New in Sketch: A major redesign, an all-new Inspector, and more Learn more

Skip Navigation

Enterprise plan

Last updated on 21 Nov 2025
3 min read

The Enterprise plan is designed for large organizations that need advanced security, centralized user management, and priority support. This article covers what’s included, how to get started, how billing works, and how to tell if it’s the best option for your team.

What is the Enterprise plan?

The Enterprise plan is our most comprehensive subscription tier. It includes everything in the Business plan, plus features designed for organizations with more complex security, compliance, and management needs.

With Enterprise, you get:

  • Advanced security and compliance options, including SCIM provisioning and BYOK (Bring Your Own Key)
  • Centralized user and seat management
  • A dedicated Customer Success Manager (CSM)
  • Procurement-friendly billing
  • Priority onboarding and ongoing support.

The Enterprise plan helps your organization stay secure, aligned, and efficient — especially when multiple teams or hundreds of users rely on Sketch for their day-to-day work.

How do I sign up?

To get started:

  1. Visit our pricing page
  2. Choose the Enterprise option
  3. Complete the request form with your organization’s details.

Someone from our team will then get in touch to discuss your requirements, help set up your Workspace, and guide you through onboarding. Your dedicated CSM will support you throughout the entire process.

How does billing work?

Enterprise billing runs on an annual invoice cycle. Here’s how it works:

  • Enterprise is a yearly commitment, billed annually.
  • You can add seats at any time. We’ll invoice you for the prorated amount as soon as they’re added.
  • Enterprise subscriptions cannot go below 25 seats.
  • We invoice you for every Editor seat in your contract, even if some seats remain unassigned.

Your Customer Success manager will help make sure your billing and procurement setup aligns with your internal processes.

Why should I consider the Enterprise plan?

Centralized management

Enterprise gives your organization a single subscription that covers your entire team. Admins can assign or remove seats as needed, manage who has access to the Mac app, and keep everything organized from one place. This makes it easier to stay in control of users and gives Workspace owners and admins clear visibility across your organization.

Better collaboration at scale

Enterprise is built for large, distributed teams that need space to collaborate freely and securely. Access permissions are simple to manage, and the tools included in the plan are designed to support organizations where many people need to review, comment, or stay aligned on design work.

SCIM provisioning

Automate user management through your identity provider (e.g. Okta, Google, Microsoft Entra ID). Add or remove users centrally and keep your Workspace in sync automatically. Learn more.

BYOK Encryption

BYOK lets you secure your Workspace data using your own encryption key managed in Amazon Web Services (AWS). Your organization maintains full control over how data is encrypted and who can access the keys, while Sketch manages the cloud infrastructure powering your Workspace. While BYOK is included in the plan, enabling it is completely optional.

When you enable BYOK, your Workspace is encrypted using:

  • An AWS KMS (Key Management Service) key
  • An AWS IAM Role that grants us permission to use that key.

Both the key and the IAM role are created in your own AWS account. Once they’re set up, you simply enter the corresponding ARNs (Amazon Resource Names) into Sketch to activate encryption for your Workspace.

Keep the following in mind if you enable BYOK:

  • You’ll need to migrate your documents to a new encrypted Workspace. Our team can handle the migration for you.
  • You can use multiple encryption keys per Workspace. We support more than one AWS KMS key if your organization needs it.
  • Encryption can’t be turned off once it’s enabled. The only way to disable it is to delete every document stored in that Workspace.
  • Files can only move between encrypted Workspaces. To transfer files between encrypted and non-encrypted Workspaces, you’ll need to download the documents and upload them to the Workspace you want to move them into.

You can only enable BYOK encryption in empty Workspaces. You can’t turn it on for a Workspace that already contains documents.