Skip to content

One contract for every team in your org

One contract, one invoice, one shared credit pool. Separate workspaces with role-based access keep finance in view while each team's work stays their own.
What you get

Built for the way enterprise teams actually work

Run multiple teams under one contract

Add a new product line, region, or integration team without negotiating a new contract. Each team works in its own workspace with Owner, Editor, and Viewer roles. Brand teams lock templates so other teams edit within the guidelines, maintaining brand consistency at scale.

Per-team usage attribution

Every credit traces back to the team that consumed it, giving finance a clear per-team breakdown to reconcile against one shared invoice.

Controls your security team approves

SOC 2 Type 2 controls, GDPR-compliant data handling, and identity controls scoped to your IdP.

Onboarding & support

Billing & team workspaces

Contract

Primary team owns the contract

Subsidiary teams link to the primary team and consume credits from the shared allocation. Sales sets up the linking during onboarding and manages team additions over time.

Billing

One invoice, your AP system

Invoices flow through Stripe. For other procurement systems, contact your account team during contract setup.

Reporting

Per-team consumption breakdown

Finance can attribute spend to a specific product line, region, or integration, with usage broken out by team and time period today.

Access

Separate workspaces, controlled access

Each team works in its own workspace with role-based access, so Finance sees spend across the org while teams keep their own work separate.

Built to scale

No surprises in your security review

  • Workspaces, projects, and brand assets are scoped to the team that owns them. Members of one team workspace cannot see another team's projects. Cross-team sharing is opt-in and controlled by Owners.

  • Sign in via Google, Apple, Facebook, or email and password. For organizations using Google Workspace, domain-restricted login limits workspace access to your corporate accounts.

  • SOC 2 Type 2 certified, with the most recent report from April 2026. GDPR-compliant data handling. DPA available on request for enterprise customers.

Workspace data isolation
Trust & Security

Trusted by businesses worldwide

Photoroom meets SOC 2 Type 2 standards for its API and is fully GDPR-compliant, ensuring strong security, availability, and data privacy.

Frequently asked questions

Is Photoroom SOC 2 certified?

Ye, SOC 2 Type 2 certified (API scope). The most recent report is from April 2026. Sub-processor list, DPA, incident response process, and encryption posture are available at trust.photoroom.com.

For multi-team Enterprise accounts, can we control which team sees what data?

Yes at the team workspace level. Workspaces, projects, and brand assets are scoped to the team that owns them, and members of one team cannot see another team's projects. Folder-level access control within a single workspace is a known gap for multi-business-unit organizations. If this affects how your teams need to operate, raise it with your account team so it factors into prioritization.

How is credit consumption tracked by API key or team?

Per-team consumption reporting is available today, broken out by team and time period. Per-API-key and per-endpoint breakdowns are in development, alongside a self-serve usage dashboard for Enterprise customers.

How are Photoroom API keys rotated or revoked?

API keys have unlimited validity by default, and new keys can be created at any time. Key revocation and rotation are handled through your account team on request. Automated rotation is on the roadmap.

What audit logs does Photoroom provide?

API access logs are retained for one year and operation logs for fifteen days. For compliance reviews requiring specific log artifacts, raise the request with your account team.

Does Photoroom support SSO with Okta or other enterprise identity providers?

Photoroom currently supports SSO with Google. If SSO matters for your rollout, flag it with your account team so it can factor into prioritization.

Does Photoroom support multi-factor authentication (MFA)?

Native MFA isn't part of the platform today. If your organization uses Google Workspace, MFA is enforced on your side via Google Workspace settings. Once SAML SSO ships, MFA is enforced through your identity provider.

Start selling at first sight

Get listing-ready product visuals in seconds.