# Intune backup pricing: Free, Pro & MSP | TenuVault

Compare TenuVault Community, Pro and MSP. Pro covers 2 tenants; MSP includes 5 from €99/month. Unlimited devices and a 14-day Pro trial without a card.

Canonical: https://www.tenuvault.com/pricing

**Free**Community forever, Pro free for 14 days

# Unlimited devices, one _flat_ price

You pay per tenant, never per device, so your price stays the same as your fleet grows. Protect one tenant for free. Control change with Pro. Standardize customer tenants with MSP. Prices in EUR, excluding VAT.

## Plans

## Plans in EUR, excluding VAT

| Plan | Monthly | Yearly | Tenants |
| --- | --- | --- | --- |
| Community Free | €0 EUR per month | €0 EUR per year | 1 included |
| Pro | €49 EUR per month | €490 EUR per year | 2 included |
| MSP | €99 EUR per month | €990 EUR per year | 5 included |

### MSP tenant bands

| Tenants | Additional tenants per month | Additional tenants per year |
| --- | --- | --- |
| 1 to 5 | €0 EUR per tenant per month | €0 EUR per tenant per year |
| 6 to 25 | €15 EUR per tenant per month | €150 EUR per tenant per year |
| 26+ | €10 EUR per tenant per month | €100 EUR per tenant per year |

MonthlyYearly2 months free

### Community Free

For admins who want a real safety net for one tenant.

Free

Unlimited devices, no per device fees

Forever. No paid license or TenuVault web account.

[Download](https://www.tenuvault.com/download)

Includes

-   1 Microsoft Entra tenant
-   Manual backups and a weekly scheduled backup
-   Supported Intune configuration types, with assignments
-   Encrypted local storage with a recovery key
-   30 days of backup history
-   Restore single items, unlimited
-   Drift detection with diffs
-   OpenIntuneBaseline deployment, comparison and validation
-   Supported framework mappings except CIS, with PDF, CSV and JSON reports

Recommended

### Pro

For organizations that must recover fast and control change.

€49per month

Excl. VAT, added at checkout. Business VAT IDs accepted.

Unlimited devices, no per device fees

2 tenants, billed monthly.

[Start free trial](https://www.tenuvault.com/trial?src=pricing)

Every new tenant starts with 14 days of Pro. No card and no email. Afterwards, keep using TenuVault free on Community with one tenant.

Need longer? Extend once in the app. Need a quote or invoice? [Get a yearly quote as a PDF](https://www.tenuvault.com/quote?plan=pro).

Buy now

Card, Apple Pay or Google Pay. Yearly plans can also be [paid by invoice](https://www.tenuvault.com/quote).

Everything in Community, plus

-   2 tenants, for example production and test
-   Full backup restore and replace in place
-   One click revert of drifted policies
-   Daily schedules and custom retention
-   Backups in your own Azure storage account
-   Baseline management: create only what is missing
-   Restore and change audit log
-   Up to 5 installations per tenant
-   Email support
-   Dev → Prod promotion of supported Settings Catalog settings
-   Dashboard scores for OIB and supported frameworks
-   Policy conflict and hygiene explorer
-   Versioned custom baselines and reviewed upgrades
-   Scheduled health review and opt-in notifications
-   Full white-label PDF reports with your logo and colors
-   CIS Benchmarks assessment and remediation, with reports, for the certified benchmarks

### MSP

For service providers and organizations with 5 or more tenants.

from€99per month

Excl. VAT, added at checkout. Business VAT IDs accepted.

Unlimited devices, no per device fees

Includes 5 tenants. Additional tenants per month: €15 for tenants 6 to 25, €10 for tenants 26+.

[Start free trial](https://www.tenuvault.com/trial?src=pricing-msp)

Every new tenant starts with 14 days of Pro. No card and no email. Afterwards, keep using TenuVault free on Community with one tenant.

Buy now

Card, Apple Pay or Google Pay. Yearly plans can also be [paid by invoice](https://www.tenuvault.com/quote).

Trial MSP with 5 tenants (card required)

Everything in Pro, plus

-   Includes 5 tenant slots, add more as you grow
-   All tenants in one app with a tenant switcher
-   Cross tenant dashboard for backups and drift
-   Bulk restore and baseline rollout across tenants
-   Per tenant schedules and storage
-   Optional license sharing with a customer tenant
-   Priority email support
-   Versioned customer standards and overlays

**Buying through procurement?** For yearly plans, create a PDF quote in a minute, order with your purchase order and pay by invoice and bank transfer. [Get a quote](https://www.tenuvault.com/quote) or [email us](mailto:support@tenuvault.com?subject=TenuVault%20Desktop%20invoice%20or%20quote%20request). Evaluate first with the [14 day trial](https://www.tenuvault.com/trial?src=pricing), no credit card needed.

