Tool profile
Torii: cost, fit and limits
Torii is a SaaS management platform made by Torii Labs Ltd. that discovers applications, manages contracts and renewals, automates joiner and leaver tasks, and adds modules for identity governance and AI management for IT teams.
What to know first
Torii splits its offer into three modules, SaaS Management, Identity Governance and AI Management, and publishes no price for any. The AI Management module is the unusual part: it discovers AI apps and projects, tracks token consumption and reports AI spend by department. The security page states SOC 2 Type II, while the privacy notice lists processing in the United States, Israel, Canada and other places.
Torii at a glance
| Maker | Torii Labs Ltd. (US subsidiary Torii Software Inc.), Not stated on the vendor pages |
|---|---|
| Free plan | No |
| Entry price | Quote only |
| API access | Yes |
| Category | Best AI SaaS Management Software in 2026, rank 2 of 11 |
| Website | toriihq.com |
Who Torii is best for
IT teams that need AI spend by department
AI Management reports token consumption, AI usage and spend by department and adoption rates, so an IT lead can show which teams use which AI tools and what they cost.
Companies with frequent joiners and leavers
Employee lifecycle automation covers joiners, movers and leavers, and the identity module adds certifications and access reviews, which suits teams with regular headcount changes.
Finance teams that connect expense systems
Torii lists expense and contract integrations, including Ramp and Xero, so renewal forecasting can draw on spend data instead of manual spreadsheets.
Torii plans and pricing
| Plan | Price | What it includes |
|---|---|---|
| SaaS Management Platform (SMP) | Not published | App discovery, license and renewal workflows, expense and contract integrations, renewal forecasting and benchmarks, and license optimization insights. |
| Identity Governance (IGA) | Not published | Identity discovery, access governance, automated certifications, app requests and reviews, and identity lifecycle automation. Pricing is by quote. |
| AI Management | Not published | AI discovery, governance and spend, including vibe-coded AI app discovery, token consumption tracking, AI adoption rates and ROI reporting. |
Checked November 2026.
What Torii does
- SaaS discovery and shadow IT detection
- Torii surfaces applications in use across the company and links them to contracts and owners. The pricing page places discovery and visibility at the base of the SaaS Management module.
- Contract and renewal management
- Renewal forecasting, benchmarks and license optimization insights sit in the SMP module, with expense and contract integrations feeding the dates and amounts. The pages do not say how many renewal sources can be connected at once.
- Token consumption tracking
- The AI Management module tracks token consumption and AI usage by department, which gives finance a way to attribute AI costs to teams and not only to a vendor invoice.
- Employee lifecycle automation
- Automated workflows handle joiners, movers and leavers, and the identity module adds automated certifications. The site also lists non-human identity management as its own menu item.
- Agentic governance
- The site lists Agentic Governance as a separate capability for governing AI agents. The pages we read describe it in a menu and headline, not in detail, so scope needs confirming in a demo.
How Torii handles your data
The security page states SOC 2 Type II and says Torii is hosted on AWS. The privacy notice says personal data is processed in the United States, Israel, Canada and other locations, and the US subsidiary states EU-U.S. Data Privacy Framework certification. Whether customer data trains AI models and how long data is retained after cancellation were not stated on the pages we read, so the vendor's policy was not checked for either point. A buyer with EU residency rules should ask for the subprocessor list and a data location commitment.
Where Torii falls short in practice
- Three products to scope. SaaS Management, Identity Governance and AI Management are separate products with separate Get Started buttons. A buyer who wants discovery and AI tracking must scope two modules and compare the total quote.
- Cross-border processing. The privacy notice lists the United States, Israel and Canada among processing locations. Teams with strict residency rules should ask which locations hold their data and which subprocessors touch it.
- No free plan shown. The pricing page shows no free plan or trial, so evaluation happens through a demo and a proof of concept. That slows a small team that wants to try the product against its own app list.
Works with
Alternatives to Torii
Torii: common questions
Does Torii track AI spend?
Yes. The AI Management module tracks token consumption, AI usage and spend by department, AI adoption rates and AI investment ROI. The pages do not say which AI providers are covered, so ask which billing sources and APIs feed the numbers before relying on the department split.
Are Torii modules sold separately?
The pricing page lists SaaS Management, Identity Governance and AI Management as separate modules, each with its own Get Started button and no price. Ask for one quote that combines the modules you need, and ask whether bundling lowers the cost.
Does Torii have an API?
The product menu links API Docs, so an API exists. The pages we read do not describe rate limits, export formats or which objects can be written, so check the docs for read and write coverage before planning an integration with your warehouse or ticketing tool.
Where does Torii process data?
The privacy notice says personal data is processed in the United States, Israel, Canada and other locations, and the security page says the product is hosted on AWS. No specific hosting region is stated, so request a written data location commitment if residency matters to you.
Which certifications does Torii state?
The security page states SOC 2 Type II, and the US subsidiary states EU-U.S. Data Privacy Framework certification. No ISO certification was stated on the pages we read. Ask for the current SOC 2 report and the audit period it covers.