FAQ
Questions, answered
The things teams ask us most about getting and staying compliant.
General
About the platform
How long until we're audit-ready?
Weeks, not quarters — you start from pre-built content and a guided path. (It depends on your starting point.)
Is open-source safe for compliance?
Yes — transparency is a security feature. Open-source means you can inspect exactly how your data is handled, with no black box.
Do we need a compliance team to use it?
No. It's designed for lean teams and even a single owner, with automation doing the heavy lifting.
Will it work with our stack?
It's built to integrate and automate, including with AI agents.
What frameworks does it support?
SOC 2 first, with the ability to add and map many more — ISO 27001, HIPAA, CCPA, NIS 2, GDPR, DORA, ISO 27701, ISO 42001, 21 CFR Part 11, HDS — or build your own custom framework.
Can customers see our security posture?
Yes — publish a branded trust center with NDA-gated documents on your own domain.
Where does my data live?
On our secure cloud. Enterprise customers can discuss private cloud hosting and data-residency options.
Does it replace our auditor?
No — it gets you and your evidence audit-ready; your auditor still issues the report.
Pricing
About pricing
How does per-framework pricing work?
You pay for the frameworks you actively manage — SOC 2, ISO 27001, HIPAA, GDPR, NIS 2, DORA and more, or a custom framework — priced to be affordable for small companies. Add frameworks as you grow.
Is there a genuinely free option?
Yes. The Free plan is cloud-hosted — a 30-day full trial, then free forever, with 1 framework and no feature paywall to get started.
What's the difference between Free and Pro?
Free is our cloud plan for getting started — 1 framework and 1 user. Pro unlocks unlimited frameworks, continuous monitoring, the trust center, SSO and more.
Do you punish early-stage teams on price?
No. Transparent pricing that doesn't punish you for being early — that's the whole point.
Get audit-ready. Stay in control.
Start free, then pay per framework as you grow. Transparent pricing that doesn't punish you for being early.