### Estimate your MSP price

Includes 5 tenants. Each additional tenant is priced within its band, with a lower rate from tenant 26.

Number of tenants

10 tenants per month**€174**

Average per tenant**€17.40**

Estimate in EUR, excluding VAT. Choose your total tenant slots at checkout. Existing MSP subscriptions use their current billing model. [Get a yearly quote for 10 tenants](https://www.tenuvault.com/quote?plan=msp&tenants=10)

## Unlimited devices on every plan. No per device pricing.

TenuVault charges per tenant, with no fee for each additional device. Every managed device in a licensed tenant is covered, whether you manage 50 or 50,000.

Price per device

€0

Device limit

None

Example: Pro costs €49 per month for 5,000 devices, about €0.01 per device. Double the fleet and the price stays the same.

## Free Pro for nonprofits worldwide

Eligible nonprofits receive Pro at no cost after individual verification. No payment card required.

[Apply for free Pro](https://www.tenuvault.com/nonprofits)

Try Pro free for 14 days without email or a card, or buy Pro or MSP now; your license key arrives by email. Both include CIS Benchmarks assessment and remediation for the certified benchmarks listed below.

Pay with the email address that should keep the key: it receives the key, the invoices and access to the customer portal. Any admin can enter the key in TenuVault, because it is tied to the Microsoft tenant, not to that address.

## Compare plans feature by feature

Compare implemented workflows and their supported scope.

On smaller screens, scroll the table horizontally to compare all three plans.

