Flat pricing.
No per-seat math.

No. ComplianceGuard is a desktop application that runs entirely on your machine. Your evidence data, AWS credentials, and compliance reports are stored in a local database. Endpoint evidence stays on your machine until you explicitly choose to sync it.

Self-hosted: you deploy the dashboard on your own infrastructure, your data stays entirely under your control, and the price is lower because you manage the server — the right fit for regulated industries, government contractors, legal firms, and air-gapped environments. Managed: we host the dashboard for you with zero setup, and we handle uptime, backups, updates, and onboarding. Either way, endpoint evidence never leaves your machines until you sync.

Full evidence collection across all 8 categories, 12 core SOC 2 controls, and your overall compliance score — on 1 machine, for 1 user. Per-control scoring, remediation scripts, PDF reports, and the multi-machine dashboard are part of Pro.

Yes. ComplianceGuard supports all three frameworks. SOC 2 Type II (54 controls), ISO 27001 (47 scored controls), and the HIPAA Security Rule (47 safeguards). The same OS-level evidence pass feeds all three.

Your credentials are encrypted at rest on your machine using HKDF-SHA256-derived Fernet keys and are read only at evidence-collection time.

License keys use Ed25519 cryptographic signatures, verified entirely offline — no license server, no phone-home. That's deliberate: licensing works in the same air-gapped environments the product is built for.