Buying Balsamiq for your organization

This page collects what procurement, finance, legal and security teams usually ask for when buying Balsamiq. Most of it is public, so you can download it right away.

• Quotes and payment
• Company and tax information
• Security
• Privacy and data location
• Contracts and terms
• Vendor forms and supplier portals

Quotes and payment

• Balsamiq Cloud quote: create a numbered PDF quote on our quote page, with your company's details and an optional PO or reference number. Prices on a quote are valid for 60 days. The quote is also a standard order form, governed by our terms, that you can sign for your records. When you're ready to buy, subscribe from your Space's billing page. If our prices change before your quote expires, email us with the quote number and we'll apply the quoted prices.
• Balsamiq for Desktop estimate: make one yourself on the license page, with "get an estimate" next to the Checkout button (how). Desktop licenses can be bought until December 31, 2026; an estimate is valid for 60 days, so one made before then can still be paid after that date.
• Payment: by credit or debit card, through Stripe. Starter and Teams can be billed monthly or yearly; Enterprise is billed yearly. We charge in US dollars: if your card statement shows more than our invoice, see finding past invoices.
• Invoices, purchase orders and Net 30: buy through a software reseller you already work with, such as SHI, Insight or SoftwareOne. They pay us by card and invoice you under your own terms. See buying through a reseller.
• Billing contact: on Teams and Enterprise, you can make someone in your purchasing team, or your reseller, the Space's Billing Admin. They receive the invoices and manage the subscription.
• More time to evaluate: if your trial ends while purchasing is under way, email us and we'll extend it.
• Balsamiq for Confluence and Jira are sold by Atlassian, through the Atlassian Marketplace: see the pricing for Balsamiq for Confluence Cloud and Balsamiq for Jira Cloud. Like most Atlassian Cloud apps, they count every user in your Confluence or Jira site, and support and updates are included while the subscription is active.

More details: Managing your Balsamiq Cloud subscription and the Balsamiq for Desktop FAQs.

Company and tax information

• W-9 form
• IRS Form 6166 (tax residency) for 2026, and previous years
• Declaration of no Permanent Establishment in India (2026)
• Sole source letter for Balsamiq Cloud, signed: who develops and sells Balsamiq Cloud, and how it's sold
• Section 889: we sign the attestation form; send it to support@balsamiq.com.
• Government vendor IDs (CAGE, SAM.gov): we don't hold them. See our government FAQs.

Security

• SOC 2 Type II: request our report and pen test in the Balsamiq Trust Center, with your work email.
• Security answers: our security FAQs, and ready-made VSAQ answers for Balsamiq Cloud and for Balsamiq for Confluence and Jira Cloud.
• Custom security questionnaires: we complete them for Balsamiq Cloud Enterprise customers, and for prospects who tell us they're buying Enterprise and for how many editors: email us. Everyone else can find the answers in the Trust Center and the FAQs.
• Firewalls and proxies: the domains to allow are in Balsamiq Cloud network requirements.
• Single sign-on: SAML single sign-on is available on the Enterprise plan. See SAML single sign-on.
• AI: which AI features we offer and how customer data is handled (it's never used to train AI models): see AI and privacy.
• Accessibility: our VPAT.

Privacy and data location

• Data Processing Agreement: our DPA is part of our terms and applies to every customer. Here's a copy countersigned by Balsamiq (PDF). If your process needs it signed by both parties, add your signature; you don't need to send it back.
• Subprocessors: listed on our subprocessors page. EU data transfers are covered by the Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.
• DORA: our DORA Addendum.
• Data location: Balsamiq Cloud project files are stored in the US by default; on Enterprise, you can choose to store them in the EU (Ireland) instead, see data residency. Balsamiq for Desktop stores your files on your own computer. For details, and for Confluence and Jira, see where customer data is stored.

Contracts and terms

We use the same terms for every customer:

• Terms of Service, and the EULA for Balsamiq for Desktop
• Privacy Policy
• Service Level Agreement for Enterprise: 99.9% uptime
• DPA, as above

We don't sign custom contracts, changes to our terms, or the terms on purchase orders. If your process needs an order form on file, the Balsamiq Cloud quote is also a standard one: it says our terms apply, and you can sign it for your records. We don't sign it in return. For Balsamiq Cloud Enterprise customers, prospects who tell us they're buying Enterprise, and customers of our Confluence or Jira apps on Data Center or with 500+ users, we can review a mutual NDA: email us.

Vendor forms and supplier portals

• Vendor and supplier forms: send yours to support@balsamiq.com, and we'll answer its questions by email, so you can copy the answers into your form or system.
• Supplier portals: we don't register in customer portals. Many portals let you add a supplier yourself: use the information on this page, with support@balsamiq.com as our contact. We don't act on automated notifications sent to that address.
• We send everything by email, never by post or fax.

Need something that isn't here? Email us.