Serious capability.
Un-serious procurement pain.
One subscription per organisation, users included, every module in the box from Professional up. Prices are per month, billed annually, excluding VAT. No "contact sales to learn the price" games.
Essentials
For the team replacing the spreadsheet, properly.
- 10 users included
- Risk register, multi-facet assessments & approvals
- Controls, testing & effectiveness lifecycle
- Policies with immutable versions & attestations
- Exceptions register (time-bound by design)
- Issues & actions, campaigns/RCSA
- 3 framework libraries with derived coverage + SoA export
- Boards & reporting, hash-chain audit trail
- Interface in EN · NL · FR · DE
Professional
The full platform: quantify, foresee, prescribe, automate.
- 25 users included · everything in Essentials, plus:
- Monte Carlo quantification in assessments (EL, VaR 99, ES 95)
- ROSI business cases & one-click treatment recommendations
- Foresight: KRI breach ETAs & itemised pressure index
- Intelligence & regulatory horizon (official EU/US feeds)
- Automation rules with execution log & webhooks
- Unlimited framework libraries · evidence management
- TPRM with vendor portal & continuous signals
- ESG/CSRD, Models & EU AI Act, credit limits, scenarios
- Data governance: asset register, DAMA data quality, lineage
- Ask Sceau copilot + full MCP tool surface
Enterprise
For regulated institutions and groups.
- Unlimited users · everything in Professional, plus:
- Single-tenant sovereign deployment option (your EU instance)
- SSO/SAML & SCIM provisioning
- DORA Register of Information export
- Signed audit-chain attestation for board packs
- Custom framework & control library onboarding
- Sandbox tenant & API rate ceiling lifted
- 99.5% uptime SLA with credits
- Priority support · named contact · quarterly roadmap voice
Additional users: €15/user/month on Essentials and Professional. Implementation pack (data migration from spreadsheets or a legacy suite, framework mapping, two workshops): from €2,500 one-off. Monthly billing available at +15%. All prices exclude VAT.
Founding-customer programme
The first ten organisations on each tier get 50% off for the first year, direct access to the builders, and a permanent line in our changelog. In exchange we ask for honest feedback and, if we earn it, a reference call. That's the whole deal.
Questions we actually get
Can we pilot before committing?
Yes — a 30-day pilot on your own data, on any tier, with a two-hour onboarding workshop included. If you walk away, we delete the tenant and provide written confirmation of erasure.
Where is our data?
EU only — Google Cloud's Belgian region (europe-west1, St-Ghislain) with EU data residency, operated by our Belgian entity; tenant isolation is enforced by PostgreSQL row-level security, and Enterprise can run a dedicated sovereign instance on EU-owned Hetzner infrastructure. privacy policy for the full processing picture.
How does migration work?
Registers, controls and open items import from structured spreadsheets in the onboarding workshop; the implementation pack covers exports from legacy suites. Framework baselines are pre-loaded — you map, you don't re-type.
What counts as a user?
A named login. Read-only auditor accounts and the supplier portal don't consume seats. We will never charge you for giving your auditor access to the truth.
Is the AI optional?
Entirely. The copilot and MCP surface can be disabled per tenant. When enabled, AI writes are always drafts pending human review, every answer cites its sources, and prompts are logged to your own tenant.
Contract terms?
Annual term, 60-day notice, no auto-inflation clauses. On termination you receive a complete export (structured data + documents + the audit chain) and erasure confirmation. Exit should be boring.