Pricing
Every deployment runs on the same platform. You licence the capability packages your obligations actually require, and we price against the scope you run them at.
Trusted by security and privacy minded organizations across the world
Every deployment
Whatever you licence, you get the same system of record — connected to your systems, mapped once, and continuously proven.
ISO 27001, SOC 2, GDPR, DORA, NIS2, ISO 42001 and 30+ frameworks in total, sharing the same controls and the same evidence. The next standard reuses what you already collect.
20+ integrations across cloud, identity, code and collaboration turn what you already run into versioned, mapped evidence. No screenshots, no quarterly scramble.
Agents that draft policies, map controls and surface the next most valuable task against your real data — with your team approving every change, and your data never used to train a model.
EU data residency, role-based access control, published subprocessors, zero data retention on every AI call, a DPA and an SLA. The things procurement asks for are not an upgrade path.
Capability packages
Each package adds capability to the same system of record. Start where the pressure is, and add the next one without a second implementation.
Derive records of processing from the systems that actually hold the data, and keep assessments, transfers and retention current as those systems change.
Pricing based on the systems connected and the processing activities in scope.
Book a demoHow this worksPut agents to work across the systems you already run — mapping controls, gathering evidence and drafting policies against your live program, with your team accepting every change.
Pricing based on the systems the agents act across and the volume of work they run.
Book a demoHow this worksRun every framework your buyers and regulators ask for from one control library, and walk into audits with the evidence already collected.
Govern the models and agents you ship under the EU AI Act and ISO 42001: an AI register built from your repositories, one finding per legal claim, and controls attached to what is actually running.
Score vendors by the data and access they actually hold, collect their evidence once, and keep the register current between reviews.
Pricing based on the vendors under management and the assessment volume you run.
Book a demoHow this worksRun a register scored off live signals from your stack — security findings, vendor posture and control status — with every risk owned and tracked to treatment.
Pricing based on the risks under management and the systems feeding the register.
Book a demoHow this worksHow we scope it
No public price list, and no mystery either — these are the four variables we work through with you on the first call.
Start with the obligations you actually have. Adding a package later reuses the controls and evidence already in place.
Frameworks, connected systems, processing activities, AI systems, vendors — the volume the platform governs.
Headcount in scope for policies, training and access, and the number of legal entities you run.
Onboarding depth, migration from an incumbent, and the support model your program needs.
Book a demo
Tell us what you're obligated to prove and to whom. We'll show you the platform against it and price the packages you'd actually run.
The platform: one control library mapped across 30+ frameworks, continuous evidence from 20+ integrations, Cortex AI grounded in your program, EU data residency, role-based access control, a DPA and an SLA. Also every trust commitment we make — we never train on your data, and every AI feature runs under zero data retention — which apply to every customer on every package rather than to an enterprise tier. Packages add capability on top; they don't unlock the basics.
Yes. Every package runs on the same system of record, so adding Privacy Automation or AI Governance later reuses the controls, evidence and assets you already have. There is no re-platforming and no second implementation.
By the scope it governs. Compliance & Audit by the frameworks in scope and workforce size, Privacy Automation by connected systems and processing activities, AI Governance by the AI systems under governance, and Third-Party & Supply Chain Risk by the vendors under management.
Book a demo. We walk the platform against your obligations, agree the packages and scope, and send a written quote — or tell you Noru isn't the right fit. For procurement and invoicing questions, reach sales@noru.tech.
See it running against your own systems.
