§ Pricing

Pricing aligned to organisational complexity, not seat count.

Charged on scopes under assurance and projections beyond baseline. Additive, never multiplicative. People aren't a lever. Activity isn't metered.

T1 · Free

Obligation visibility

Indefinite

What applies — and what you're quietly assuming. Deliberately uncomfortable.

Free / no card
Scopes 1
Projections Baseline

Includes

  • ✓ Obligation identification across jurisdictions you operate in
  • ✓ Scope clarity — where assurance starts and ends
  • ✓ Ownership visibility — including unowned dependencies
  • ✓ Explicit assumptions & gap register
  • ✓ BYO identity. No SSO tax.
  • × Pass / fail certification or maturity scoring
  • × Remediation plans, audit guarantees, reassurance
Request access
T2 · Growth

Commitment & control reality

Most chosen

How obligations are met in practice — and where they're fragile.

By scope / additive · never per seat
Projections ISO · SOC · custom
Publishing External basic

Everything in T1, plus

  • ✓ Active scopes under assurance — product, shared services, key vendors
  • ✓ Effectiveness & fragility tracking with confidence windows
  • ✓ Multi-framework views — ISO 27001, SOC 2, buyer questionnaires
  • ✓ Evidence lineage & dependency / third-party risk
  • ✓ Jurisdictional privacy & obligation mapping
  • ✓ Governed exceptions, decision authorities, holds & lapses
  • ✓ External trust publishing — basic surface
Get early access
T3 · Enterprise

Trust & assurance substrate

Bespoke

Verifiable claims for regulators, insurers, and buyers — at portfolio scale.

Bespoke / scopes · projections · delegation
Delegation Multi-entity
Claims Verifiable creds

Everything in T2, plus

  • ✓ Verifiable claims / attestations aligned to assurance levels
  • ✓ Regulator- and insurer-ready views
  • ✓ Assurance reuse across customers & partners
  • ✓ Jurisdictional deltas — projected across scopes
  • ✓ Machine-consumable trust signals without integration sprawl
  • ✓ Portfolio aggregation & delegated assurance
  • ✓ Multi-entity rollups, decision authorities at scale
Contact sales
Principle 01

Scopes + projections, additive. Adding a projection adds value — it doesn’t multiply by your scope count.

Principle 02

Activity is free. Decisions, exceptions, evidence pointers, renewals — never metered. Honesty isn’t taxed.

Principle 03

Improvement isn’t punished. Faster remediation reduces risk, not value. Self-reporting doesn’t trigger fees.

§ FAQ

Frequently asked, plainly answered.

If a question isn't here, write to us. We update this page as the questions repeat.

Why no per-user pricing?
People are an accountability mechanism, not a revenue lever. Per-seat pricing punishes the very roles you need to be active — auditors, owners, exception reviewers — and creates incentives to share logins or under-name dependencies. We charge for scopes under assurance and projections beyond baseline.
What counts as a scope?
A named thing under assurance: a product, a shared service, a key vendor, an organisational unit, a regulatory commitment. Scopes carry posture, confidence windows, named owners, and decisions. The free tier includes one scope.
What is a projection?
A standards or questionnaire model projected across your scopes — ISO 27001, SOC 2, a buyer questionnaire, a regulator’s schedule. Projections are additive: adding ISO does not multiply the cost of every scope you own.
Do you charge for SSO?
No. BYO identity is a prerequisite, not an upsell. There is no SSO tax at any tier.
Will the price increase if we self-report more exceptions?
No. Activity is not metered. Filing exceptions, renewing evidence, recording decisions and accepting risk are core to assurance — not chargeable events. Confidence may shorten until evidence is restored, but the bill does not move.
Do you offer free use for SMBs?
Yes for baseline, nationally mandated hygiene frameworks (e.g. Essential Eight in Australia). We will not extract revenue from a baseline that smaller organisations need just to be viable.
How does the Free tier differ from a trial?
It is not a trial. It is the obligation-visibility surface — what applies, where scope starts and ends, what is assumed, what is unowned. There is no expiry, no card, and no upgrade nudge in the product. Most users on the free tier never need anything more.
Can I move between tiers?
Yes. Tiers are additive: T2 includes everything in T1; T3 includes everything in T2. Your data stays put. We do not lock you in via export friction.
Not sure where you fit?

Start with obligation visibility. The rest follows.

Most teams discover three things in the first week: an obligation they were not aware applied, a dependency with no named owner, and an assumption that no one had written down. None of those need an enterprise contract.

Request access Talk to assurance engineering