Pricing

Pay for the shape that fits, not features you'll never use.

Configurable from the platform admin. Start a free trial without payment details.

Free 14-day trial

Create a workspace, adopt a framework, link real evidence. No credit card. Verify by email within 7 days; we suspend if you don't.

Start free trial

Starter

Single company. Up to two frameworks.

€99 /month

  • Up to two framework programmes (e.g. GDPR + NIS2)
  • Up to 25 users
  • Policy + evidence + risk + tasks
  • Full support for integrations and data sources
  • Employee security training module
  • DR/BCP drills
  • Full exportable reports (PDF or XLSX)
  • Your custom branding
  • SSO (OIDC/SAML)
  • Email support
Order
Most popular

Growth

Multi-framework, AI ingest, integrations.

€299 /month

  • Everything included in the Starter plan
  • Unlimited framework programmes
  • Up to 100 users
  • AI evidence ingest
  • Cloud posture sync (AWS/Azure/GCP)
  • Scheduled reports
  • Priority email support
Order

Consultancy

Large organizations or vCISO portfolios

From €499 /month

  • Everything included in the Growth plan
  • Unlimited client tenants / users
  • Per-client branding + isolation
  • Cross-client switcher + reporting
  • Dedicated onboarding
Talk to sales
See the full capability matrix
Capability Starter Growth Consultancy
Framework programs
Active framework programmes Up to 2 Unlimited Unlimited (per client)
Seeded framework catalogue (GDPR, NIS2, DORA, ISO 27001, SOC 2, EU AI Act, MiCA, HIPAA, EU CRA) ✓✓✓
Cross-framework crosswalks (evidence satisfies twin requirements automatically) ✓✓✓
Custom framework authoring (YAML upload, in-app builder, AI-drafted) —✓✓
Share custom frameworks with client tenants (selectively) ——✓
Users and tenancy
Users Up to 25 Up to 100 Unlimited across all client tenants
Managed client workspaces —— At least 1 master + 5 managed workspaces; upgrade for more
Cross-client tenant switcher + portfolio-wide reporting ——✓
Strict per-client tenant isolation (RLS on every table) N/AN/A✓
Compliance surface
Policy lifecycle (draft, review, approve, publish, versioning, acknowledgements) ✓✓✓
Procedures and standards (full policy hierarchy) ✓✓✓
Evidence library + risk register + tasks ✓✓✓
GDPR registers: RoPA, DPIA, breach register, DSAR intake ✓✓✓
DORA registers: ICT third-party (Art. 28), continuity plans, drill logs ✓✓✓
Asset inventory ✓✓✓
Coverage donuts, per-domain heatmaps, per-requirement drill-downs ✓✓✓
Training and people
Employee security training module (courses, assignments, acknowledgements, reminders) ✓✓✓
Per-role and per-user assignment with completion tracking ✓✓✓
Continuity and resilience
Business continuity plans + DR drills with drill logs ✓✓✓
Reporting and exports
Full exportable reports (PDF and XLSX) ✓✓✓
Portability report (JSON + XLSX + PDF) ✓✓✓
Scheduled recurring reports —✓✓
Integrations and data sources
Full support for integrations and data sources (S3, Azure Blob, GCS, SharePoint, Confluence, ADO Wiki, Jira, ServiceNow) ✓✓✓
Cloud posture sync (AWS / Azure / GCP) —✓✓
AI
AI evidence ingest (proposals from connected sources) —✓✓
AI-drafted custom frameworks from pasted regulation text —✓✓
AI assistant grounded in tenant data (Ask Atitic) —✓✓
Branding and identity
Custom branding (logo, colours, favicons) ✓✓✓
Per-client branding + full isolation ——✓
Custom subdomain ✓✓✓
Custom domain (your own hostname) —✓✓
Branded transactional email (DKIM under your domain) —✓✓
Identity and access
Single sign-on (OIDC and SAML 2.0) ✓✓✓
SCIM 2.0 automated user provisioning —✓✓
Multi-factor authentication (TOTP) ✓✓✓
Role-based access control (per-module read / manage / approve) ✓✓✓
Audit and legal
Tamper-evident audit log on every mutation ✓✓✓
Personalised Terms of Service, Privacy Policy, and DPA per tenant, per language ✓✓✓
Hosting and support
EU-hosted data (Postgres + object storage in EU regions) ✓✓✓
Email support Standard Priority Priority + dedicated onboarding

Pricing FAQ

Do I need a credit card to start?

No. The 14-day trial requires only a working email. Verify within 7 days or the workspace is suspended.

Where is the data hosted?

EU only. Object storage and database both stay in EU regions; no extra-EU transfers in the default deployment.

Can I move between plans?

Yes – upgrade or downgrade at any time. We pro-rate on the next invoice.

What counts as a 'user'?

Any active login. Read-only board / regulator viewers are free up to a sensible cap.

Do you offer payment deferrals?

Yes, up to 30 days.

Still comparing?

Reach out – we'd rather answer the question than have you guess.

Talk to us