Straightforward Pricing

Three plans for different stages of compliance maturity. Annual billing saves 20%.

Starter

$349/mo

For teams preparing for their first SOC 2 audit

  • 1 compliance framework (SOC 2 or ISO 27001)
  • Up to 10 integrations
  • Daily evidence collection
  • Gap detection and remediation queue
  • Policy library with 22 templates
  • Quarterly access review automation
  • Evidence Room (1 auditor seat)
  • Email support, 1 business day SLA
Get Started

Enterprise

Custom

For organizations with complex environments or multi-entity compliance requirements

  • All Growth features
  • Multi-entity and subsidiary management
  • HIPAA readiness mapping (beta)
  • Custom retention policies (up to 10 years)
  • Dedicated Customer Success Manager
  • REST API access for custom integrations
  • Unlimited auditor seats
  • Custom SLA agreements
  • Quarterly compliance review calls
  • On-premise deployment option
Contact Sales

All plans include a 14-day free trial. No credit card required to start. Annual billing reduces each plan by 20%.

What each plan includes

Feature Starter Growth Enterprise
Frameworks 1 2 Custom
Integrations Up to 10 Unlimited Unlimited
Evidence collection frequency Daily Daily + on-demand Configurable
Access reviews Quarterly Monthly or quarterly Custom cadence
SSO (SAML 2.0)
API access
Data retention 3 years 7 years Up to 10 years
Support SLA 1 business day 4 hours Custom

Common Questions

The trial gives you full access to the Growth plan for 14 days. You can connect integrations, run evidence collection, review your gap report, and explore the Evidence Room — the same experience as a paying customer. No credit card is required to start.
Yes. Upgrades take effect immediately and the price difference is prorated to your current billing period. Downgrading from Growth to Starter is available at the end of your billing cycle. You will not lose any previously collected evidence when downgrading.
CompliRun holds read-only access to your connected integrations. We do not execute changes in your environment. Evidence is stored with AES-256 encryption at rest, in isolated per-tenant S3 buckets. TLS 1.3 is enforced for all data in transit. Full details are in our Privacy Policy.
CompliRun does not perform audits or issue certifications. It prepares your evidence and monitors compliance between audits. You still need a licensed CPA firm for SOC 2 or an accredited certification body for ISO 27001. We can refer you to auditors who are familiar with the CompliRun Evidence Room format, which typically reduces their fieldwork time.
Most teams complete their initial setup — authorizing integrations, reviewing the control map, and running a first evidence collection — within one business day. We provide onboarding calls for Growth and Enterprise customers. Starter customers have access to written setup guides and video walkthroughs covering all 34 integrations.

Start your free trial today

14 days of the Growth plan — no credit card required. Cancel any time.

Get Started Free