Pricing
Published pricing
Start with the AI Act and GDPR baseline, then scale into ISO/IEC 42001, NIST AI RMF, DORA, UK GDPR, and CCPA mappings as your governance programme matures.
Free
For evaluation
1 system · 1 user
- IncludedRisk assessment
- IncludedCompliance checklists
- IncludedCalendar only
Starter
For small deployers
5 systems · 5 users
- Included5 documents/system
- Included2 integrations
- IncludedEU AI Act + EU GDPR + UK GDPR + CCPA
- IncludedImmutable Audit Log
- IncludedScope exclusions (exclude tables/paths)
- IncludedGoogle OAuth
- IncludedEmail support
- IncludedAnswer Library & AI Questionnaire Autofill (RAG)
Business
Cross-framework compliance
50 systems · 25 users
- Included10 documents/system
- Included10 integrations (Slack, Teams, Jira, Webhooks)
- IncludedAll frameworks except DORA and NIS2
- IncludedShadow AI & Codebase Discovery (Syft)
- IncludedCloud Security Scanning, AWS, GCP (Prowler)
- IncludedPII Database Discovery, Postgres, MySQL (Presidio, Hawk Eye)
- IncludedAI Model Vulnerability Scanning (ModelScan)
- IncludedLLM Red-Teaming (Giskard/garak)
- IncludedEU-Specific PII Patterns (PII-Radar)
- IncludedVulnerability Scanning (Trivy)
- IncludedMDM Endpoint Audit, Intune, Jamf, Kandji
- IncludedAutomated Evidence Collection & Conformity Lock
- IncludedTamper-Evident Export (Cryptographic Seal)
- IncludedScope exclusions (exclude tables/paths)
- IncludedRemediation SLAs (configurable grace periods)
- IncludedRisk acceptance workflows with audit trails
- IncludedAudit trail & API keys
- IncludedSSO / SAML / OIDC + TOTP 2FA
- IncludedCustom roles & granular permissions
- IncludedMCP Server (Compliance-as-Code)
- IncludedPriority support
- IncludedEmployee Compliance Portal (AI Literacy & Policy Attestation)
Agency
For consultants & law firms
The more clients, the bigger the discount
Unlimited clients · Unlimited users
- IncludedPut each client on Starter or Business
- IncludedVolume discount: 20% (1–5), 30% (6–20), 40% (21+ clients)
- IncludedAll Business features per client
- IncludedCustom roles & granular permissions
- IncludedAutomated scanning across all clients
- IncludedTamper-Evident Export (Cryptographic Seal)
- IncludedMulti-client dashboard
- IncludedWhite-label documents
- IncludedPer-org billing
- IncludedDedicated account manager
Enterprise
For large organisations
Unlimited systems · Unlimited users
- IncludedUnlimited everything
- IncludedDORA, NIS2 & CRA frameworks
- IncludedAll scanning engines + custom configurations
- IncludedCustom LLM endpoints per tenant
- IncludedSSO, passkeys, bulk import
- IncludedCustom roles & granular permissions
- IncludedTamper-Evident Export + Custom eIDAS Integration
- IncludedScope exclusions (exclude tables/paths)
- IncludedConfigurable remediation SLAs
- IncludedRisk acceptance workflows with audit trails
- IncludedUnlimited scan connectors
- IncludedMCP Server (Compliance-as-Code)
- IncludedCustom SLAs + Dedicated Account Manager
- IncludedOn-premise option
Enterprise Add-On Modules
Heavy workloads and high-liability packs are billed separately, keep your base Enterprise lean, add only what you need. Contact your account manager to enable.
Add-ons are toggled per-tenant via TenantOverride (`addon_*_enabled`). Existing enterprise contracts are grandfathered (no override = enabled) — new tenants start without add-ons until your account manager enables them.
Need a custom solution?
Enterprise pricing includes the DORA, NIS2, and CRA frameworks, SSO, passkeys, and dedicated support.
Book a DemoAll plans are customizable and negotiable. Contact us to discuss your specific needs.