Transparent pricing. No surprises.

Sprint

Get audited rapidly for SOC 2, ISO 27001, GDPR, HIPAA or ISO 42001

• Single-framework compliance
• Rapid audit readiness
• UK-based compliance team
• Customised policies and controls
• Auditor management
• Hands-on GRC platform management
• Risk assessments and gap analysis
• Trust Centre configuration
• Sales and infosec support
• Partner network access

Engage

Pass ongoing audits and seamlessly remain compliant year after year

• Single-framework compliance
• UK-based compliance team
• Hands-on GRC platform management
• Trust Centre maintenance
• Security questionnaire responses
• Sales and infosec support
• Annual audit management
• Partner network access

Fortify

Achieve best-in-class security and privacy programmes at scale

• vCISO support or replacement
• Technical design enhancements
• Cloud security assessments
• Security questionnaires
• Incident response planning
• M&A compliance diligence
• Vendor risk management
• Penetration testing included
• 50+ additional services

What is included in the monthly fee?

Your monthly fee covers your dedicated compliance team, GRC platform management, policy and control development, auditor coordination, and ongoing support. There are no hidden fees.

How long does it take to get certified?

Most clients achieve their first certification within 3 to 6 months on the Sprint plan. The exact timeline depends on your starting point, the framework, and your organisation's size.

Can I add multiple frameworks?

Yes. Additional frameworks can be added to any plan. We will scope the additional work and provide a revised monthly fee.

What happens after I get certified?

Many clients move to our Engage plan after certification, which covers ongoing compliance management, annual audit support, and Trust Centre maintenance.

Do you work with specific GRC platforms?

We work with Vanta, Drata, Sprinto, and Secureframe. We will recommend the right platform for your needs and manage it on your behalf.