Freemium
Try the method on a first scope.
€0
No credit card, no time limit
Start free- 1 scope, 1 user
- 20 controls
- Essential cybersecurity baseline
- Internal audit
- Statement of applicability (SoA)
Public prices, for every way of working.
Start free on one scope. Move to a paid plan when your frameworks, scopes or clients require it.
Billing
Starter
Structure a first regulatory framework.
€49€59 /month excl. VAT
€590 excl. VAT billed yearlyBilled monthly
Choose Starter- 1 scope, 1 user
- 60 controls
- GDPR, ANSSI, AI Act, CIS 18
- Everything in Freemium
Business
RecommendedRun a NIS2 programme across several scopes.
€166€199 /month excl. VAT
€1,990 excl. VAT billed yearlyBilled monthly
Choose Business- 3 scopes, 3 users
- 200 controls
- NIS2, ReCyF, CyFun, SOC 2, DORA, OWASP ASVS level 1
- Risk treatment plan
- Everything in Starter
Advanced
Prepare for certification and demanding frameworks.
€291€349 /month excl. VAT
€3,490 excl. VAT billed yearlyBilled monthly
Choose Advanced- 5 scopes, 10 users
- 500 controls
- ISO 27001, ISO 27701, HDS, SecNumCloud
- Everything in Business
Prices excl. VAT. The MCP server is included in every plan. Plans are cumulative: each tier includes the frameworks of the previous one. Each invited person counts as a user. Paid plans include guided onboarding tailored to your scope.
Full 30-day trial
Granted after a demo, to try every feature on your own scope.
Book a demoCompare Organisation plans
| Included | Freemium | Starter | Business | Advanced |
|---|---|---|---|---|
| Scopes | 1 | 1 | 3 | 5 |
| Users | 1 | 1 | 3 | 10 |
| Controls | 20 | 60 | 200 | 500 |
| Essential cybersecurity baseline | Included | Included | Included | Included |
| GDPR, ANSSI, AI Act, CIS 18 | Not included | Included | Included | Included |
| NIS2, ReCyF, CyFun, SOC 2, DORA, OWASP ASVS level 1 | Not included | Not included | Included | Included |
| ISO 27001, ISO 27701, HDS, SecNumCloud | Not included | Not included | Not included | Included |
| Internal audit | Included | Included | Included | Included |
| Statement of applicability (SoA) | Included | Included | Included | Included |
| Risk treatment plan | Not included | Not included | Included | Included |
| Guided onboarding | Not included | Included | Included | Included |
| MCP server (AI assistant) | Included | Included | Included | Included |
Consultant
To run several clients' engagements from a single account.
From €4,500 /year excl. VAT
- 3 clients included, each on the Business plan: their users count towards that plan, not yours
- 1 user for you, the consultant
- Guided onboarding included
- A separate workspace per client
- Import of your internal frameworks
- Internal audit, statement of applicability, treatment plan, remediation
- MCP server included, to work from your AI assistant
Additional clients and Advanced
Add a client, or move a client to Advanced for its frameworks: these are options you activate directly in the platform. Each added client also gets the Business plan.
Your firm's own compliance
Run your own ISO 27001 or GDPR programme in the same tool, by adding your firm as an additional client (option).
Only one client?
A Business plan is enough (€1,990/year excl. VAT). From the second client, the Consultant plan pays off: each client gets the Business plan, included in your subscription.
Start free- Hosted in FranceData and backups with OVHcloud.
- For professionals onlyCompanies, firms, associations and public bodies.
- A question before choosing?Book a demo
Questions about pricing
What is a scope?
A unit assessed separately: a subsidiary, a site, a product or a client. Each scope has its own controls, audit and statement of applicability.
Can I change plan during the year?
Yes. Upgrading to a higher plan is immediate; the difference is charged pro rata for the remaining period.
Is there a commitment?
The subscription is monthly or annual, depending on the billing you choose, and renews automatically. You can cancel at any time: cancellation takes effect at the end of the current period (terms of sale, article 8).
Where is the data hosted?
By OVHcloud, in France, backups included. Details of the measures and subprocessors are on the Security and trust page.
Which payment methods do you accept?
Card and SEPA direct debit.
Are prices excluding VAT?
Yes. CompliKey is sold exclusively to businesses and organisations; VAT not applicable, article 293 B of the French General Tax Code (CGI).
Can I try the full plan?
Yes. In addition to the free plan, a full 30-day trial is granted after a demo.
Does an invited client contact count as a user?
Yes. Each invited person, contributor or reader, counts towards the plan's user quota. For a consultant, a client's contacts count towards the Business plan included for that client, not towards the consultant's subscription.
What if I exceed the number of controls?
Options let you add controls, scopes or users. Contact us.
What is guided onboarding?
In paid plans, an initial assessment carried out with you in the platform, tailored to your scope, to launch your approach.
What happens to my data if I stop?
You can export it at any time during the subscription. After the contract ends, you can still request an export for 30 days; backup copies are deleted no later than 90 days afterwards (terms of sale, article 11).
Is the MCP server included?
Yes, in every plan, Freemium included. It respects the limits of your plan (scopes, users, controls), with no call quota.
Why a separate Consultant plan?
Its value depends on the number of clients you run, not on the number of scopes of a single organisation.
A question about your case?
A demo on your framework, your scopes and your priorities, with the founder.