Appsmith pricing: users, permissions, and hosting costs

Count everyone who needs the internal app, then check which permission and hosting requirements change the plan.

Kartik Deshpande··6 min read

One developer builds the order-exception app, but four colleagues need to open it every morning. Appsmith pricing counts the people who belong to the instance, including those who only use the app. For a viewer-heavy team, the first budgeting step is therefore a complete roster rather than a count of developers.

Consider Free when its capacity and standard access model cover the job. Evaluate Business when you need more specific permissions and operational evidence. Obtain an Enterprise proposal when corporate identity or support requirements call for it. If your existing app already meets those needs, a lower advertised seat price alone may not justify rebuilding it.

What the subscription provides

Appsmith is an internal application builder. Its data connection documentation describes connecting databases and APIs, creating queries, and displaying their results through interface widgets. A datasource holds the connection configuration; a query performs a particular request. Your team still decides what data the application can request and what the resulting screen means.

A governed application needs evidence behind those decisions. For an order-exception page, that means a clear rule for which orders qualify, source identifiers that let staff investigate a result, and permission checks that limit access. A working table on a screen is only part of the deliverable.

Kartik Deshpande prepared this guide from official documentation checked October 20, 2026. The cost examples and acceptance exercise are hypothetical, with no claim of firsthand testing. For a direct product decision, the Appsmith versus Retool comparison examines the same kind of internal workflow.

Published plans and the requirements that change them

PlanPublished USD priceScope to check
Free$0Up to 5 cloud users; three standard roles
Business$15 per user per monthUp to 99 users; custom access controls, audit logs
Enterprise$2,500 per month for 100 usersSAML/OIDC, SCIM, dedicated support and SLAs

The pricing FAQ defines users as workspace members in the instance. Builders have no extra developer surcharge, and membership at any point in a billing cycle incurs the full month. Business bills monthly; Enterprise terms are agreed separately. Confirm the account’s currency, taxes, and contract before purchasing.

Calculate twelve months for the same five people

Use a stable roster of one builder and four internal users, with one read-only application. If Free meets every required control, its subscription cost is zero. Business is 5 × $15 × 12 = $900 over twelve months. This annualization does not assume an annual-payment discount, implementation services, or additional infrastructure.

The published Enterprise package annualizes to $30,000 before add-ons and taxes. It covers a much larger stated user allowance. Do not divide that package price by 100 and buy five hypothetical seats at the result. If Enterprise-only requirements apply to this small team, its actual commercial offer needs confirmation.

Keep development, source database costs, identity administration, and ongoing maintenance outside the seat arithmetic. A contractor invited during the month may also affect the bill. When comparing a product that charges builders and viewers differently, preserve the same roster; the Retool pricing guide explains that separate calculation.

Three parts of the application budget
Membership
Everyone added to the instance
Controls
Roles, identity, audit evidence
Operation
Hosting, updates, restore tests
The subscription is measurable before the implementation and operating effort are fully known.

Separate login, application access, and data access

Single sign-on establishes who signed in. Application permissions determine what that person can use or change inside Appsmith. The database or API also needs its own authorization boundary. These controls answer different questions, so choosing an identity provider does not finish the access design.

Appsmith’s granular access control documentation describes permissions across resources including workspaces, applications, and queries. Use that model to write a short access specification: the builder can edit the app, operations staff can use it, and the reviewer can inspect permitted evidence. Check each resource rather than granting a broad role just to make the screen load.

Appsmith documents encrypted datasource credentials. That protects connection secrets, but it does not automatically make a broad database account appropriate for every user. For this read-only task, use a source account or API whose permissions prohibit writes. If staff need different rows, enforce that distinction in a trusted backend authorization path, not only a visible filter.

The audit log documentation identifies events and actor information available for investigation. Define which events you need and confirm their coverage, retention, and retrieval. Do not assume an application audit log records every source-database read or provides a complete financial transaction history.

