AI security that scales with your growth
Prices in Euros (HT), benchmarked against European GRC market rates. Every plan includes Sofwedo's AI agents, EU data residency, and sovereign LLMs hosted on ISO 27001-certified infrastructure.
Compliance Plans
Continuous compliance automation across 140+ frameworks.
Starter
For startups starting their first audit
- 1 framework (SOC 2, ISO 27001 or GDPR)
- Up to 25 employees
- Automated evidence collection
- 20+ integrations
- Email support
Growth
Most popular for scale-ups
- Up to 3 frameworks
- Up to 150 employees
- Continuous control monitoring
- 100+ integrations
- Dedicated compliance success manager
- Trust center & customer questionnaires
Enterprise
For regulated industries
- Unlimited frameworks (HDS, DORA, NIS2, HIPAA…)
- Unlimited employees & entities
- Custom controls & policies
- SSO, SCIM, audit logs
- 24/7 priority support & SLA
Risk Management Plans
Centralized cyber and operational risk intelligence.
Essential
Structured risk register
- Up to 100 risks
- ISO 27005 & EBIOS RM templates
- Heatmaps & risk scoring
- CSV export
Advanced
Quantitative risk at scale
- Unlimited risks & treatments
- FAIR quantitative analysis
- Workflow approvals & reminders
- Integration with Compliance suite
- Executive reporting
Enterprise
Group-wide governance
- Multi-entity consolidation
- Custom risk taxonomies
- API access & data residency in EU
- Dedicated risk advisor
Audit Plans
Accelerate internal and external audits.
Team
First internal audits
- 2 audit projects / year
- Evidence vault (50 GB)
- Standard audit templates
Business
Recurring audit programs
- Unlimited audit projects
- Evidence vault (500 GB)
- Automated walkthroughs
- Auditor collaboration portal
Enterprise
Big 4 & regulator-ready
- Unlimited storage & retention
- Custom workpapers & PBC lists
- Read-only auditor access
- Dedicated audit success engineer
Third-Party Risk Management Plans
Continuously monitor vendors, suppliers, and partners.
Starter
Vendor inventory & assessments
- Up to 25 vendors
- Standard security questionnaires
- Tiering & risk scoring
Growth
Active monitoring
- Up to 150 vendors
- Continuous external attack surface monitoring
- Automated reassessments
- DORA & NIS2 reporting
Enterprise
Critical supply chain
- Unlimited vendors & 4th parties
- Custom questionnaires & SLAs
- Threat intelligence enrichment
- Dedicated TPRM analyst
Policy Management Plans
Centralized policy lifecycle and attestations.
Starter
Policy library + attestations
- Up to 50 employees
- 20+ policy templates (FR & EN)
- Annual attestation campaigns
Growth
Versioning & workflows
- Up to 250 employees
- Approval workflows & version history
- Automated reminders
- HRIS integrations
Enterprise
Group policy governance
- Unlimited employees & entities
- Multi-language policies
- Custom branding & workflows
- Dedicated CSM
Unify GRC and save more
Combine multiple products into a single platform for better visibility and lower TCO.
GRC Essentials
Compliance + Risk + Policy
Save ~15% vs individual products
GRC Complete
All 5 products, unified
Save ~25% vs individual products
Are prices in EUR and tax-inclusive?
All prices are displayed in Euros, excluding VAT (HT). French VAT (TVA 20%) applies to customers in France. EU reverse charge available for VAT-registered businesses.
Do you offer annual discounts?
Yes — annual upfront billing comes with a 15% discount across all plans and bundles.
Where is my data hosted?
Sofwedo hosts all customer data within the European Union on ISO 27001 and HDS-certified infrastructure.
Can I switch plans later?
Absolutely. You can upgrade, downgrade or add products at any time. Changes are prorated.