Questions, answered.

Anyone who changes the maps. Anyone who only looks, or checks their own steps, is free and unlimited on every plan, and so are guests on Team and Enterprise. The person on the warehouse floor never costs you a seat.

Each plan includes a monthly allowance of AI credits (Solo 200, Starter 600, Team 2,000, Enterprise 10,000); analysing a process uses 5 and a chat message 1. If a month's credits run out, AI pauses until the 1st and everything else keeps working. We never charge for extra AI use without asking.

Start the trial, then choose your plan any day in Account & billing. You pay by card, your receipt is emailed to you, and every invoice is on your billing page. Everything you’ve mapped stays.

Yes. Every Australian price includes GST.

Enterprise plans: annual invoicing with bank transfer. Self-serve tiers are paid by card, monthly or annual. Every invoice is a tax invoice with our ABN, as a PDF from your billing page.

Cancel any time, in the billing page. Your plan runs to the end of the period you've paid for. Export everything, any time, in one click. After your plan ends it stays read-only for 37 days, then is paused with export still open, and is deleted within 60 days (within 7 days if you ask in writing); the locked, encrypted backup copies are purged by 36 days after deletion. We confirm the deletion in writing.

Solo is an adviser's own workspace: you as the one editor, with 10 processes to build your methods and show clients how it works. Each client has its own workspace, and the client's organisation pays for it. In a client's workspace, an adviser who edits maps takes one of its editor seats on any plan. An adviser who only reviews costs nothing: on Team and Enterprise as a free guest, and on Starter (which has no guests) as a viewer, who reads, leaves notes and adds suggestions. To move a process from your Solo workspace into a client's, download it as a .bpmn file and import it there: the steps, lanes and branches come across, and the times and pain notes travel as notes on each step for you to put back as you review. One Entrilla login can belong to several client organisations; you switch between them from the chooser. Results go back to the client as a PowerPoint export or the CFO report PDF.

14 days, the full product at Team capability. The trial includes 150 AI credits and up to 5 processes. Your data survives if you subscribe. At day 14 an unpaid trial turns read-only. Nothing is charged. It stays visible and exportable for 37 days, then it's paused (you can still sign in and export), and it's deleted 60 days after the trial ends. On Starter and above, people can sign in with their Microsoft or Google account.

Pick a plan and carry on exactly where you are: nothing is lost and nothing is rebuilt. If you don't pick one: At day 14 an unpaid trial turns read-only. Nothing is charged. Everything stays visible and exportable for 37 days, then it's paused (you can still sign in and export), and it's deleted 60 days after the trial ends; the locked, encrypted backup copies are purged by 36 days after that.

Your data is held in secure locations in Australia and the United States. It never trains AI models. Each customer gets their own single-tenant instance — their own application and their own database. There is no shared database and no shared application: each customer's workspace is a separate deployment, so a fault in another customer's instance stays in theirs. Every provider we use, and its region, is listed on the security page under 09. The account service (app.entrilla.com) holds accounts, subscriptions and billing, never workflow content; counts (people, departments, workflows and AI use) do flow to it. Our infrastructure automation, which runs in the account service, can start, stop, restore and delete any instance, as any hosting operator can. The account service has no code path that reads instance content, and every action it takes is written to an audit log that can only be added to.

Inside the product, a five-level permission ladder controls who sees what, including who sees pay rates. Entrilla support sees inside your Entrilla only when one of your admins turns on “Let Entrilla support in”, for 1, 4, 24 or 72 hours, at viewer level unless they choose higher (never admin). Each start also needs our staff console’s two locks and a fresh code, and every start, refusal and end is logged. Everyone in your organisation sees a banner while it is on, and your admins see everything support opens. People, keys, sign-in settings, passwords and the export stay refused to support whatever the level.

Entrilla's admin console has two locks: Cloudflare Access, behind Entrilla's own Microsoft account and multi-factor authentication, then a 6-digit code from an authenticator app, asked again before anything destructive. Every console action is written to an audit log under the operator's name. Operator commands run over the hosting provider's SSH with a named login, not a shared account, and each one is written to the audit log with its full command line. The audit log can only be added to: no entry in it can be changed or deleted.

