Priced for one person with a spreadsheet, not a procurement cycle.
First run free, no account. Solo for one person. Team for the function.
First run
- Paste your sheet, or start from any of 29 full frameworks
- Every control mapped to the evidence auditors commonly ask for, the system it lives in and a first move
- Print it
- Save one sheet with a sign-in link
Solo
- Unlimited saved sheets
- Export to .xlsx with every artefact, category and system
- Evidence-request pack: a ready-to-send request per control owner
- Evidence requests on a saved sheet: each control owner gets a private link to their own lines, answers by reference with the period covered, and nothing counts as accepted until you accept it
- Re-run any sheet as your tracker changes
- Two-step sign-in with an authenticator app
- Your own audit log of sign-ins, changes and exports
- Delete what you saved, or your whole account, yourself
Team
- Everything in Solo, for everyone in your organisation
- Evidence log: a timestamped, attributed record against each artefact
- Audit-trail export for your assessor
- Editors review evidence requests too: accept, or return with a reason, every decision timed and attributed
- Any of the 29 frameworks, side by side on the same sheet
- Teammates with owner, editor and viewer roles, no limit on how many
- Two-step sign-in you can require for everyone
- An audit log of every sign-in, change and export, exported as CSV
- Delete your data yourself
Consultants, auditors and virtual CISOs: either plan covers the client engagements you run, and each client keeps the sheets made for them (see the terms). One click to checkout: card, Apple Pay or Google Pay, and your account is created from the email you give there, no sign-up form and no link to wait for. Prices in US dollars; VAT or GST added where it applies. Cancel any time from the billing portal; refunds on request within 30 days. Two-step sign-in, teammates, the audit log and deleting your data are on your account page. Evidence requests record your review of each answer; they never send email themselves, never store files, and your assessor still decides what is sufficient.