Pricing
Every plan starts with a 14-day free trial
No card to start. Use every module for two weeks, then pick the plan that matches the number of ICT contracts you actually manage. Annual billing gives you two months free.
Not sure yet? Try the validator free first — no account, no card, and your file never leaves your browser.
€990per year
- Hosted vendor passport with a public trust link
- Unlimited Article 30 contract schedules
- Downloadable evidence pack for RFPs
- 3 seats, one workspace
- 200 assistant messages a month
€2,490per year
- Full ESA register validation: RT.01.01, RT.02.01, RT.02.02
- LEI resolution and fourth-party chain checks
- Incident countdown with 4h / 72h / 1-month email reminders
- Saved history and supervisor-ready exports
- 5 seats · 500 assistant messages a month
€4,490per year
- Everything in Professional
- Higher register limits and the vendor passport module
- 10 seats · 1,500 assistant messages a month
- Priority email support
€7,990per year
- Unlimited entities and register rows
- Client workspaces, roles and onboarding
- Unlimited seats · 5,000 assistant messages a month
- Priority support
Works with your national regulator — included in every plan
Pick your competent authority and your incident deadlines, activity log and exports are worded for it: the Central Bank of Ireland, BaFin in Germany, the ACPR in France or DNB in the Netherlands. Every deadline, channel and form reference comes from the authority's own published pages, with a source link, and we say plainly where an authority has not published something.
How we compare
| Tool | Typical annual cost | Register validation | Incident countdown | Contract schedules | Vendor passport | AI assistant |
|---|---|---|---|---|---|---|
| DORA Workbench Professional Best value | €2,490/year | |||||
| REGREP (RoI module) | from €1,000/year | |||||
| ComplyJet | $4,000–$6,400/year | — | ||||
| Vendorica Professional | €399/month (~€4,788/year) | — | ||||
| SureCloud | from £15,000/year | — | — | |||
| ProcessUnity | €18,000+/year | — |
Competitor prices are from their public pricing pages as of September 2026 and may have changed — follow the linked price for the source. Feature columns reflect each product's published feature set; a dash means we couldn't confirm it publicly.
Security posture, side by side
The large GRC platforms hold certifications we do not have yet, and we say so. What we do publish openly — EU data residency, our full sub-processor list, a ready data processing agreement, and register files that are never uploaded in the first place — is what a third-party risk team actually has to fill in on the questionnaire.
The last column is the one nobody else can tick: their register validators are server-side, so your vendor spreadsheet has to be uploaded before it can be checked. Ours is parsed and validated inside your own browser, and only the results you choose to save are ever stored.
| Tool | Certification | EU data residency | Sub-processors published | DPA published | Files stay in your browser |
|---|---|---|---|---|---|
| DORA Workbench | None yet — ISO 27001-aligned controls | ||||
| ProcessUnity | ISO 27001 certified | — | — | — | |
| SureCloud | ISO 27001 certified | — | — | — | |
| Vendorica | Not published | — | — | — | |
| ComplyJet | Not published | — | — | — | |
| REGREP | Not published | — | — | — |
Based on each vendor's public website as of September 2026; a dash means we couldn't confirm it publicly, not that it is absent. Our own controls, sub-processors and a pre-answered supplier questionnaire are on the security & trust page.
Prices exclude VAT, which is calculated at checkout. Registers are validated in your browser, so nothing leaves your machine unless you choose to save it to your account. Saved data is hosted in the EU and isolated to your workspace by row-level security — see our privacy & data protection notice and terms, including the refund policy.