The AI never changes a live workflow on its own. It edits one only when a person in your organisation asks it to, saving a version first so the change can be put back, and its recommendations change nothing until someone accepts them. Workflow content is sent to Anthropic's API to answer each request, under Anthropic's commercial terms, and it never trains AI models. Anthropic may keep requests for a limited period under those terms. Answers come back to your instance, and Entrilla stores them only there. Your data is never used across customers.

TLS on every connection; encrypted at rest. Backups every 6 hours, encrypted with a key unique to your instance and locked against deletion for 30 days. Restore drill: weekly. Last passed 25 October 2026. A drill restores the newest backup of a live Entrilla workspace onto a separate machine, where it must decrypt and pass a full database integrity check.

One-click export of every workflow, anytime. After your plan ends, your instance stays read-only for 37 days, then is paused with export still open. It is deleted within 60 days of your plan ending (within 7 days on written request), and the locked, encrypted backup copies are purged by 36 days after deletion. We confirm the deletion in writing.

Writing down how a piece of work really gets done: each step in order, who does it, which system it uses, how long it takes, and where it waits. The result, a process map, shows the work so people can agree on it and change it.

A flowchart shows the order of steps and decisions. A process map adds who does each step, in which system, how long it takes and how often it runs. Entrilla shows the same steps as a flow, or in lanes by who does them or by system.

No. Process mining reads event logs from your systems. Process mapping writes down how people do the work, including the steps no system records. Entrilla maps processes; it needs no event logs.

No. Describe the work in plain words, or upload a whiteboard photo, a transcript or a document, and Entrilla drafts the map. If you already have BPMN 2.0 files, Entrilla imports them, up to 50 at a time, and exports BPMN 2.0 back.

Hands-on minutes × how often the step runs a year × your hourly rate for that role. A fix can never claim more than its step costs, and on a step nobody has timed it claims at most a quarter of the estimate. Only the people you choose see dollars. Hours freed, not cash.

Yes. With no rates entered, every figure shows in hours, on every plan. Add hourly rates by role and the people you choose see dollars as well.

The people who do the work. Each gets a check page on their phone, by link or QR code, and taps “Still runs this way” or “Something’s off”. Change a step and its sign-off drops until someone checks it again. Anyone who only looks, or checks their own steps, is free on every plan.

Each person has their own login. An admin invites them by email, and they open their check page on a phone or any browser. On Starter and above, people can sign in with their Microsoft or Google account instead. Colleagues at your company’s email domain can join on their own, as viewers, once an admin allows that domain.

How Entrilla groups your processes, usually by function: accounts, operations, sales. Sites and venues share a department rather than taking one each, so four shops that close up the same way sit in one operations department. Solo includes 1 department, Starter 2, and Team and Enterprise have no limit. An admin can limit a person to chosen departments.

No. Entrilla finds the step, prices it and, on the Team plan, gives three ways to fix it. Your people build the fix in the tools you choose and track it to shipped on the build board, also on the Team plan.

It gives you evidence to show: each procedure as written, who confirmed each step and when, what changed since, and the activity log. Your auditor decides whether you meet the standard; Entrilla keeps the record.

The step is marked “Changed since it was confirmed”, names who confirmed the earlier version, and waits for someone to confirm it again. If the text is put back exactly as it was, the sign-off comes back on its own.

Yes. The activity log comes out as activity.csv in the one-file export of everything, which the people who can see pay rates download on every plan. Each line says who did what, on which process, and when, in UTC.

Yes. An admin can lock a process so nobody edits it until an admin lifts the lock. Notes still work; confirmations wait until the lock is lifted. Both go in the activity log.

On the Team plan, invite them as a free guest to that one process. They read it, leave notes, answer questions and confirm steps, nothing else.

The AI never changes a live workflow on its own. It edits one only when a person in your organisation asks it to, saving a version first so the change can be put back, and its recommendations change nothing until someone accepts them.

It keeps the same record: each routine as written, who confirmed each step and when, and every change. Describe care routines by role, never by resident. Your auditor decides whether you meet the standard; Entrilla keeps the record.