Pricing

One platform. One price. Everything included.

Every framework, every feature, your whole team — no add-ons, no per-seat math, no surprises. Book a free 30-minute assessment and we'll map it to your stack and give you a straight number.

No tiers. No add-ons.

Everything, in one plan

No tiers to decode. No line items to negotiate. One price covers the whole platform.

One flat price

no per-seat fees · no per-framework add-ons

  • All 31 frameworks — the ADGM DPR, Cyber Essentials, Cyber Trust, the DIFC DPL, DORA, DPTM, the EU AI Act, GDPR, HIPAA, India's DPDP Act, ISO 9001, ISO/IEC 20000, ISO 22301, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, IT General Controls (ITGC), the KSA NDMO Data Management Standards, the KSA PDPL, NIS2, NIST AI RMF, NIST CSF 2.0, the New Zealand Privacy Act, PCI DSS, the Philippines DPA, Sarbanes-Oxley (SOX), SDAIA AI Governance, SOC 2, and the UAE PDPL — automatically cross-mapped so shared evidence counts for all of them
  • Cross-framework crosswalk: capture a piece of evidence once and it counts for every framework it maps to
  • Dedicated threat-intelligence module, built in at no extra cost
  • Built-in security-awareness LMS — assign courses, quizzes & auto-issued certificates; no separate training tool to buy
  • Unlimited users — your whole team, no per-seat charges ever
  • Evidence automation & continuous monitoring across your cloud and identity stack
  • Statement of Applicability, policy library & audit calendar
  • Risk, asset, supplier, incident & document registers
  • AI assistant — bring your own model key or use ours
  • MCP server — connect Claude (or any MCP client) to your compliance data, via OAuth or an API key
  • Data residency (EU · US · APAC) & bring-your-own S3 storage
  • Trust center & automated security-questionnaire answers
  • SSO / SCIM, custom data region & SLAs — just ask during your assessment
LOYALTY

The longer you stay, the less you pay. Every renewal earns a loyalty discount — staying compliant should cost you less each year, not more.

30 minutes · no obligation · you leave knowing your number

Why one price works here

Evidence you collect once counts everywhere

Compliance frameworks overlap heavily — the security ones share controls, and the management-system standards (ISO 9001, 27001, 22301) share the same clause 4–10 spine — so most of what you implement, and the evidence behind it, satisfies several frameworks at once. We cross-map them automatically, so a second (or sixth) framework mostly reuses work you've already done and costs you nothing extra. Competitors bill per framework anyway.

Your bill never grows as you hire

No per-seat metering means compliance doesn't get more expensive every time you add a teammate. One price, unlimited users, full stop.

A straight number, fast

No opaque quotes or multi-week sales cycles. A free 30-minute assessment maps the platform to your stack and gives you an exact figure the same day.

How that stacks up

The short version, against the way most GRC platforms price and host.

 Compliance OneTypical GRC platform
Pricing One flat price, all frameworks Per-framework + per-headcount
Adding a framework $0 — included ~$3–10k/yr each
Users Unlimited Billed by headcount
Data residency EU · US · APAC + your own S3 Mostly US-first
Independent VAPT / audit of the platform Welcome. You're free to commission your own penetration test or security audit of the platform, with our prior written consent so we can coordinate scope and timing. Often restricted or billed as a paid add-on
See the full, sourced comparison vs Vanta, Drata, Secureframe & more

Pricing questions

How much does it cost?
One flat price for the whole platform — no per-user fees and no per-framework add-ons. We tailor the figure to your size and share it in a quick, no-obligation assessment, so you always get a straight number fast rather than a pricing maze.
What's the free 30-minute assessment?
A short call where we map the platform to your environment, show real coverage against your own stack, and give you an exact quote. No slide decks and no obligation — you leave knowing your number and where you stand.
Is it really every framework, with no add-ons?
Yes — every framework and feature is in the one price. It works because security frameworks overlap heavily and we cross-map them: most of the work you do for one framework carries over to the others automatically, so adding another doesn't add cost. Framework-specific requirements are tracked separately, still inside the one plan.
Do you charge per user?
No. Your bill never grows just because you hire — unlimited users are included, so compliance scales with your team at no extra cost.
Is security-awareness training included, or is that extra?
It's included. Compliance One has a native LMS built in, so you can assign framework-specific training to your staff, quiz them, and auto-issue completion certificates — all in the one price. There's no separate training platform to license and no per-learner fee, so you're not paying twice for something your compliance programme already needs.
What about SSO, a custom data region, or bring-your-own storage?
All included — just mention it during your assessment. Enterprise needs like SSO/SCIM, a specific data region, bring-your-own S3 and SLAs are handled without bumping you into a different 'tier'.
Do you offer discounts for startups or non-profits?
We do. Tell us about your organisation in the assessment — we want compliance to be accessible to teams of every size.
Free 30-minute assessment

Get your number in 30 minutes.

We'll map the platform to your stack, show real coverage, and give you an exact quote — no slides, no obligation.