Pricing
Plans that fit where your programme is
Start with the frameworks you need and add more later — controls are shared, so growth doesn't mean starting over.
Foundation
Companies working toward a first certification
Let's talk
- One workspace and up to two frameworks
- Automated checks on connected Entra ID / Azure / AWS
- Evidence collection with expiry tracking
- Findings, risk register and remediation tracking
- Policies, vendor register and audit workspace
- Standard reports with PDF / XLSX / CSV export
Growth
Teams running a continuous compliance programme
Let's talk
- Everything in Foundation
- All available frameworks in one control library
- DPDP module: RoPA, DSAR tracker, Grievance Officer, SDF logic
- Scheduled checks and daily compliance snapshots
- Full 34-report catalogue and audit evidence packs
- OIDC single sign-on and SCIM provisioning
Consultancy & Enterprise
MSPs, consultancies and multi-entity groups
Let's talk
- Everything in Growth
- Many isolated client workspaces from one account
- Portfolio dashboard and cross-client reporting
- White-label report branding
- Custom roles and approval workflows
- Onboarding support and dedicated contact
Roadmap AI-assisted gap analysis, questionnaire automation and a public trust centre are planned add-ons. They are not part of any plan today.
Questions we usually get
Why isn't there a price on this page?+
Pricing depends on frameworks, workspaces and integrations, so we scope it with you rather than publish a number that fits nobody. You'll get a clear written quote after a short call.
What counts as a framework?+
Each of DPDP, ISO 27001, SOC 2, NIST CSF and CIS Controls. Because controls are shared, a second framework costs far less effort than the first.
Do you replace my auditor?+
No. AssureLoom prepares and organises evidence and shows readiness. An independent auditor still issues any certification or report.
Can I bring my own auditor?+
Yes. Audit workspaces and evidence packs are built to be shared with whichever auditor you choose.
Is my client data kept separate?+
Yes. Each workspace is isolated by database row-level security, and integrations are scoped per workspace.
See your real compliance posture, not a spreadsheet of it.
Book a walkthrough and we'll run the checks against a sample environment so you can see every verdict traced back to its evidence.