Pricing
Every deployment runs on the same platform. You licence the capability packages your obligations actually require, and we price against the scope you run them at.
Every deployment
Whatever you licence, you get the same system of record — connected to your systems, mapped once, and continuously proven.
ISO 27001, SOC 2, GDPR, DORA, NIS2, ISO 42001 and 30+ frameworks in total, sharing the same controls and the same evidence. The next standard reuses what you already collect.
20+ integrations across cloud, identity, code and collaboration turn what you already run into versioned, mapped evidence. No screenshots, no quarterly scramble.
Agents that draft policies, map controls and surface the next most valuable task against your real data — with your team approving every change.
EU data residency, role-based access control, published subprocessors, a DPA and an SLA. The things procurement asks for are not an upgrade path.
Capability packages
Each package adds capability to the same system of record. Start where the pressure is, and add the next one without a second implementation.
Run every framework your buyers and regulators ask for from one control library, and walk into audits with the evidence already collected.
Derive records of processing from the systems that actually hold the data, and keep assessments, transfers and retention current as those systems change.
Pricing based on the systems connected and the processing activities in scope.
Book a demoHow this worksGovern the models and agents you ship under ISO 42001 and the NIST AI RMF, with an inventory, risk assessments and controls attached to what is actually running.
Score vendors by the data and access they actually hold, collect their evidence once, and keep the register current between reviews.
Pricing based on the vendors under management and the assessment volume you run.
Book a demoHow this worksHow we scope it
No public price list, and no mystery either — these are the four variables we work through with you on the first call.
Start with the obligations you actually have. Adding a package later reuses the controls and evidence already in place.
Frameworks, connected systems, processing activities, AI systems, vendors — the volume the platform governs.
Headcount in scope for policies, training and access, and the number of legal entities you run.
Onboarding depth, migration from an incumbent, and the support model your program needs.
Book a demo
Tell us what you're obligated to prove and to whom. We'll show you the platform against it and price the packages you'd actually run.
The platform: one control library mapped across 30+ frameworks, continuous evidence from 20+ integrations, Cortex AI grounded in your program, EU data residency, role-based access control, a DPA and an SLA. Packages add capability on top; they don't unlock the basics.
Yes. Every package runs on the same system of record, so adding Privacy Automation or AI Governance later reuses the controls, evidence and assets you already have. There is no re-platforming and no second implementation.
By the scope it governs. Compliance & Audit by the frameworks in scope and workforce size, Privacy Automation by connected systems and processing activities, AI Governance by the AI systems under governance, and Third-Party & Supply Chain Risk by the vendors under management.
Book a demo. We walk the platform against your obligations, agree the packages and scope, and send a written quote — or tell you Noru isn't the right fit. For procurement and invoicing questions, reach sales@noru.tech.
See it running against your own systems.
