Your compliance programme, as a register you can read.
Public pricing. Connects to Microsoft 365 in ten minutes. AI drafts the paperwork. Built for regulated firms in the EU and the GCC — not US SaaS startups on SOC 2.
- PriceFlat, per company, published — fixed at renewal.
- FrameworksISO 27001, DFSA, DORA, GDPR — first, not as add-ons.
- The AIAgents complete the work; a named human approves it.
Today the choice is a spreadsheet and a consultant — or a platform built for someone else.
The enterprise tools start near $10,000 a year, arrive through a sales call, and are built for US startups chasing SOC 2. Their EU coverage is an afterthought and their GCC coverage does not exist. Renewals climb 20–40%. The trust page, vendor risk and extra frameworks are sold on top.
A ten-person firm in DIFC or Lisbon does not need any of that. It needs to connect the Microsoft stack it already runs, see what is actually true, and hand a regulator evidence that a control works — not that a setting exists somewhere.
From a free score to a monitored programme.
- 01
Run the free gap assessment
Twenty-odd plain questions. Out comes a readiness score and a prioritised list of gaps you can share with your team before you pay a thing.
- 02
Connect Microsoft 365
One admin consent, read-only. Within ten minutes the register fills with your real posture — MFA, devices, logging, backups.
- 03
See the failing tests
Each test says what it checks, why it matters, and the exact fix for your stack. No noise — only what actually failed.
- 04
Fix, monitor, and invite your auditor
Close the gaps, let the agents keep evidence fresh, and hand your auditor a read-only, time-boxed workspace organised by control.
A passing test here means the control works.
Not that a policy exists — that it operates, with no quiet exceptions. Each test states what it checks, why it matters, and the exact fix for your stack.
MFA is enforced for every user, with no exclusions. A policy that exempts two admins is the gap an attacker and an auditor both find first.
Backups ran — and a restore was tested this year. A backup nobody has ever restored is a hope, not a control.
Privileged roles were reviewed and signed off. The evidence is a recorded decision by a named owner, with a timestamp and a hash — sealed, never edited.
EU and GCC frameworks, led from the front.
One control satisfies requirements across frameworks; evidence collected once counts everywhere.
On the website. Per company. Fixed at renewal.
No per-seat maths, no quote, no surprise. Monthly or annual; cancel in-app. (A proposal we are testing with design partners.)
The gap assessment, scored
- Readiness score
- 1 framework scoped
- 1 integration
- Up to 10 people
One framework, monitored
- 1 framework
- 3 integrations
- Policies + acknowledgements
- Evidence + tasks
- Trust page
- Up to 50 people
The common choice
- 3 frameworks
- All integrations
- Access reviews
- Vendor register
- Questionnaire agent
- Auditor workspace
- Up to 200 people
Unlimited & custom
- Unlimited frameworks
- Custom frameworks
- Public API
- SSO / SCIM
- Remediation agent
- Up to 500 people
Consultancies run many clients from a partner console — delegated access, shared templates, white-label reports — from $299 + $99 per client workspace.
AI does the paperwork. You approve what matters.
Every agent action is logged, cited and reversible. Nothing that changes a policy, a control state, or writes to your systems happens without a named human saying yes.
Onboarding
Reads your profile and connected systems; proposes the framework pack, control scope and owners.
You confirm the scope.Policy
Drafts each policy from what it sees in your environment, and flags where the policy text and reality disagree.
You approve before publishing.Evidence
Runs the tests, collects evidence, chases the owners of what's missing, and checks uploads match the control.
You approve document mappings.Copilot
Answers “what do I still need for DFSA?” and “show me the evidence for MFA” from your data, with citations.
Read-only.Open your register.
Start with the free gap assessment — twenty-odd questions, a readiness score, and a prioritised list you can share today. Five design-partner seats are open at half price for twelve months.
Or take a design-partner seat.
Five seats, half price for twelve months, in exchange for weekly feedback. Leave your email and we'll reach out — no sales call.