Operations Engine
Engine overview Automated Control Testing Audit Evidence Generation Remediation Tracking Policy & Procedure Management Framework Coverage
Industries
Fintech & Financial Services Healthcare & Pharma
Pricing Company
Talk to us Sign up
Pricing

Plans that scale with what you are audited against.

Pricing follows the number of frameworks and systems in scope, not the number of seats. You get a firm quote after a short scoping call, before you commit to anything.

Single framework

Starter

Priced per frameworkFor a first audit or a single customer requirement.
Sign up
  • One framework such as SOC 2, ISO 27001, PCI DSS or HIPAA
  • Automated control testing on required frequencies
  • Audit evidence generation with timestamped, sealed records
  • Evidence export packs organised by clause
Multiple frameworksRecommended

Growth

Priced by frameworks in scopeFor teams answering to more than one standard.
Sign up
  • Everything in Starter across several frameworks
  • Shared control mapping so overlaps are tested once
  • Remediation tracking with owners, due dates and re-tests
  • Policy and procedure management with versions and approvals
Custom frameworks

Enterprise

Custom agreementFor complex scopes and custom requirements.
Talk to us
  • Everything in Growth without framework limits
  • Custom frameworks including customer questionnaires
  • Dedicated onboarding to map and connect your systems
  • Priority support with a named contact
Compare plans

Feature comparison by engine area

FeatureStarterGrowthEnterprise
Automated control testing
Scheduled control tests
Human attestation tasks
Custom test rules and thresholds
Audit evidence generation
Timestamped, hashed evidence records
Evidence export packs
Auditor access to evidence
Remediation tracking
Tickets with owners and due datesBasic
Escalation and automatic re-test
Ticketing tool sync
Policy and procedure management
Policy templates
Versioning and approval workflows
Staff acknowledgements
Framework coverage
Frameworks included1MultipleUnlimited
Custom and regional frameworks
Pricing questions

Before you choose a plan

Which frameworks are covered?

SOC 2, ISO 27001, PCI DSS, HIPAA, 21 CFR Part 11, EU GMP Annex 11 and GDPR are mapped today, with more being added. The Framework Coverage page lists current status for each.

What do we need to connect?

Typically your cloud provider, identity provider and ticketing tool, plus any document store holding policies. Connections are read-only wherever the system allows it. We confirm the exact list during scoping.

What are the contract terms?

Contract length and billing are agreed during scoping and written into your order before you commit. You can move up a tier as your framework scope grows. Enterprise terms are agreed individually.

Can we change frameworks later?

Yes. Because controls are shared across frameworks, adding one usually extends your existing control set rather than starting from zero.

Get a quote for your exact scope.

Tell us your frameworks and systems and we will come back with a clear price and an onboarding plan.

Book a demo Sign up