| Feature | Community Free | Pro | MSP |
| --- | --- | --- | --- |
| Plan |  |  |  |
| DPA (Data Privacy Agreement)Your tenant stays under your control. TenuVault Desktop connects directly to Microsoft from your device and does not give our team access to your tenant or backups. If you choose to share information during troubleshooting, a Data Processing Agreement is available to cover personal data handled as part of that support. | Not included | Included | Included |
| Direct support | Not included | Included | Included |
| Managed devicesPricing is per tenant, never per device. Every Intune managed device in a licensed tenant is covered at no extra cost. | Unlimited | Unlimited | Unlimited |
| Tenants | 1 | 2, for example production and test | 5 included, additional tenants billed in bands |
| Installations per tenant | Not applicable | Up to 5 | Up to 5 |
| Additional tenants | One tenant only | Two organization tenants included | 6–25: €15/month each; 26+: €10/month each. Annual: €150 and €100 each. |
| Free trial | No license key needed | 14 days | Pro trial available |
| Security and privacy |  |  |  |
| Runs locally with your own app registration | Included | Included | Included |
| No TenuVault web account for tenant operationsSign in to Microsoft from the desktop app with delegated permissions. | Included | Included | Included |
| Device backup encryption, recovery key and restore safety checks | Included | Included | Included |
| Backup |  |  |  |
| Manual backups | Included | Included | Included |
| Weekly scheduled backupsSchedules run while the desktop app can operate in an active user session; the computer must be awake. | Included | Included | Included |
| Backup download and drift CSV/JSON export | Included | Included | Included |
| Daily scheduled backups | Not included | Included | Included |
| Backups encrypted on this device | Included | Included | Included |
| Backups in your own Azure storage account | Not included | Included | Included |
| Backup history | Up to 30 days | 7 to 365 days, or forever | 7 to 365 days, or forever |
| Restore |  |  |  |
| Restore one item as a copy | Included | Included | Included |
| Restore several items at once | Not included | Included | Included |
| Replace items in place | Not included | Included | Included |
| Restore assignments | Not included | Included | Included |
| Copy items to other tenants when restoring | Not included | Not included | Included |
| Drift detection and audit |  |  |  |
| Compare backups and detect drift | Included | Included | Included |
| One click revert of drifted policies | Not included | Included | Included |
| Audit log | Not included | Included | Included |
| Cross tenant dashboard, including Check all for drift | Not included | Not included | Included |
| OpenIntuneBaseline |  |  |  |
| Deploy OpenIntuneBaseline as new policiesWindows, macOS, Windows 365 and BYOD app protection, using the latest OpenIntuneBaseline version. Each run records the exact version. | Included | Included | Included |
| Compare existing deployments and validate policies for drift | Included | Included | Included |
| Policy selection that matches your licensingBusiness Premium or Enterprise, Defender for Endpoint and Autopatch. | Included | Included | Included |
| Undo a deployment | Included | Included | Included |
| Update existing policies in place and fix driftA backup is taken first. | Not included | Included | Included |
| Deploy to several tenants at once | Not included | Not included | Included |
| Frameworks |  |  |  |
| Framework PDF reports and CSV/JSON exportsAvailable for every framework below. CIS reports need Pro or MSP, like CIS assessment. Reports show evaluated coverage and unknowns; they do not certify compliance. | Included | Included | Included |
| OpenIntuneBaseline | Included | Included | Included |
| Microsoft Security BaselinesImport the Settings Catalog policies of your selected baseline. | Included | Included | Included |
| UK NCSC Device Security Guidance configuration packsRead-only comparison with nine Windows Settings Catalog policies from the public NCSC configuration pack, pinned to a reviewed source version and used under Apache License 2.0. No endorsement by NCSC. | Included | Included | Included |
| NIST CSF 2.0 | Included | Included | Included |
| NIST SP 800-53 Rev. 5 | Included | Included | Included |
| NIST SP 800-171 Rev. 3 and Rev. 2 | Included | Included | Included |
| ISO/IEC 27001:2022 | Included | Included | Included |
| SOC 2 | Included | Included | Included |
| ASD Essential Eight | Included | Included | Included |
| BSI IT-Grundschutz | Included | Included | Included |
| UK MOD Def Stan 05-138 | Included | Included | Included |
| Cyber Essentials | Included | Included | Included |
| DISA STIGImport reviewed Settings Catalog mappings for a specific STIG. | Included | Included | Included |
| Custom baselines | Included | Included | Included |
| Customize OpenIntuneBaselineChoose latest main or a published platform release, customize its supported Settings Catalog policies, deploy through a reviewed change set and compare your version with newer OpenIntuneBaseline source versions. | Not included | Included | Included |
| Company baseline from a tenant snapshotTurn supported Settings Catalog policies from a tenant snapshot into a versioned baseline, edit it in the app, compare it with supported framework mappings and deploy through a reviewed change set. | Not included | Included | Included |
| CIS Benchmarks assessment and remediationTenuVault is CIS Benchmarks Certified for Assessment and Remediation. The certification covers only the CIS Microsoft Intune for Windows 11 Benchmark v5.0.0 (Level 1), CIS Microsoft Intune for Microsoft Defender Antivirus Benchmark v1.0.0 (Level 1 and Level 2) and CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 (Level 1 and Level 2). TenuVault remediates only the recommendations it assesses automatically through Intune policy settings. It lists Manual and not assessed recommendations with their CIS guidance for manual action. Remediation runs as a reviewed change set with a backup first. | Not included | Included | Included |
| Teams and tenants |  |  |  |
| Share the license with other admins in your tenant | Not included | On by default | Off by default |
| Back up several tenants at once with Backup Selected | Not included | Not included | Included |
| Assessment and reporting |  |  |  |
| Dashboard baseline scoresSaved OIB validations of selected deployed policies and supported native framework comparisons: gaps, assessment date and comparable trends. Scores show evaluated coverage and unknowns; they do not certify compliance. | Not included | Per-framework scores and coverage | Per-tenant scores and portfolio drill-down |
| Policy conflict and hygiene explorerFind candidate conflicting settings, duplicate profiles, missing targeting and broken references for admin review. | Not included | Included | Per-customer findings and fleet queue |
| Full white-label PDF reportsYour company name, logo and colors on every PDF report, with no TenuVault branding. Community reports keep the TenuVault design. | Not included | Included | Included |
| Controlled change and recovery |  |  |  |
| Dev → Prod settings syncTest OIB or supported framework settings in development, then promote selected settings between Pro’s two licensed organization tenants. Start with supported Settings Catalog policies, with a diff, target dependency review, production backup, confirmation and read-back verification. One-way and admin-started; assignments need separate review. | Not included | Reviewed promotion between two tenants | Reviewed promotion between licensed tenants |
| Baseline upgrades preserving customizationsFor supported Settings Catalog policies, review installed source, local changes and new upstream settings together; resolve conflicts before applying an upgrade. | Manual comparison | Included | Versioned customer overlays |
| Scheduled health review and opt-in notificationsReview stale backups on a schedule, using local or customer-controlled notification endpoints. | In-app backup status | Included | Portfolio triage and customer ownership |
| MSP customer operations |  |  |  |
| Versioned golden standards and customer overlays | Not included | Organization customizations | Reusable standards, parameters and exceptions |

Bulk and cross-tenant actions require MSP on the tenants involved. Pro promotion covers its two licensed organization tenants.

TenuVault is CIS Benchmarks Certified for Assessment and Remediation. The certification covers only the CIS Microsoft Intune for Windows 11 Benchmark v5.0.0 (Level 1), CIS Microsoft Intune for Microsoft Defender Antivirus Benchmark v1.0.0 (Level 1 and Level 2) and CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 (Level 1 and Level 2). TenuVault remediates only the recommendations it assesses automatically through Intune policy settings. It lists Manual and not assessed recommendations with their CIS guidance for manual action. CIS, CIS Benchmarks and CIS Controls are trademarks of the Center for Internet Security, Inc.

