Zero-configuration hosting for Next.js from the team that maintains it, with SOC 2, ISO 27001 and a HIPAA BAA on the self-serve Pro plan.
Vercel's docs call it the native Next.js platform: deploying is zero-configuration, and the pricing page lists ISR, image optimization and skew protection among its features. Pro is $20 a month per developer seat with a $20 usage credit, Flat Rate CDN for fixed delivery pricing, and spend management that can pause projects at a set amount. SOC 2 Type 2 and ISO 27001 are marked on every plan, and a HIPAA BAA is a $350 add-on on Pro.
Next.js with no configurationThe Next.js docs page says Next.js is maintained by Vercel and that deploying it to Vercel is zero-configuration; the pricing page lists ISR, image optimization and skew protection.Evidence: Next.js on Vercel docs and pricing page (2026-10-15)
A BAA without an enterprise contractPro teams can add a HIPAA BAA for $350 a month from billing settings; SOC 2 Type 2, ISO 27001 and PCI DSS are marked on every plan, with security collateral for Pro and Enterprise.Evidence: Pricing page and compliance docs (2026-10-15)
Fixed delivery pricingPro includes the lowest Flat Rate CDN tier (1 million CDN requests and 1 TB a month); paid tiers are fixed monthly prices, so a one-day traffic spike does not change the bill.Evidence: Flat Rate CDN docs (2026-10-15)
Best for
Teams building with Next.js who want the platform its maintainers design for, and compliance documents on a self-serve plan.
Good to know
Each developer who deploys is a $20 seat, Hobby is for non-commercial use only, and SAML SSO is a $300-a-month add-on.
How Vercel compares
Against 3 other products we reviewed in Frontend and app hosting: what you pay for with each, the five access facts, the plan limits we recorded and each review's bottom line. The note under the table says how each one was checked.
Vercel compared with Cloudflare Workers, Render, Netlify
Saves engineering timeZero-configuration hosting for Next.js from the team that maintains it, with SOC 2, ISO 27001 and a HIPAA BAA on the self-serve Pro plan.
Worth the priceA full-stack app platform for $5 a month per account, with no data transfer charges, free static asset requests and dashboard SSO on every plan.
Saves engineering timeManaged web services, Postgres and Key Value behind one workspace plan, with unlimited seats and audit logs from the $25 Pro plan.
Saves engineering timeDeploys, previews, functions, forms and a database in one credit balance, with unlimited team members on Pro for $20 a month.
Overall score
6.3
8.6Best
7.7
7.3
Free option
Free plan
Free plan
Free plan
Free plan
Card to start
–Not measured
–Not measured
–Not measured
–Not measured
Getting access
Self-serve
Self-serve
Self-serve
Self-serve
Starter priceCheapest paid plan
$20/mo
$5/mo
$25/mo
$9/mo
Pricing model
Seat + usage
Usage-based
Seat + usage
Tiered
Pricing page
Public prices
Public prices
Public prices
Public prices
Billing units
Developer seats, then metered usage after a $20 credit
Requests that run code and CPU time
Workspace plan and instances, then bandwidth and build minutes
Credits (bandwidth, requests, compute, deploys)
Free plan
Hobby: personal, non-commercial use only
100,000 requests/day; commercial use not addressed
Hobby: 1 member, 750 free instance hours; not for production
300 credits/mo, commercial use allowed
3 developers, 10M requests, 1 TB/mo
$80 on Pro, computed
$5.12 on Workers Paid, computed
$178.25 on Pro, computed
$155 on Pro, computed
Data transfer
1 TB in the included Flat Rate CDN tier; $20/mo tier to 50 TB
Not charged
25 GB on Pro, then $0.15/GB; 1 TB on Scale
20 credits per GB (about $0.13 at the Pro pack rate)
Seats for people who deploy
$20/mo each after the first
No per-member charge listed
Unlimited on Pro, no seat charge
Unlimited members on Pro
SAML SSO
$300/mo add-on on Pro
Dashboard SSO free on all plans
Scale ($499/mo)
Enterprise
Spend cap
Can pause production deployments at a budget
Budget alerts only; they do not pause usage
Spend limit for build minutes only; usage emails
Stops at your credits unless auto recharge is on
SOC 2 Type II and ISO 27001
Both
Both
Both (documents on Pro, under NDA)
Both
HIPAA BAA
$350/mo add-on on Pro
Not stated
Scale, with 20% added to usage
Enterprise add-on
Runtime logs, entry paid plan
1 day (30 with Observability Plus)
7 days (Logpush to export)
14 days (log streams to export)
7 days
Audit logs
Enterprise
All plans, kept 18 months
Pro (workspace), at least 90 days
Pro, 7-day history
Bottom line
From its public pages, Vercel is the compliance and Next.js choice here: SOC 2, ISO 27001 and a BAA on Pro, and zero-configuration Next.js. It scores lower on this rubric because every developer is a seat, Hobby is non-commercial and Pro keeps runtime logs for 1 day.
