Public pricing. Two modules. Nothing hidden.
StartComply is sold as an annual subscription with two priced modules. Both list prices are published on this page, so you know the number before you book a call.
Trusted by 100+ organisations across Europe
NIS2 ready 
DORA aligned 
ISO 27001:2022 
EU-native · EL/EN/BG What StartComply costs
Frameworks and Policies
€4,500 per year. The compliance core: control templates, the policy package and the audit evidence trail for every framework in your scope.
- NIS2
- ISO 27001:2022
- DORA
- Additional frameworks
Every framework and policy package carries the same annual list price.
TPRM and External Vulnerability Assessment
€1,500 per year. Third party risk management, priced and bought separately from the framework module.
- Send questionnaires to suppliers and evaluate their responses
- Run an external vulnerability assessment on a vendor domain
- Run an external vulnerability assessment on your own domain
How it works
Each module is an annual pool of credits. You buy the pool, and the platform draws from it as you use the product.
Framework credits are consumed when you select a framework and policy package. TPRM credits are consumed gradually, via questionnaire and vulnerability assessment consumption.
The platform subscription is annual and credits do not roll over from the previous period.
Additional 10 user packages can be purchased at a small percentage fee.
One framework or four, the platform is the same. There is no starter edition missing the parts you need to pass an audit. What changes with price is the breadth of frameworks in scope, not the depth of the platform.
What every plan includes
There is no starter edition. Every customer gets the full operational core, whatever their scope.
Mapped control templates
Controls mapped in advance to NIS2 Article 21, the DORA pillars and ISO 27001:2022 Annex A, for every framework in your scope.
The policy package
The full policy set that goes with each framework, ready to adapt rather than write from a blank page.
Risk assessment workflows
Continuous risk assessment with a complete audit trail behind every decision, owner and follow up.
Incident classification and reporting
Workflows aligned to the NIS2 24 and 72 hour notification windows and to the DORA reporting timelines.
Evidence repository
One central, version controlled store for every document an auditor will ask to see.
Reports, access control and support
Audit ready reports produced as a by product of normal operations, role based access for compliance, IT, legal and management, and direct support from the team that builds the product.
Built for European compliance teams.
EU organisations with real scope and teams of up to 1000
- Mid market and SMB companies in the EU under NIS2 scope
- Financial entities and ICT providers preparing for or operating under DORA
- Companies pursuing or maintaining ISO 27001:2022 certification
- Organisations that have outgrown spreadsheets but cannot justify enterprise GRC pricing
- Compliance leads who want one platform rather than a stack of loosely connected tools
Why the price works: we do not charge you for breadth you never open. For an EU mid market company that almost always means a materially lower total cost.
Large enterprises with a dedicated GRC function
- You need fifty frameworks rather than the handful that actually apply to you
- You need audit committee voting workflows and board governance modules
- You have a GRC team large enough to run a nine month implementation programme
- You want a platform that covers every framework on the planet, at enterprise cost
We will tell you. If StartComply is not the right fit we say so on the first call, and where we can we point you somewhere better. We would rather lose a deal than oversell a platform.
How StartComply compares
Most compliance platforms will not tell you the price until you have sat through a demo. Here is what you are actually comparing when they do.
Comparison reflects common pricing models in each category, not any single named vendor. All trademarks belong to their respective owners.
Pricing FAQ
Is the price per framework or per company?
Per framework. Every framework and policy package carries the same annual list price, so a single framework scope costs €4,500 per year and a wider scope is priced to match.
What are credits?
Credits are the annual allowance you buy up front. Framework credits are consumed when a framework and policy package is selected. TPRM credits are consumed gradually, as questionnaires are sent and vulnerability assessments are run. [Insert: how many questionnaires and assessments the TPRM pool covers.]
Do unused credits roll over?
No. The subscription is annual and credits do not roll over from the previous period.
Are there implementation or consulting fees?
No. Implementation is included. The platform is built to be operational in days rather than months, so there is no separate professional services line item. If your rollout is genuinely complex, a multi entity group for example, we tell you up front and quote it as part of the same proposal.
Can I start with one framework and add more later?
Yes. Many customers start with NIS2 or ISO 27001:2022 and add DORA or another framework as their scope expands. The platform, the workflows and the evidence trail are identical whether you run one framework or four.
Do I have to buy both modules?
No. The two modules are priced and bought separately. Many organisations start with the framework that applies to them and add third party risk management later.
What if I need something StartComply does not do?
We tell you. If your need sits outside the product and outside the roadmap we say so directly, and where we can we recommend a complementary tool.
Client Testimonials
“We evaluated enterprise platforms costing 10x more. StartComply does what we need at a price that makes sense.”Elena Kowalski
“Finally, a compliance tool that understands European regulations. StartComply got us audit-ready in weeks, not months.”Maria Papadopoulou
“The AI policy engine alone saved us hundreds of hours. And the third-party risk management is exactly what DORA requires.”Thomas Müller
