Enterprise Procurement

While Typesense Cloud is optimized to be a self-service product that you can sign up for and use right away, we understand that some organizations might have custom onboarding needs and vendor diligence requirements as part of your internal processes.

This article is meant to give you helpful pointers to make this process efficient.

MSA & DPA

Here are links to commonly requested documents during procurement:

• Terms of Service (also our MSA): https://cloud.typesense.org/legal/terms

• Data Protection Agreement (DPA): https://cloud.typesense.org/legal/dpa

• Sub-Processor List: https://cloud.typesense.org/legal/sub_processors

• Privacy Policy: https://cloud.typesense.org/legal/privacy

Security Review

Typesense Cloud is architected with security as a foundational principle and is compliant with the following standards:

• SOC2 Type II, certified by an independent external auditor. 

• HIPAA, with a signed BAA

• PCI DSS, for processing credit card payments via Stripe

You'll find detailed information about our security and compliance efforts and our architecture here: https://cloud.typesense.org/security.

SOC2 Report

Given the additional costs involved with compliance and audits, we have chosen to bundle these costs with a support plan, instead of including it in the base cost of clusters. Our SOC2 Report is available for customers who intend to purchase the Business Support plan or above. Please reach out to us here with a written confirmation of which support plan you intend to purchase (after successful evaluation). We'll then send over an MNDA for e-signature, and then give you access to our SOC2 Report.

Penetration Tests

We engage independent security researchers to perform periodic Pen tests on our infrastructure (at least once a year at a minimum). These reports are verified and certified by an independent auditor as part of our SOC2 Type II audit process annually.

While we're unable to share the full Pen test report with customers due to the confidential nature of the report, we can share an excerpt of the executive summary section, with customers who intend to purchase the Business Support plan or above. Please reach out to us with your organization's full legal name, and a note stating which support plan you intend to purchase.

HIPAA Business Associate Agreement

If you need to send us healthcare data that is regulated by HIPAA, we can send you our BAA for e-signature for customers who intend to purchase the Business Support plan or above. Please reach out to us with your organization's full legal name, and a note stating which support plan you intend to purchase.

Custom Security Questionnaires

Our SOC2 Type II report covers most aspects that usually come up in custom security questionnaires. So we highly recommend that you use our SOC2 Report as the baseline to use for your evaluation.

If there are aspects not covered in our SOC2 Type II report, and you need us to fill out a custom security questionnaire to cover the delta, we can do that for customers who intend to purchase the Enterprise Support plan or above.

Architecture

Typesense Server is fully open source. You can review our source code here.

Typesense Cloud adds Managed Infrastructure, SSO, RBAC, an Admin UI, Low Latency Geo Distribution and Support on top of Typesense Server.

Every Typesense Cloud cluster you provision runs on dedicated single-tenant infrastructure, and there is no co-mingling of data.

You can pick the geo region(s) in which you want your data to reside in, from among these data center locations.

The Typesense Cloud Admin UI is the control plane, which runs on isolated infrastructure separate from your Typesense Cloud clusters which is the data plane.

You control the full life cycle of the data you send to Typesense, via your cluster's API.

SLAs

We offer different levels of critical production support SLAs based on the support tier you choose. Please refer to the table here to know more: https://cloud.typesense.org/support-plans.

This only applies to clusters that you've enabled High Availability for.

Pricing

Our pricing is fully public and is available here: https://cloud.typesense.org/pricing/calculator.

If you need help picking a configuration, this article walks you through how to estimate RAM and CPU based on your use-case.

If you still need additional help or just an extra set of eyes to validate your chosen configuration, please feel free to reach out to us with the following information and we can help:

• Number of documents (records)

• Number of fields per document

• Average number of characters per document

• Estimated number of searches per month

Discounts

We offer volume discounts when your annual spend is projected to be over $3,500 per month and you're able to prepay your annual projected usage in a single invoice. Please reach out to us with the cluster configuration(s) you have in mind, to learn more.

Currency

All our pricing is in US Dollars.

But you can still use international payment cards to pay for Typesense Cloud. Any currency conversion and associated fees from your local currency to USD, is automatically handled by your card-issuing bank.

Quotes

After choosing the configuration you need on our pricing page, you can copy the URL in the browser to share the configuration with the rest of your team. You can also print the page to a PDF to share it as a document.

If you need a formal quote with signature fields generated by us, we offer that as part of the Business Support plan or above. Please reach out to us with the cluster configuration(s) you have in mind to get this process started.

POs, Invoices & Bank Transfers

If you want to pay via a bank transfer and/or need us to process a PO and issue an invoice, we require you to be on our Business Support plan or above. In addition, the invoice amount should be the greater of the two:

• $10,000

• Your projected annual usage for your chosen cluster configurations

If we haven't already issued a quote as described above, and you want an invoice directly, please reach out to us and include the following information required to issue an invoice:

• Bill To Organization Name

• Bill To Address

• Organization Phone Number

• Billing Contact Full Name

• Billing Contact Email Address

• Email address to send the invoice to (if different from Billing Contact Email Address)

• Technical Contact Full Name

• Technical Contact Email Address

• Any additional information that needs to be mentioned on the invoice required for processing on your side (like a PO number)

• The amount of prepaid credits you'd like to purchase. (Amount should be over the threshold mentioned above).

• The cluster configuration(s) you need.

