One product: checklists, evidence, policies, integrations, and clear control status from deterministic rules—not from an LLM guessing green checks. We don’t issue SOC 2 reports or replace your auditor.
Deterministic status
Rule-verified vs evidence-linked controls—LLMs classify; they don’t decide satisfaction.
Evidence & checklists
SOC 2 TSC catalog, Annex A (ISMS) catalog, uploads, and (when connected) GitHub, GitLab, Jira, Drive, Slack.
Policies & export
TSC-aligned policy starters (customize for your auditor). Audit bundle export on paid plans.
Trust Center
Optional public posture page at /t/[slug] for your customers—configured in the app.
Tiers differ by support level and how we recommend you buy—not by turning off core product features in software. Choose Professional if you want priority support on your first SOC 2 program; choose Starter if email support matches your pace and budget.
Policy starters reference SOC 2 TSC control IDs (CC1–CC9 and listed Additional Criteria)—not legal advice. Annex A controls use separate IDs in the same evidence pipeline.
Starter
Full workspace on annual billing with email support. Best when you want the same capabilities with standard response times.
£2,999/year
After payment or request, we provision your workspace and email access—typically within one business day.
SubscribeProfessional
Same platform with priority support—our default for B2B SaaS teams on a first or early SOC 2 Type II track who want faster answers while integrations and remediation are in daily use.
£5,999/year
Same provisioning flow: checkout or email, then we enable your tenant.
SubscribeEnterprise
SSO, multi-workspace, security review packages, and dedicated success are not implied until captured in contract—email us to align.
Custom
Contact salesTrial: Scope is aligned when we provision your workspace (typically includes five recommended SOC 2 controls, uploads and git-host sync where connected, AI classification, and gap views). Full checklist access and audit bundle export require a paid plan.
Straight answers—aligned with how the app actually behaves today.
Trial scope is confirmed when your workspace is provisioned—typically five recommended SOC 2 controls with upload and sync for those controls (e.g. GitHub or GitLab when connected), AI classification, and gap visibility. Opening the full checklist and downloading the audit bundle are paid-plan features.
The same core product. The difference on this page is support level (email vs priority) and which tier we recommend for first SOC 2 programs—not a separate “lite” codebase hiding features behind the cheaper SKU.
It classifies evidence and helps surface what to upload next via remediation guidance. Control satisfaction comes from your evidence and deterministic rules in the product—not from an LLM marking controls complete.
Procurement-heavy deals, SSO or multi-workspace needs, multi-entity scope, or anything that must be confirmed in a security review or contract. We won’t assume those are included until they’re written down.