Pricing
Priced for founders, not procurement
Annual list prices, ex VAT. No per-control fees, no setup charges, no surprise "success" invoices when you pass your audit.
Light
£4,000
or £360 / month
3 seats
Founding team preparing for Stage 1.
- Full policy set & Annex A controls
- Risk register with owners
- Hash-chained audit log
- Incident & DSAR log
- Email support
Business
Popular£8,000
or £720 / month
8 seats
Startups running a live ISMS with department heads.
- Everything in Light
- Role separation: Head of InfoSec / Head of Dept / Auditor
- Supplier register & third-party reviews
- Assets & information classification
- Priority email support
Enterprise
£16,000
or £1,440 / month
Unlimited seats (fair-use)
Certified organisations with multiple departments and auditors.
- Everything in Business
- Multiple auditors & external reviewer access
- SSO on request
- Custom sub-processor & DPA reviews
- Named contact for support
Framework bolt-ons
One ISMS. Every certification your customers ask for
ISO 27001 is your foundation. Each bolt-on maps back to it, so controls, evidence and policies you've already implemented count automatically — no duplicated work.
SOC 2
Add-on£149 / month
~65% inherited from ISO 27001
US enterprise contracts and vendor security reviews.
- Trust Services Criteria mapped to Annex A
- Audit-ready System Description
- Evidence inherits from your SoA
ISO 42001 (AI)
Add-on£149 / month
~45% inherited from ISO 27001
AI-first products proving responsible AI governance.
- Clauses 4–10 + Annex A AI controls
- AI impact assessment scaffolding
- Auditable AI management system
ISO 9001 (Quality)
Add-on£99 / month
~80% inherited from ISO 27001
Regulated markets, tenders and quality-conscious buyers.
- Clauses 4–10 + quality-specific mappings
- Management review consolidation
- Printable QMS description
Full framework bundle
All three bolt-ons for £299 / month
Save £98 / month vs. buying them separately. Add to any ISMS tier.
Common questions
- Do you charge implementation or setup fees?
- No. The list price is the price. Optional advisory days are billed separately at £399/day (ex VAT) only if you ask for them.
- What happens after the free trial?
- Your workspace stays intact and moves to the tier you choose. Nothing is auto-charged during the trial.
- Is my data hosted in the UK/EU?
- Yes. Managed Postgres and storage sit in the EU region. Full detail on the security page.
- Can we get a DPA?
- Yes — our standard Data Processing Agreement is available and covers Article 28 UK GDPR.