From its public pages, Cloudflare Workers costs the least here by a wide margin for traffic-heavy apps, with SSO and audit logs on every plan. Plan for budget alerts that notify rather than stop, and an adapter for Next.js.
From its public pages, Render suits teams that want services and databases managed together, with no seat charges and audit logs on Pro. Bandwidth is the cost to watch: 1 TB a month adds $146.25 on Pro.
From its public pages, Netlify suits teams with modest traffic: unlimited members on Pro, a free plan you may use commercially and spending that stops by default. Bandwidth is billed in credits, so data-heavy apps cost more here than on the other two.
Evidence: Vercel: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; Cloudflare Workers: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; Render: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; Netlify: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run. Prices in USD as listed, excluding tax. "–" means not recorded.
7 meters to estimate (CDN requests, data transfer, function invocations, active CPU, provisioned memory, origin transfer, build minutes); usage can be stopped at a set amount; usage rates listed as "starting at" and vary by region
Free tier
6.0 / 10, Good
1M CDN requests, 100 GB data transfer and 1M function invocations a month, personal, non-commercial use only, stops at its limits, never billed, 1 member
Price for 3 developers, 10M requests and 1 TB
5.5 / 10, Fair
$80/mo: Pro $20 with 1 developer seat, 2 more seats at $20, the $20 Flat Rate CDN tier for 10M requests; functions ($3.54) inside the $20 usage credit (computed); assumes the Flat Rate CDN tier is billed on top of the usage credit, and origin transfer and build minutes stay within the rest of the credit
Compliance documents
10.0 / 10, Excellent
own SOC 2 Type II, ISO 27001, reports available to self-serve customers, HIPAA BAA on a self-serve plan
Team seats and SSO
6.5 / 10, Good
$20 per deploying seat; SAML SSO as a paid add-on; free read-only access
Logs and audit trail
3.2 / 10, Fair
runtime logs 1 day on the entry paid plan, self-serve export or longer retention, audit logs on enterprise only
Review
Review from public pages
Written from Vercel's public pages (pricing, security or privacy, and docs) as read on Oct 15, 2026. We did not sign up, and no hands-on run is published yet.
What the public pages show
We read Vercel's pricing page and its docs on plans, Flat Rate CDN, CDN pricing, spend management, limits, fair use and compliance on Oct 15, 2026; we did not sign up for this review. The pricing page has three plans: Hobby (free), Pro ($20 a month) and Enterprise. Pro includes one developer seat and a $20 monthly usage credit; usage beyond the credit is billed per resource, and most rates are listed as "starting at" because they vary by region.
The docs fill in two things the pricing page only names. Flat Rate CDN replaces per-request and per-GB delivery charges with fixed tiers: the included tier covers 1 million CDN requests and 1 TB a month, and the $20, $100 and $300 tiers cover 10, 50 and 150 million requests. Spend management alerts at a budget ($200 by default) and can pause production deployments when it is reached; the docs say spend is checked periodically, so pausing is not instant.
The fair use guidelines define commercial use broadly: any deployment that brings financial gain to anyone involved, including a paid developer, needs Pro or Enterprise.
Strengths
Built for Next.js
The docs call Vercel the native Next.js platform, and the pricing page lists ISR, image optimization, skew protection and rolling releases.
vs Netlify: Netlify runs Next.js through the OpenNext adapter; Cloudflare recommends vinext, a Vite plugin in beta.
