Pricing
Clear terms, no hidden costs
30 standards and regulations in one platform.
Recommended to start
Starter
199 € / month
invoiced monthly
For a company that wants to take ISO 27001 all the way to the certificate.
- ISO 27001, GDPR and NIS2
- Policies and documentation ready to approve
- Risk register, evidence, incidents and nonconformities
- Statement of Applicability and audit readiness assessment
- Internal audit, management review and auditor access
- Business continuity plan and legal requirements register
- See which requirements of the three standards overlap
- One company, unlimited users
Each additional company you manage: 99 € net per month.
Try it freeFourteen days, no card. The trial runs a single path: ISO 27001. Company e-mail address required.
Professional
499 € / month
invoiced monthly
For a company running several standards at once and answering customer security questions.
- Everything in Starter
- Every standard in the catalogue, including DORA, SOC 2 and ISO 22301
- One control for many standards, with no repeated work
- Trust portal and questionnaires for clients and partners
- Vendor register and vendor risk assessment
- Board panel with reports and key risk indicators
- Team tasks, projects and integrations with your tools
- Employee lifecycle and access reviews
Enterprise
Custom pricing
For organisations that need their own terms and support during the audit.
- Everything in Professional
- Company login with SAML 2.0 and accounts provisioned from your directory
- Group structure and a consolidated compliance view
- A separate encryption key and your approval for every access by us
- No limit on companies, terms set in the contract
Do you serve several clients or group companies? We add each additional company to your account after a short call: arrange a call.
Prices on this page are in euro and we charge in euro. Prices exclude tax, invoice issued once settled. Self-service plans are for organisations of up to 250 employees; for larger ones we prepare an individual offer.
Guardiso is an ISO/IEC 27001 certified company and runs its entire information security management system on the same platform you get.
What each plan includes
| What you get | Starter | Professional | Enterprise |
|---|---|---|---|
| Foundation: policies, risks, controls, evidence and assetsPolicies, risks, controls, evidence and assets, the foundation everything else stands on. | ✓ | ✓ | ✓ |
| Personal data protection (GDPR)Processing register, impact assessments, data subject requests and breach notifications. | ✓ | ✓ | ✓ |
| Trust portal for customersA public trust page for customers asking about your security. | — | ✓ | ✓ |
| Statement of Applicability, readiness and links between standardsStatement of Applicability for ISO 27001, an audit readiness assessment with a gap list, the legal requirements register and links between the standards your company has switched on. | ✓ | ✓ | ✓ |
| Shared controls, compliance tests and the document repositoryShared controls view, compliance tests, data lifecycle, information classification and the document repository. In this plan the links cover every standard in the catalogue, in Starter three. | — | ✓ | ✓ |
| Team tasks and projectsA shared task list, a personal “My work” view and team projects. | — | ✓ | ✓ |
| Security Readiness QuestionnaireA large security self-assessment where questions covered by a certificate you hold are credited automatically, with a questionnaire score and an A to E grade. | — | — | ✓ |
| Auditor access and evidence packRead-only access for your external auditor and an audit evidence pack with a readiness score. | ✓ | ✓ | ✓ |
| Internal auditsAn annual internal audit programme, audits with findings and nonconformities, a downloadable audit report and a register of the certificates you hold. ISO 27001 clause 9.2 requires this. | ✓ | ✓ | ✓ |
| Audit questionnaires and self-assessmentsAudit questionnaires sent to clients and partners, client assessments and self-assessments such as SAQ-D for PCI DSS. | — | ✓ | ✓ |
| Vendors and third-party risk assessmentVendor register, third-party risk assessment, data processing agreements and electronic signatures. | — | ✓ | ✓ |
| Incidents and nonconformitiesIncident reporting, notification deadlines and case records. | ✓ | ✓ | ✓ |
| Business continuity and resilienceBusiness continuity plan, impact analysis and failure scenarios. | ✓ | ✓ | ✓ |
| Domain Security AssessmentScanning of your own domains and subdomains with a score and a list of recommendations. | ✓ | ✓ | ✓ |
| Security operationsThreat information, review of third-party security test reports, patch management, monitoring and a baseline configuration register. | — | ✓ | ✓ |
| Employee lifecycle and access reviewsSteps for every person before, during and after employment, with evidence. Documents to sign, access reviews and an employee portal. | — | ✓ | ✓ |
| Information security system setup (ISO 27001)Scope, organisational context, objectives, interested parties and the annual management review, all required by ISO 27001. | ✓ | ✓ | ✓ |
| Guardiso Quality (ISO 9001 and ISO 22301)Guardiso Quality (ISO 9001 and ISO 22301) | — | — | ✓ |
| Compliance wizard and document analysisA compliance wizard that prepares implementation documentation, analysis of documents you paste in and the Guardiso Assistant. | ✓ | ✓ | ✓ |
| Advisor and register of artificial intelligence systemsAn artificial intelligence advisor and a register of artificial intelligence systems with impact assessments. | — | — | ✓ |
| Integrations with your company tools and the programming interfaceConnections to the tools your company already uses, plus public programming interface documentation. | — | ✓ | ✓ |
| Board panel and reportsCompliance status for the board on one screen, with trend, a downloadable report and key risk indicators. | — | ✓ | ✓ |
| Your own company standards and full data exportYour own company standards with custom controls, asset search in connected services and a full export of organisation data. | — | — | ✓ |
| Client companies (consultant)Client companies (consultant) | — | — | ✓ |
| Company login and accounts provisioned from the corporate directoryLogin with company identity plus provisioning and deprovisioning of accounts from the corporate directory. | — | — | ✓ |
| Group structure: parent company and subsidiariesParent company, subsidiaries and a consolidated compliance view of the whole group under one account. | — | — | ✓ |
Frequently asked questions
Do I need a card to start?No. Fourteen days run without a card and without a call. You add a card only when you decide to stay, inside the app: Settings, the Billing tab.
What happens after fourteen days if I do not buy?Nothing is deleted overnight. After fourteen days your workspace stays for another two weeks so you can still buy a plan, with the same trial limits: full documents unlock when you buy. After that we archive the workspace and restore it on request.
How many people can I add?As many as you need. We do not charge per user.
Do I get all the frameworks right away?Professional and Enterprise do not limit the catalogue. Starter runs three: ISO 27001, GDPR and NIS2 with the Polish Cybersecurity Act. You switch most standards on yourself in Settings, and we add a few of the least common ones, including the AI Act, on request.
How do I buy Professional?After a short call. Today the card path covers Starter, inside the app on the Billing tab, and we set up Professional for you. The free trial covers Starter only.
Cancel any time.
Still comparing? Check your organisation in a free self-assessment, no account needed.