you keep what you bought until then. It never archives, pauses, or deletes your employees, conversations, or documents. If you end up over the smaller plan's employee cap, you simply cannot hire past that cap until a slot frees up or you upgrade again.
Access works in two layers. Your role decides what kind of workspace action you can take, such as inviting people or changing the plan, and a separate grant on each resource decides which specific document, contact, or conversation you can open. An Owner can also adjust a single permission for a single person without changing their role, and every request is checked against both layers on the server before anything comes back.
Operational records are removed on a fixed schedule by a cleanup job that runs once a day, so short lived debug data and inactive working memory clear out on their own. The material you would actually miss, meaning chat messages, the files your employees produced, and their notes, is kept until you delete it yourself. The retention windows are published, identical for every workspace, and not something you have to configure.
Yes. Share your referral link or send an email invite and both you and the new signup receive credits automatically, up to the referral cap on your account. Promotional codes redeem from the same page for a one time grant of bonus credits, and each grant is logged with its source and date. For larger scale promotion there is an affiliate program and a reseller program you can apply to.
No. Upgrades, downgrades, credit packs, and payment methods are all handled by you from the subscription settings, and the change applies without anyone reviewing it first. Cards are added through Stripe, so your full card number never touches Sistava, and you can mark a default or remove one at any time. A sales conversation is only needed for a custom arrangement.