Pricing
Flat pricing.
No per-seat math.
One flat rate per deployment, billed annually. Run it on your own infrastructure, or let us host the dashboard for you.
Free
See exactly where you stand on SOC 2 before you pay anything.
- Evidence collection (all 8 categories, all 3 OSes)
- All 43 SOC 2 criteria, overall coverage score
- Evidence coverage and readiness trend
- 1 machine · 1 user · community support
Pro
billed annually · $1,788/yr
Everything you need to walk into the audit with a complete evidence pack.
- SOC 2 (43 criteria) · ISO 27001:2022 (93) · HIPAA (47) · GDPR (38)
- Per-control scoring, gaps, and remediation scripts
- Control heatmap and evidence coverage trend per framework
- Manual evidence upload + evaluation history
- PDF evidence reports, mapped control by control
- Cloud dashboard (up to 10 machines, 10 users)
- Email support
Enterprise
billed annually · $7,188/yr flat
Tamper-evident, air-gapped sovereignty for regulated industries.
- Everything in Pro
- Tamper-evident audit log (HMAC-SHA256 hash chain)
- RBAC (admin and auditor roles)
- Custom PDF branding
- Full compliance data export (NDJSON)
- Air-gapped Docker bundle · zero telemetry
- Unlimited machines and users · dedicated SLA
Self-hosted: your data stays entirely on your infrastructure. Managed: we host the dashboard, and your endpoint evidence still never leaves your machines until you sync.
Enterprise
Air-gapped, tamper-evident, fully sovereign.
SHA-256 hash-chained audit log, RBAC (admin + auditor), custom PDF branding, NDJSON data export, and a hardened Docker bundle with zero outbound calls. For regulated industries, government, NHS/healthcare, legal, and finance.
FAQ
Common questions.
No. ComplianceGuard is a desktop application that runs entirely on your machine. Your evidence data, AWS credentials, and compliance reports are stored in a local database. Endpoint evidence stays on your machine until you explicitly choose to sync it.
Self-hosted: you deploy the dashboard on your own infrastructure, your data stays entirely under your control, and the price is lower because you manage the server. It is the right fit for regulated industries, government contractors, legal firms, and air-gapped environments. Managed: we host the dashboard for you with zero setup, and we handle uptime, backups, updates, and onboarding. Either way, endpoint evidence never leaves your machines until you sync.
Full evidence collection across all 8 categories on Windows, macOS, or Linux, all 43 SOC 2 criteria with an overall evidence coverage score, and the coverage trend, on 1 machine for 1 user. Per-control scoring, remediation scripts, PDF reports, and the multi-machine dashboard are part of Pro.
Yes. ComplianceGuard supports four frameworks: SOC 2 (43 criteria from the 2017 Trust Services Criteria), ISO/IEC 27001:2022 (all 93 Annex A controls), the HIPAA Security Rule (47 safeguards), and GDPR (38 obligations). The same OS-level evidence pass feeds all four.
No, and we won't pretend otherwise. The score measures evidence coverage: whether the evidence types each criterion expects have been collected. It is not a legal or audit determination of compliance. Criteria that depend on organizational facts, like policy attestations or board oversight, stay not assessed until you upload that evidence. A SOC 2 opinion comes from a licensed CPA firm; ComplianceGuard gets you to that conversation prepared.
Your credentials are encrypted at rest on your machine using HKDF-SHA256-derived Fernet keys and are read only at evidence-collection time.
License keys use Ed25519 cryptographic signatures, verified entirely offline, with no license server and no phone-home. That's deliberate: licensing works in the same air-gapped environments the product is built for.
Start with the free scan.
Download, run the readiness scan, and see exactly where you stand in minutes.