Frequently Asked Questions

plainfra gives businesses operational clarity over their AWS infrastructure. Ask plain-English questions about your AWS environment and get instant answers. You also get automated weekly health reports covering security, cost optimisation, and infrastructure health — all without installing anything in your AWS account.

During signup, you deploy a CloudFormation template in your AWS account. This creates a read-only IAM role that plainfra uses to query your infrastructure. The entire process takes about 2 minutes and is done through your browser — no CLI tools, no agents to install, no credentials to share.

The IAM role is global and covers all AWS regions — you don't need to deploy anything per-region. On the Scout plan, plainfra works in a single region at a time (3 tool calls per question). On the Core plan, plainfra covers multiple regions in a single report and chat session. On Team and Enterprise plans, plainfra covers multiple regions across multiple AWS accounts (up to 5 on Team, up to 10 on Enterprise).

Yes, on the Team plan (up to 5 accounts) and Enterprise plan (up to 10 accounts). Each account gets its own CloudFormation stack and IAM role. Weekly reports can cover all connected accounts in a single combined report.

No. The IAM role is strictly read-only. It includes an explicit deny policy that blocks access to data contents (S3 objects, DynamoDB records, log events, secrets) and any mutating actions. plainfra can see that a resource exists and its configuration, but cannot read your application data or make changes. See our Security page for the full list of denied actions.

Conversation history is retained for 90 days and reports for 365 days, both encrypted at rest. Your infrastructure data and queries are never used to train AI models.

Delete the plainfra-ReadOnly CloudFormation stack from your AWS Console. Access is revoked immediately. Your account record and conversation history in plainfra can be deleted on request.

No. plainfra operates under a zero-data-retention policy — your prompts and responses are not stored beyond your active session and are never used for training.

The trial gives you 50,000 tokens over 48 hours with 1 AWS account connection. No credit card required. This lets you prove the connection works and explore your infrastructure before committing to a plan.

Your data is retained — you can upgrade to any paid plan later without losing your conversation history or account configuration. You won't be charged anything unless you explicitly choose a plan.

Tokens measure the AI processing used in your conversations and reports. A typical chat session uses 10,000–30,000 tokens. Your token allowance covers both input (your questions plus AWS API response data) and output (the AI's analysis). If you run out, you can purchase a one-time top-up of 1 million tokens for $25 — top-ups never expire.

• Core — $79/month. 2M tokens, 1 AWS account, weekly health report.
• Team — $179/month. 5M tokens, up to 5 AWS accounts, combined weekly report.
• Enterprise — $480/month. 10M tokens, up to 10 AWS accounts, custom reporting.

See the Pricing page for full details.

Anything about your AWS infrastructure in plain English. Common examples: "What security groups have unrestricted access?", "Why did my AWS bill spike last month?", "Show me all Lambda functions that haven't been invoked in 30 days", "Are there any unencrypted S3 buckets?". plainfra makes the AWS API calls and analyses the results for you.

Automated PDF reports delivered weekly with RED/AMBER/GREEN indicators across security, cost, and infrastructure health. Each finding includes specific resource details and actionable recommendations. You can deep-dive into any finding directly from the report via Report-to-Chat.

AWS is the primary integration, connected via the CloudFormation IAM role. plainfra also supports Datadog, Slack, and Sumo Logic for ecosystem visibility. Jira and GitHub issue creation from findings is on the roadmap.

Your API key is shown once during signup and in the welcome email. We store only the SHA-256 hash, so we can't recover the original. Contact support@triont.com and we'll issue a new key.

Email support@triont.com and we'll cancel your subscription immediately. You can also delete the CloudFormation stack from your AWS Console to revoke access at any time, independently of your billing status.