## Billing questions

### Q: Do you charge per device?

A: 

No. Every plan covers an unlimited number of managed devices. Community is free for one tenant, Pro is a flat price for two tenants and MSP is priced by tenant. Adding devices to a licensed tenant never changes your price.

### Q: Can Pro sync settings from development to production?

A: 

Yes. Pro supports reviewed promotion between its two included organization tenants. Test selected OIB or supported framework settings in development, review the diff and dependencies, back up production, then approve and verify the promotion. It starts with supported Settings Catalog policies.

### Q: Which CIS Benchmarks does TenuVault support?

A: 

TenuVault is CIS Benchmarks Certified for Assessment and Remediation. The certification covers only the CIS Microsoft Intune for Windows 11 Benchmark v5.0.0 (Level 1), CIS Microsoft Intune for Microsoft Defender Antivirus Benchmark v1.0.0 (Level 1 and Level 2) and CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 (Level 1 and Level 2). TenuVault remediates only the recommendations it assesses automatically through Intune policy settings. It lists Manual and not assessed recommendations with their CIS guidance for manual action. CIS assessment, remediation and CIS reports are part of Pro and MSP. Framework PDF, CSV and JSON reports for every other framework are included in Community.

### Q: How does the free trial work?

A: 

Download TenuVault and connect a new tenant. Pro starts automatically, without email or a card. Afterwards, keep using TenuVault free on Community with one tenant. Extend once in the app. Optional setup and reminder emails can be stopped at any time.

### Q: Can we pay by invoice instead of by card?

A: 

Yes, for yearly Pro and MSP plans. [Get a quote](https://www.tenuvault.com/quote): enter your company details and the PDF quote for your approval process downloads at once. Or [email support@tenuvault.com](mailto:support@tenuvault.com?subject=TenuVault%20Desktop%20invoice%20or%20quote%20request). Once you order, you receive an invoice from Ugurlabs UG, the company behind TenuVault, payable by bank transfer. To evaluate first, start the [14 day trial](https://www.tenuvault.com/trial?src=pricing), no credit card needed.

### Q: How do I cancel or change my plan?

A: 

Manage invoices, payment details and your subscription in the [customer portal](https://polar.sh/ugurlabs/portal). If you pay by invoice, email [support@tenuvault.com](mailto:support@tenuvault.com) instead. When a subscription ends, the app falls back to Community; stored backups are retained and Community limits apply.

### Q: What happens when a subscription ends?

A: 

The app falls back to Community. Your backups remain in their storage location; access follows Community tenant and storage limits. Paid recovery and Azure features require an active subscription.

### Q: How does the MSP plan count tenants?

A: 

The new offer includes 5 active tenant slots for €99 per month or €990 per year. Additional tenants 6–25 cost €15 per month each (€150 per year); tenant 26 onwards costs €10 per month each (€100 per year). Each rate applies only within its band. Choose your total tenant slots at checkout. Existing MSP subscriptions use their current billing model; manage them in the [customer portal](https://polar.sh/ugurlabs/portal).

### Q: Which email address should I use at checkout?

A: 

One that should own billing and keep the key, such as a shared IT or finance mailbox. The key, the invoices and the [customer portal](https://polar.sh/ugurlabs/portal) belong to that address. Who enters the key in TenuVault does not matter: it is tied to the Microsoft tenant signed in to the app, so a different admin can activate it.

### Q: Can my whole team use one Pro license?

A: 

Yes. A Pro license is shared with the key holder's tenant by default, so other admins in that tenant only sign in. MSP keys share with a customer tenant only when you turn it on.

### Q: How many computers can use one license?

A: 

Up to 5 installations of the desktop app per licensed tenant. This counts the admin computers running TenuVault, not the devices you manage in Intune, which are unlimited. Deactivate an installation from the License page to free its slot. An installation that has not checked its license for 30 days may be released automatically when a new installation of the tenant needs its slot.

### Q: What happens when I am offline?

A: 

The app checks its license every few hours. After a successful check it keeps working offline for 14 days.

## Take your first backup today

Install, run the setup script, sign in. Your first backup is a few minutes away.

[Download for Windows](https://www.tenuvault.com/download/windows)[![Get it from Microsoft](https://www.tenuvault.com/_next/image?url=%2Fdesktop%2Fmicrosoft-store-badge.png&w=1920&q=75)](https://apps.microsoft.com/detail/xpfp6qq47l0gdk?cid=website-cta)

[Download for Mac](https://www.tenuvault.com/download/mac-arm64)

For Apple silicon Macs.Intel Mac? [Get the Intel build](https://www.tenuvault.com/download/mac-x64)

Free for one tenant, OpenIntuneBaseline included. [Try Pro free for 14 days](https://www.tenuvault.com/trial?src=cta), no card needed.

[Book a 30-minute demo](https://cal.com/ugur-koc/tenuvault-demo)[Read the docs](https://docs.tenuvault.com)