Vendor due diligence, priced in public
Start free. Upgrade when a customer asks for more than a spreadsheet. No sales call, no metered AI, no data deleted if a card fails.
Free
US vendor onboarding and ISO 9001 supplier evaluation, free for good.
$0 forever
1 seat · 2 vendors
Start freeNo card required
Starter
For the first handful of vendors a customer asked you to vet.
$29 /month
2 seats · 6 vendors
Start 14-day trialCard required · cancel any time
Growth
Most popularA real vendor programme, run by one person part-time.
$99 /month
5 seats · 30 vendors
Start 14-day trialCard required · cancel any time
Business
SSO, API and supply-chain depth for a portfolio in the hundreds.
$299 /month
15 seats · 150 vendors
Start 14-day trialCard required · cancel any time
Enterprise
Custom limits, procurement paperwork and a named contact.
Custom
Custom seats and vendors
Talk to usInvoiced annually
On every plan
- Deterministic, reproducible scoring
- Account-less vendor portal
- SOC 2, ISO 27001 and NIST CSF framework mapping
- Evidence uploads with antivirus scanning
Compare plans
| Feature | Free | Starter | Growth | Business | Enterprise |
|---|---|---|---|---|---|
| Seats | 1 | 2 | 5 | 15 | Custom |
| Vendors | 2 | 6 | 30 | 150 | Custom |
| Due diligence | |||||
| US vendor due-diligence onboarding packW-9, insurance, ownership, banking and compliance questions for onboarding a US supplier. | Included | Included | Included | Included | Included |
| ISO 9001:2015 supplier evaluation packClause 8.4 supplier evaluation and re-evaluation, ready for a certification audit. | Included | Included | Included | Included | Included |
| OFAC sanctions screeningScreen every vendor against the US Treasury SDN list, with adjudication on record. | Included | Included | Included | Included | Included |
| Audit-ready PDF reportEvery score with its working, evidence digests and audit-trail citations. | Included | Included | Included | Included | Included |
| Hash-chained audit trailAppend-only, tamper-evident record of every change, with on-demand verification. | Included | Included | Included | Included | Included |
| Automation | |||||
| AI document analysisFindings extracted from SOC 2 reports and policies, grounded in quoted text. Flat price, not metered. | Not included | Included | Included | Included | Included |
| Automated vendor chasing and remindersEscalating reminders to vendors sitting on a questionnaire, with a hard stop. | Not included | Included | Included | Included | Included |
| CSV exportExport the vendor inventory, honouring the active filters. | Not included | Included | Included | Included | Included |
| Monitoring and integrations | |||||
| Continuous monitoring (lite)Certificate expiry, email authentication and breach signals between reviews. | Not included | Not included | Included | Included | Included |
| Slack alertsAlerts, approvals and the weekly digest in Slack. | Not included | Not included | Included | Included | Included |
| Jira and Linear ticketsRemediation findings become tickets; status flows back. | Not included | Not included | Included | Included | Included |
| Trust centerA publishable trust profile for your own customers' diligence. | Not included | Not included | Included | Included | Included |
| Regulatory packs (DORA, NIS2, HIPAA, PCI DSS)Question and control packs for regulated verticals. | Not included | Not included | Included | Included | Included |
| Vendor discovery (Google Workspace, Microsoft Entra)Find the vendors already connected to your identity provider. | Not included | Not included | Included | Included | Included |
| Security and scale | |||||
| SAML single sign-onSign in through your identity provider. | Not included | Not included | Not included | Included | Included |
| SCIM provisioningUsers created and removed from your identity provider. | Not included | Not included | Not included | Included | Included |
| Public API keysScoped keys for the documented REST API. | Not included | Not included | Not included | Included | Included |
| Nth-party and concentration riskShared subprocessors across your vendor portfolio. | Not included | Not included | Not included | Included | Included |
| MCP serverYour inventory, scores and audit trail available to AI agents. | Not included | Not included | Not included | Included | Included |
| Verifiable evidence receiptsExportable, independently verifiable attestation of an assessment and its evidence. | Not included | Not included | Not included | Included | Included |
Pricing questions
- Is the Free plan really free?
- Yes. One seat, two vendors, US vendor onboarding, the ISO 9001 supplier evaluation pack, OFAC screening, the PDF report and the audit trail, with no card and no time limit.
- How does the trial work?
- Every paid plan starts with a 14-day trial. A card is required up front; cancel before the trial ends and you are not charged. One trial per organization.
- Is the AI metered?
- No. AI document analysis is included at a flat price from Starter up. We do not sell credits or ration uses.
- What happens if a payment fails?
- You get a grace period to update your card. After it, the organization moves to Free plan limits. Nothing is deleted, and paying restores the plan.