Read-only by default
AWS roles, GCP service accounts, DigitalOcean tokens — every integration is scoped to read, validated with a no-op call, and envelope-encrypted with KMS before it lands.
About securityMulti-cloud cost ledger Bring your cloud bills
Bring your cloud bills
to the same table.
Tovin.io is a cost ledger — one rolled-up, per-project view of your AWS, GCP, and DigitalOcean spend. Connect read-only credentials, map the messy spend, and review the exceptions weekly. No procurement, no migration, no credit card to start.
✓ Read-only credentials ✓ 90-day backfill on connect ✓ KMS-encrypted at rest
♥ First-class DO
AWSGCPDO
First-class cloud
DigitalOcean costs, first-class
From $0/moFeature
♥ Dry-run preview
tag:project = acme-prodaccount = 902341 → acme-prodname ~= ^ml-.* → internal-mlpreview · 4 matchesMapping rules with preview
Guide
acme-prod · AWSEC2 +18% over 24h
+$640customer-doBudget 80% reached
$711Anomaly alerts that name an owner
Field note
80% of $4,500$3,510
42% of $9,000$3,780
Budgets at 50 / 80 / 100 / 120%
Guide
End-of-month forecast
Glossary
untagged$1,840
untagged$612
acme-prod$402
internal-ml$298
Untagged spend, ranked
Glossary
♥ 3 clouds, one view
acme-prod$12,430
internal-ml$4,202
customer-do$890
unallocated$311
One ledger for every cloud
Glossary
tovin.iovsVantage
Tovin.io vs Vantage
Comparison
Why teams switch to tovin.io
90-day backfill on connect
Three months of provider history arrive before your first weekly review. No multi-week implementation period — and no procurement gauntlet to start.
See the weekly habitOne ledger for every cloud
AWS, GCP, and DigitalOcean projects roll up into a single account view — with the provider detail preserved underneath for audit.
What we mean by multi-cloudFree to start
The ledger is free while you prove the habit.
Tovin.io is free up to three thousand a month in tracked spend, then upgrades to fixed-price Team and Operator plans as the cost review becomes part of weekly operations.
Start freeFrequently asked
Do I need to grant write access to my cloud accounts?
No. Every supported integration uses read-only scopes: an AWS IAM role with an external ID, a GCP service account with billing/BigQuery read, and a DigitalOcean personal token with read-only permissions.
How does the free plan work?
The Free plan is permanent, not a trial. It carries the core ledger, mapping rules, budgets, anomaly detection, and 90-day backfill for teams tracking up to three thousand dollars a month in cloud spend.
What clouds are supported?
AWS Cost Explorer, GCP billing export to BigQuery, and DigitalOcean billing. DigitalOcean is a first-class cloud here — not an afterthought.
Can I see a sample report before connecting anything?
Yes. Explore the interactive sample report with fictional invoices, an explained difference, and project allocations. It illustrates our assisted reporting service and needs no account or cloud credentials. For help with your own numbers, see the $500 pilot.
Bring your cloud bills to the same table.
✓ Read-only credentials ✓ 90-day backfill ✓ KMS-encrypted at rest