Try one read-only order-exception task before choosing the plan

Create an authorized test dataset with three orders. Order A has a past due date and is unshipped. Order B has a future due date and is unshipped. Order C has a past due date but is shipped. Include a stable order ID, due date, shipment status, and source update time. Define an exception as unshipped with a due date before the agreed evaluation date.

Connect the restricted datasource, create the query, and bind its output to a table showing those fields. The expected result is Order A only. Open it as an ordinary operations user and verify that the person can inspect the evidence without editing the app or gaining source write access. Use the same roles and data in each plan you evaluate.

Change Order A’s status in the test source through its authorized owner, then reload the app. It should disappear once the updated source result is returned. Next, revoke a test user’s application access and verify denial. If row restrictions are required, repeat with a record the user must not receive. Record the configuration and observed result; this article has not run those tests.

Self-hosting adds an operating responsibility

Appsmith publishes self-hosting instructions for running and managing an instance. Its free Community offering and paid editions need to be distinguished when selecting controls. A server you operate does not remove the commercial terms for paid features, and a zero software fee does not make infrastructure free.

Estimate compute, storage, backups, monitoring, network access, and the person responsible for upgrades. Ask who restores the instance during an incident and how often that restore is exercised. For cloud deployment, establish which responsibilities remain with your team, particularly the source database, app logic, and user lifecycle. Do not invent an infrastructure total before selecting an architecture.

An application export is only one part of migration

Appsmith’s current migration documentation supports JSON application export and import. Datasource connection configuration must be supplied at the destination. The imported app is separate from the original, with changes no longer synchronized. This is application portability within Appsmith, not a promise that another builder can run the file.

Restore the fixture in a permitted destination and configure credentials through its supported secret controls. Review roles, invitations, datasource scope, and identity settings separately. Run the same positive and denied-access cases before moving users. When changing platforms entirely, expect to rebuild bindings and permission configuration; the Budibase versus Appsmith guide covers that broader choice.

Name a billing owner as well as an application owner. Appsmith’s payment administration guide distinguishes organization billing access from workspace administration and provides a separate portal for self-hosted subscriptions. Record the account and renewal responsibility before the original builder leaves the project.

Where Permute fits when source definitions are the problem

Permute sells connected business data and custom applications. A relevant project could reconcile order identifiers and shipment definitions across permitted operational sources, then expose an exception view with supporting evidence. Start by agreeing what overdue means, which source owns shipment status, and how freshness should appear to the person reviewing the order.

Explore the data behind an internal application

Start with one permitted order sample and a rule your operations team needs to verify.

Confirm the application and data-access scope

This is not a claim that Permute imports Appsmith applications or provides a ready-made migration. Source access, app permissions, hosting scope, and any requested action need their own implementation review. Keep the proposed read-only workflow separate from future writes.

Count the complete roster and choose the lowest plan that passes the actual access requirements. Demonstrate the exception rule and its correction before expanding the app. Keep the operating budget visible alongside the subscription. If your existing tool already works, test whether improving the source data would solve the problem with less disruption.

Review one internal-app data problem

Bring the source records, access requirements, and exception your team needs to explain.

Questions about Appsmith plans and costs

Should viewers be included in the budget?

Yes. Build the roster from instance membership, not job titles or editing activity. Verify the membership report against the invoice, including temporary collaborators, before treating a developer-only estimate as complete.

Can five people use the Free cloud plan?

The published capacity covers that roster, but capacity alone does not establish suitability. Check the required roles, identity policy, and evidence needs. Repeat the access tests on the plan you intend to retain after any trial ends.

Does self-hosting eliminate the total operating cost?

No. Even with a free software edition, someone must fund and operate the infrastructure. Budget upgrades, backups, recovery, and source-system administration. Confirm licensing separately when paid capabilities are required.

Does an app export transfer its working database connection?

The documented import process requires destination datasource configuration. Plan a credential setup and access review, then rerun the fixture. Do not treat the exported app as a complete backup of source data, identity settings, or operational permissions.