GRC Platform
£2,000/mo
Per company entity. All 29 standards, every core module, 1,109 controls, unlimited users, 723 templates and 337 training modules.
What's included
£2,000 per month, per legal entity. All 29 standards, every core module, unlimited users, every future update. The only premium add-on is TPRM & vCISO.
All prices are per company entity, per month. Multi-company groups add one fee per legal entity and receive a single consolidated invoice.
Per company entity. All 29 standards, every core module, 1,109 controls, unlimited users, 723 templates and 337 training modules.
What's included
Everything above, plus continuous evidence-based vendor due diligence with unlimited monitored third parties — and vCISO, the same intelligence turned on your own estate.
Explore TPRM & vCISO
Third-party risk and vCISO as a dedicated product — no full GRC platform required. Unlimited monitored third parties.
Explore TPRM & vCISO
Three days with a qualified auditor, delivered remotely — discovery, configuration, AI enablement, training and handover.
See the three daysEight blocks of capability that most vendors sell as separate line items.
ISO 27001, 42001, 22301, 31000, 37001, 37301, 45001, 27017, 27018 and 27701; GDPR, SOC 2, PCI DSS, NIST CSF 2.0, DORA and HIPAA; Cyber Essentials, CE Plus, IASME Cyber Assurance, IASME MSP, DCC Level 1 and NCSC CAF; plus seven ESG frameworks — each with a control library, guided assessment and training course.
See all 29
Document generation, the compliance chatbot, guided risk assessments and smart analysis — included rather than an add-on, under a fair-use policy built for normal business operations.
Explore AI governance
Risk register, treatments, heat maps, critical assets, incident management, principal risks and escalation, with 178 pre-built assessment templates across 16 categories.
Explore risk
Executive dashboards, AI-generated reports, PDF and Excel export, compliance trends and a complete field-level audit trail.
Explore reporting
Vendor register, risk assessments, due-diligence tracking and contract management. For continuous evidence-based intelligence, add premium TPRM.
Explore TPRM
Business impact analysis, threat scenarios, recovery plans, BC exercises and crisis management with a readiness score.
Explore continuity
Interactive compliance training with quizzes, progress tracking, certificates and verification codes — 29 courses across 337 modules.
Explore training
Principal risks register, board oversight tracking, control effectiveness testing and AI annual report generation for the UK Corporate Governance Code declaration.
Provision 29Most vendors lure you in with a base module, then charge again for every standard, every feature and every user. By the time you have what you needed on day one, you are paying five figures a month.
Other vendors quote a low starting price, then the add-ons begin. Here is a like-for-like comparison for a single 50-user company.
| What you need | GRCxAI — £2,000/mo | Typical GRC vendor |
|---|---|---|
| User licensing (50 users) | Unlimited — included | £1,250–£3,750/mo |
| Multiple standards (5+) | All 29 — included | £1,000–£2,500/mo |
| AI document generation | Included | £500–£1,500/mo add-on |
| AI compliance chatbot | Included | Typically not available |
| Training LMS (337 modules) | Included | £500–£2,000/mo add-on |
| Provision 29 support | Included | Typically not available |
| Platform setup | Included | £5,000–£25,000 one-off |
| Implementation time | Days | 3–6 months |
| Realistic monthly cost | £2,000 | £5,000–£15,000+ |
Competitor figures are indicative list-price ranges for comparable scope, not quotes. Multi-company groups multiply the GRCxAI column by the number of legal entities.
Your platform works from day one. If you want a qualified auditor alongside you while you set it up, this is that — three days, delivered remotely, £3,000 one-off.
Yes. One flat price per company entity covers all 29 standards, every core module and page, unlimited users, AI document generation, the AI chatbot, 337 training modules, platform setup and priority support.
The one premium separately-priced add-on is TPRM & vCISO at £2,000/month per company — as an add-on or standalone.
£2,000/month per legal entity, issued as a single consolidated invoice to the parent organisation. A group of three trading subsidiaries is 3 × £2,000 = £6,000/month.
Each subsidiary still gets its own tenant, unlimited users and full access to every standard. You only pay for the entities you actually onboard.
Exactly that, within each company. Five compliance team members or five hundred users — the per-company price is the same.
No hard limits. AI document generation and chatbot usage sit under a fair-use policy built for normal business operations.
£2,000/month per company, invoiced monthly in advance through Stripe by Direct Debit or card. The agreement runs for an initial 12-month term and renews for further 12-month terms unless either side gives 60 days’ notice.
Give 60 days’ written notice before the end of the current 12-month term to stop it renewing. During the initial term the agreement can only be ended in the circumstances set out in clause 14. You can export your data at any time in standard formats. After termination, request an export within 30 days and it stays available for a further 90 days — full terms are in the Master Subscription Agreement.
See the whole platform on a live call, then decide.