Pricing
Start Free. Upgrade When Ready.
SCF-native GRC tooling. AI-assisted, human-led. No credit card required to start.
MonthlyAnnual
AI-assisted evidence assessment, vendor research, and audit preparation — built for practitioners who want to do the work properly. Start free, upgrade when ready.
Free
For individual GRC practitioners getting started
$0/month
Free forever
- 1 organisation
- Full SCF catalog (1,400+)
- All framework mappings (100+)
- View evidence requirements
- View maturity scores
- Basic risk register view
- API access
- Consultant portal
- SSO/SAML
Pro
For small teams managing their own compliance
$649/month
$6,500/year (save 16%)
- 1 organisation
- Full SCF catalog (1,400+)
- All framework mappings (100+)
- Evidence assessment + webhook inbox
- Vendor management & DPSIA
- Full risk module + audit workspaces
- API access
- Consultant portal
- SSO/SAML
Most Popular
Consultant
For GRC consultants managing multiple clients
$1,249/month
$14,990/year
- Up to 5 clients (add-ons available)
- Full SCF catalog (1,400+)
- All framework mappings (100+)
- Evidence assessment + webhook inbox
- Vendor management & DPSIA
- Full risk module + audit workspaces
- API access
- Consultant portal
- SSO/SAML
Custom
For large organisations with custom requirements
Contact Us
Contact for pricing
- Unlimited clients
- Full SCF + custom controls
- All mappings + custom
- Unlimited evidence storage
- Custom maturity models
- Custom risk frameworks
- API access
- Consultant portal
- SSO/SAML
Compare All Features
| Feature | Free | Pro | Consultant | Custom |
|---|---|---|---|---|
| Organisations / Clients | 1 | 1 | Up to 5 | Unlimited |
| SCF controls | 1,400+ | 1,400+ | 1,400+ | 1,400+ + custom |
| Framework mappings | 100+ | 100+ | 100+ | 100+ + custom |
| Evidence requirements (ERL) | View | View + track | View + track | View + track + custom |
| Evidence file upload & storage | ||||
| Evidence Assessment | ||||
| Evidence Inbox (Webhook API) | ||||
| Evidence Maturity Advisory | View only | |||
| Vendor Management (TPRM) | ||||
| DPSIA Vendor Assessments | ||||
| Vendor Research | ||||
| Audit Engagement Workspaces | ||||
| Technology in Use Registry | ||||
| Framework Gap Analysis | ||||
| One-click "Add to Scope" | ||||
| Risk module (5x5 matrix) | View | Full | Full | Full + custom |
| Custom organisation risks | ||||
| Risk-control linking | ||||
| Capability Posture dashboard | ||||
| Consultant portal | ||||
| Cross-org dashboards | ||||
| API access | ||||
| Custom branding | ||||
| SSO/SAML | ||||
| Audit trail | 30 days | 1 year | 1 year | Unlimited |
| Support | Community | Priority | Dedicated |
Are You a GRC Consultant?
Each consultant brings 5-20 clients — we are your distribution partner.
- Manage all clients from one dashboard
- See which clients need attention at a glance
- Standard templates across all engagements
- Cross-organisation compliance comparison