Pricing
Priced on what you actually need
Tell us your situation and we'll give you a number on the first call, not after three.
Audit fees are separate, and they go to your auditor rather than to us.
Why there is no price on this page yet
Compliance pricing scales with things we would have to guess at from a web form: how many people you employ, how many frameworks you are carrying, and how much of your estate is genuinely in scope.
Publishing a number that assumes the wrong answer to those wastes your time and ours. So we ask, and we answer on the first call.
Included on every plan
The capabilities do not change between plans. What changes is scale.
The frameworks you need
Start with one. Add others as you enter new markets, reusing the evidence you already collect.
Automated evidence collection
Pulled from your connected systems on a schedule, timestamped and attributed to its source.
Continuous control monitoring
Tests run against your controls continuously, and failures arrive with the requirement they affect.
Every integration
Integrations are included on every plan. We do not charge per connected account or repository.
Policy management
Draft, version, publish, and collect acknowledgements, with the trail your auditor asks for.
Trust Center
A page that answers your buyers security questions without pulling you into every call.
Pricing questions
Audit fees are separate and go to your audit firm, not to us. They vary with scope, framework, and firm. We can introduce you to firms, but we do not set or take a share of their fees.
Yes. Most companies start with the framework a customer asked for and add others as they enter new markets. Evidence collected for the first one carries into the next.
No. Integrations are included on every plan, however many cloud accounts, repositories, or identity providers you connect.
Find out what your compliance program actually looks like
Thirty minutes, your real systems, no slideware. We'll show you what we'd automate first, and what you don't need us for.