Compliance on a self-serve plan
SOC 2 Type 2, ISO 27001 and PCI DSS on every plan; a HIPAA BAA as a $350 add-on and security collateral on Pro.
vs Netlify: Netlify offers SOC 2 audit reports and HIPAA to Enterprise customers; Cloudflare’s trust pages do not mention a BAA.
A hard spending stop
Spend management can pause all production deployments when a budget is reached, and new teams start with a $200 budget alert.
Compared: Cloudflare’s budget alerts notify but do not pause usage.
Fixed-price CDN tiers
Flat Rate CDN turns requests and data transfer into fixed monthly tiers, and a one-day spike does not move the tier.
Free viewer seats
People who only look at deployments, analytics or previews get unlimited free Viewer seats on Pro.
Things to know
Hobby is non-commercial
The fair use guidelines restrict Hobby to personal, non-commercial use; a deployment that earns money for anyone involved needs Pro.
Workaround: Pro starts at $20 a month, with a 14-day trial.
Each developer is a seat
Pro includes one deploying seat and charges $20 a month for each additional developer. SAML SSO is a $300-a-month add-on, and audit logs are listed on Enterprise only.
Many meters, regional rates
Estimating a bill means CDN requests, data transfer, invocations, active CPU, memory, origin transfer and build minutes, and most rates are "starting at" figures that vary by region.
One day of runtime logs on Pro
Runtime logs are kept 1 day on Pro.
Workaround: Observability Plus ($1.20 per million events) extends them to 30 days, and drains export them.
Pricing reality
Pro is a $20 monthly platform fee with one developer seat and a $20 usage credit; extra developer seats are $20 each and viewers are free. Usage past the credit is billed per resource at regional rates, such as function invocations from $0.60 per million and active CPU from $0.128 an hour. Delivery is covered by Flat Rate CDN: 1 million requests and 1 TB are included, and the next tier is $20 for 10 million requests.
For our scenario we compute $80 a month: $20 Pro, 2 extra seats at $20 and the $20 Flat Rate CDN tier, with function usage ($3.54 at the lowest listed rates) inside the credit. Add-ons: SAML SSO $300, HIPAA BAA $350, password protection $20 per project.
Exit path
Vercel's Next.js docs say Next.js also works when self-hosting, and the Build Output API is a documented file-system specification for a Vercel deployment. Features billed as Vercel resources, such as ISR caching, image optimization, Blob and Flags, need equivalents on another host.
You want Next.js without an adapter, a hard spending stop and a self-serve HIPAA BAA.
Pick Cloudflare Workers when
Traffic or data volume drives your bill: Workers has no data transfer charge, and its paid plan is $5 a month per account.
Choose it if
You build with Next.js and want zero-configuration deploys.
You need SOC 2, ISO 27001 and a HIPAA BAA on a self-serve plan.
You want a hard stop on spend and fixed-price CDN tiers.
Look elsewhere if
You want to run a commercial project on a free plan.
Many developers deploy and seat costs matter more than framework features.
Bottom line
From its public pages, Vercel is the compliance and Next.js choice here: SOC 2, ISO 27001 and a BAA on Pro, and zero-configuration Next.js. It scores lower on this rubric because every developer is a seat, Hobby is non-commercial and Pro keeps runtime logs for 1 day.
Plan limits at a glance
Limit
As recorded
Billing units
Developer seats, then metered usage after a $20 credit
Free plan
Hobby: personal, non-commercial use only
3 developers, 10M requests, 1 TB/mo
$80 on Pro, computed
Data transfer
1 TB in the included Flat Rate CDN tier; $20/mo tier to 50 TB
Seats for people who deploy
$20/mo each after the first
SAML SSO
$300/mo add-on on Pro
Spend cap
Can pause production deployments at a budget
SOC 2 Type II and ISO 27001
Both
HIPAA BAA
$350/mo add-on on Pro
Runtime logs, entry paid plan
1 day (30 with Observability Plus)
Audit logs
Enterprise
Read from the vendor's public pages on Oct 15, 2026. No hands-on run is published yet. How we check
We have not published a sign-up run for Vercel yet. The access facts above were read from its sign-up and pricing pages on Oct 15, 2026.
We read the pricing, security and docs pages of three hosting platforms on the same day and scored them on the same six indicators. How each one bills, what 3 developers with 10 million requests and 1 TB a month cost, and who should pick which.