We issue NET30 invoices. But if you need to get going right away, we can also issue a Due on Receipt invoice, so you can initiate the payment on receipt and we can provision your account shortly after.

Alternatively, you can also add a Credit / Debit / P-Card to your Typesense Cloud account and use that to pay your invoices that our system will generate on a weekly basis, based on the cluster configuration(s) you had running in your account during the past week.

We only offer postpaid billing with a card on file. For payments via bank transfer, it's a prepaid model where you're essentially purchasing prepaid credits that we'll apply to your account on receiving payment, and then we'll deduct from that balance on a weekly basis, based on your actual usage.

Bank Transfer Instructions

All our invoices include detailed instructions on how to initiate the bank transfer.

If you're initiating the transfer from a US bank, you can use either ACH or Wire Transfer. If you're initiating the transfer from a bank outside the US, you must use a Wire Transfer.

Please be sure to enter the exact information you see in the transfer instructions into your bank's portal (including our company name, address, and our bank's address) when initiating the transaction, to prevent any delays in transfer.

Please include the invoice number in the memo field for the transfer, so we can track and attribute the transaction on our side.

Vendor Onboarding Forms

If you have a vendor portal that you need us to create an account in and fill out information, we can do that as part of the Business Support tier or above. Please reach out to us to get this process started.

Alternatively, here's our organization's information that you can use to create a profile in your vendor management portal:

Typesense, Inc
14090 Southwest Fwy
Suite 300
Sugar Land, TX 77478.
United States of America

We are incorporated as a Delaware C-Corporation.

W-9

Please reach out to us to get a copy of our W-9. You do not need any support plans for this.

Tax Documents from Non-US Jurisdictions

We are a US-based entity, and we're unable to fill out any tax forms outside of our domicile tax jurisdiction. We can share our IRS Form W-9 as proof of tax residency. Please reach out to us.

Bank Verification Documents

If you intend to pay via a bank transfer as described above, and you intend to purchase the Business Support tier or above, we can share a bank verification letter with you in case you need it. This document will validate our ownership of the bank account you'll be sending the funds to.

Insurance Documents

While we're legally required to only carry workers comp insurance, we also carry general liability, cyber liability and E&O insurance.

Please reach out to us to get a copy of our business insurance certificate. We require the intent to purchase a Business Support plan or above in order to provide access to these documents. Please mention this in your email.

Renewal

Typesense Cloud has a consumption-based pay-as-you-go billing model. So as long as you have active clusters in your account, and you either have an active payment method on file or prepaid credits in your account, you'll be charged on a weekly basis for your past week's usage.

If you purchased pre-paid credits, they will automatically roll over to the next term, until you explicitly terminate all clusters in your account to indicate that you've canceled your account.

If you purchased prepaid credits and you're about to run out, you'll receive an email indicating that your balance is running low. You can configure this notification threshold on your account page. At this point (or any time leading up to it), if you need to purchase additional prepaid credits, and you need to purchase via an order form / PO / invoice / bank transfer you can reach out to us to get the process started.

If you purchased prepaid credits and you've run out of prepaid credits faster than your original projections (which can happen if you scaled up to a higher cluster configuration than what you had originally planned for, mid-cycle), we can issue a fresh quote based on your recent usage and process an invoice for it.

As mentioned above, we only support this mode of invoice / bank transfer purchase for customers on the Business Support tier or above. Alternatively, you can also purchase prepaid credits using a credit/debit/p-card on our site directly. Or you can switch to a postpaid billing model by adding a credit/debit/p-card to your account on our site.

Cancellation

Terminating all running clusters in your account automatically cancels your account.

If you purchased prepaid credits, any unused credits in your account will expire after 2 years of inactivity. We are unable to refund unused credits.

Once your cluster is deleted, all data in it is permanently deleted.

Any backups of your cluster data will automatically be deleted after 3 days of cluster termination.

Data Portability

Typesense is designed to be used as a secondary data store. So you'll typically store the primary copy of your data in your primary database and sync a copy of it into Typesense.

So there is no lock-in of your data inside of Typesense - your primary DB will and should always have the primary version of the data you send to Typesense.

That said, we also provide APIs for you to export your collection schema, documents, synonyms, curation rules, stop words, etc.

A Note on "Intent to Purchase"

You'll notice that several documents mentioned in this article (like our SOC2 Report, BAA, and insurance certificates) are available to customers who intend to purchase a particular support plan.

We understand this can feel like a chicken-and-egg situation - your procurement or security team may need to review these documents before your organization can commit to a purchase.

To clarify what we mean:

• Stating your intent is not a binding commitment. It's simply a written note from you saying that if your evaluation is successful, you plan to purchase the specified support plan along with your cluster subscription.

• If your evaluation is unsuccessful, you owe us nothing. You're free to walk away at any point before you actually subscribe.

• Your review is protected by an MNDA. For documents like our SOC2 Report, we'll first send you a Mutual NDA for e-signature, so the review happens under confidentiality protections for both sides.

We use this intent-based approach (rather than requiring payment up front) precisely so that your diligence process can happen before any money changes hands, while still making sure the costs of compliance and audits are borne by the customers who need these documents, instead of being baked into everyone's cluster pricing.

What's Available at Each Support Tier, At a Glance

Additional Questions?

If you have additional questions not covered in this article, or in any of the articles in the side bar, or in our product documentation here, please reach out to us using this link.