Compliance pricing you can actually budget for

By scope and framework, never by headcount. The plan depends on how many frameworks you need, the size of your environment and whether you want a dedicated deployment. There is no per-framework licence fee and no charge for auditor or supplier seats.

At audit sign-off. Half is invoiced upfront to start the engagement and the balance when your auditor signs, so the incentive sits where it belongs: on getting you certified.

The shared control library, policies written with your team, the risk register, automated evidence collection with hashing, the Trust Center, the Auditor and Supplier Workspaces, and a named compliance lead with weekly check-ins.

The audit firm’s own fee and any penetration test you commission. Certifyi introduces independent auditors and coordinates the engagement but never issues the opinion, so those costs stay separate and transparent.

Scope changes are priced, headcount is not. Because frameworks share one control library, adding ISO 27001 to a SOC 2 programme reuses most of the existing controls and evidence, so the increment is small compared with starting again.

A readiness call is the fastest way to see it: twenty minutes with a compliance lead, working through your scope in the platform. You leave with a scope, a gap list and a realistic date.