Account & billing

EAM uses Thundera single sign-on. Plans and payment are managed centrally.

Sign-in

Sign in at /login with your Thundera account (auth.thundera.eu).
First sign-in provisions an EAM account and a default API token. Your plan and entitlements are synchronized from your Thundera account.
GET /api/v1/auth/me returns your user_id, email, name, role, plan_id and plan_name.

Roles

Role	Can
`user`	Everything on your own memories, tokens, backup, import, DREAM
`admin`	Also the `/system` page and `/admin/api/*` (users, companies, plans, tokens). With SSO this needs a Thundera system role (`system-super-admin`, `system-admin` or `system-support`).

Plans

Plans come from the central catalogue: auth.thundera.eu/api/v1/auth/billing/plans?app=eam. EAM proxies it at GET /api/plans (cached 60 s, stale copy if upstream is down, 503 if never fetched). Prices are in the catalogue; limits include the number of stored memories.

Billing

Subscribe, change card and view invoices at auth.thundera.eu/billing. Settings → Billing in EAM shows your current plan and the catalogue. In-app upgrade is not available yet.