Three tiers.
One standard:
audit-ready, always.
Transparent per-user pricing. Minimum headcounts that keep engagements senior. A one-time setup fee that covers the architectural lift. No hidden licence markups — ever.
Start with the Scale Readiness Assessment.
Evaluate whether your technology, security, compliance, and operational foundations are ready to support the next stage of growth. A structured deep-dive that surfaces what's holding you back — and what to fix first.
Scale Readiness Report & 90-Day Roadmap
A prioritized action plan showing exactly where your foundations need to strengthen — and the sequence to get there without slowing the business down.
Three tiers. Priced to qualify.
Minimum user floors filter out low-value engagements so every client gets senior-led delivery. All pricing is per user, per month (excl. VAT). Setup fees cover the architectural lift of onboarding your Apple fleet, Okta directory, and HRIS integrations.
Licences for third-party tools (e.g. Iru, Jamf, Okta, Huntress) are not included — these must be supplied by you (BYOL). We assist in procuring them through our network where possible.
Foundation
Seed-stage scale-ups needing Apple device control and automated patching.
Minimum 30 users · Min. €2,550/mo
+ €3,500 one-time setup fee
Identity & Lifecycle
Fast-growing teams needing automated HR-driven onboarding and offboarding.
Minimum 30 users · Min. €4,050/mo
+ €6,500 one-time setup fee
Audit-Ready IT
Scale-ups facing ISO 27001 audits, NIS2 scrutiny, or enterprise due diligence.
Minimum 30 users · Min. €5,550/mo
+ €9,500 one-time setup fee
Your stack, your assets.
Skales operates on a strict Bring Your Own Licence (BYOL) framework. We don't act as a middleman for software billing, hide markups in licence costs, or hold your IT infrastructure hostage.
Direct supplier relationships
Built on 20 years of experience, trusted relationships, and short communication lines, we match your environment with the ideal tech stack. We connect you directly to authorized Dutch suppliers—including Apple hardware suppliers and Google Workspace resellers—at standard market rates. No reseller markups, just direct connections.
Transparent billing
You pay the technology vendors directly. Our invoice covers management only. What you see on this page is what you pay us.
Total sovereignty
If you ever outgrow Skales, simply revoke admin access. Your tenants, data and configurations remain entirely yours. No painful migrations, no lock-in.
Work outside the retainer
Complex migrations, M&A integrations, custom HRIS automation, and tenant-to-tenant moves are scoped and billed separately — protecting your monthly margin and our engineering capacity.
Typical scopes: Google Workspace → M365 migrations · Merging Okta directories · Custom HRIS webhook automation
Min. 4-hour blocks
Retainer clients get scheduling priority. Non-retaining clients are subject to engineering availability.
App Pricing Strategy
When clients require automated onboarding for tools outside the Core 5 (e.g., GitHub, HubSpot, Zoom), there are two extension pathways:
The Flexible A La Carte Add-on
Recommended for Low Volume
Best for clients adding only one or two enterprise platforms to their day-one automation flow.
The Birthright Expansion Pack
Recommended for High Growth
If a client requires 4 or more additional apps, they are automatically transitioned into a flat-rate expansion bundle. This eliminates micro-billing friction while driving significant recurring revenue growth.
Please Note: Any application that does not natively support SAML 2.0 or SCIM provisioning on the client's current license tier is strictly excluded from automated lifecycles. We will not manually create, modify, or delete accounts for unsupported software tiers. Manual remediation remains the responsibility of the client's respective department heads.
What's in each tier.
| Capability | Tier 1 | Tier 2 | Tier 3 |
|---|---|---|---|
| Apple MDM & zero-touch deployment | ✓ | ✓ | ✓ |
| Google Workspace hardening (one-time, at onboarding) | ✓ | ✓ | ✓ |
| Continuous Google Workspace administration | — | ✓ | ✓ |
| OS patch management | ✓ | ✓ | ✓ |
| Basic IT asset management (overview of computers in use) | ✓ | ✓ | ✓ |
| Email/ticket support · next business day | ✓ | ✓ | ✓ |
| * EDR rollout, configuration and management (Huntress / Iru) — detection and alerting; incident response by your own team or MSSP | — | ✓ | ✓ |
| Application patch management | — | ✓ | ✓ |
| Identity Provider (Okta / JumpCloud) | — | ✓ | ✓ |
| SSO & phishing-resistant MFA | — | ✓ | ✓ |
| HRIS-triggered onboarding & offboarding | — | ✓ | ✓ |
| Role-based access provisioning | — | ✓ | ✓ |
| Named engineer · Slack support | — | ✓ | ✓ |
| Identity Governance (IGA) & access reviews | — | — | ✓ |
| Shadow IT discovery & risk scoring | — | — | ✓ |
| Least privilege & just-in-time elevation | — | — | ✓ |
| Compliance evidence pack (NIS2 / SOC2 / ISO 27001) | — | — | ✓ |
| Regulator & auditor liaison | — | — | ✓ |
| SSO implementation of core apps | — | 5 | 10 |
Four steps to audit-ready.
Intro Call
60 minutes. We listen, ask the hard questions, and send a written assessment within a week.
Scale Readiness Assessment
€3,500 flat. Deep-dive on infrastructure, security, compliance and governance.
Implementation
Phased rollout using your own licences. Production-quality from day one — no multi-month POCs.
Ongoing Management
Named engineers, monthly reviews, quarterly board updates. Continuous evidence, not an annual scramble.