Flat fee. Unlimited users. AI included.
Four tiers sized for every stage. Framework expansion is the pricing axis, never seat count or AI add-ons.
Flat fee. Unlimited users. Renewal capped at 10% in year two.
Launch
First SOC 2, first vendor program. For 50 to 200 employee SaaS pursuing first audit.
- 1 framework (SOC 2, ISO 27001, or HIPAA)
- Internal Assessment Engine + Risk Register
- AI Policy Drafting + Evidence Vault
- Effy AI questionnaire response
- Lightweight vendor program (up to 25 vendors)
- AUDITOR role for your auditor
- Unlimited users
Foundation
Two frameworks. Full vendor program. For teams running a real GRC function.
- 2 frameworks included
- Compliance Calendar
- Basic Executive Dashboard
- Full vendor program (no cap)
- Effy AI across GRC + TPRM
- Unlimited users
Professional
Up to 5 frameworks + Vendor Dual-Signal + Posture Divergence Detection. Our sweet spot.
- Up to 5 frameworks
- Vendor Dual-Signal Risk Intelligence
- Posture Divergence Detection
- Cross-framework control mapping
- Advanced executive dashboard
- Dedicated success manager
- Unlimited users
Enterprise
Unlimited frameworks. Custom integrations. Dedicated CSM + audit support. Replace your legacy enterprise GRC suite.
- Unlimited frameworks (custom + system)
- Custom integrations (SSO, SIEM, ticketing, GRC migration)
- Advanced RBAC with custom roles
- Dedicated Customer Success Manager
- Audit support packages (Big 4 collaboration)
- Annual price increase capped at signing
- Unlimited users
- SOC 2
- ISO 27001
- NIST CSF 2.0
- NIST 800-53
- CIS v8.1
- PCI DSS
- HIPAA
- GDPR
- NYDFS 500
- NYSDOH 405.46
Framework expansion is the pricing axis. Your tier sets how many you carry, and you add the next one when your program needs it. Adding people never moves the number.
What it costs, and what it keeps costing.
Not sure which tier fits?
30-minute walkthrough. We size you on your own numbers and send a quote.