Startup pricing is published. Complex programs are scoped.

The Startup program includes one framework, all 16 core modules, all integrations, all agent operations, and policy generation through the auditor-ready evidence package. That's $499/month, billed annually. It is designed for a standard startup audit scope, typically up to 50 employees and one legal entity. Eligibility also reflects environment complexity, evidence populations, and implementation requirements—not headcount alone.

No. All 16 core modules are in the Startup program, including the three that competitors most often charge extra for: Trust Center, vendor management (third-party risk), and the AI security questionnaire assistant. There are no per-module or per-seat fees. Scale & Enterprise adds organization capabilities such as SAML SSO and a tailored implementation, rather than withholding core compliance modules.

Scale & Enterprise is for programs with complex environments, larger evidence populations, multiple entities or business units, custom integration or control requirements, or dedicated implementation needs. It includes SAML SSO. Pricing is scoped to the program, not determined by employee count alone.

Yes. Teams of five or fewer can contact us for micro-startup pricing. It is the same product with every module included and your own independent auditor, priced for a smaller scope and quoted by email rather than published. See the micro-startup page for eligibility and how to ask.

You keep all of them, and they share one evidence set. Frameworks are mapped through a canonical control catalog, so a single MFA scan satisfies SOC 2 CC6.1 and HIPAA §164.312(d) at the same time. You are not rebuilding a second control matrix, a second vendor register, or a second policy set. Competitors typically charge $3–10K per additional framework and maintain separate evidence.

No, and that's deliberate. AICPA independence rules prevent the firm that prepares your compliance program from also auditing it. You pick the auditor (we work with any), typically $5–15K for a SOC 2 Type I from an independent boutique firm — peer-reviewed firms quoted us as low as $3K in September 2026. Do the all-in math: $5,988 for the platform plus your auditor is roughly $11–21K, a fraction of the $60–180K traditional stack, and the report comes from an auditor with no stake in the platform that prepared you. Bundles that fold the audit into the platform price can't say that.

Vanta and Drata are quote-based; Vendr's transaction data puts companies under 50 employees at $12–25K/year for one framework, before modules and headcount, before the person-hours it takes to actually operate them ($8–15K/month if you outsource that work). Screenata is $5,988/year per framework ($499/mo) and operates itself: scheduled scans, evidence collection, Slack briefings, and policy generation run as agent operations, not checklists waiting for a human.

4–6 weeks from connecting your systems to a complete Type I package, policies, risk assessment, system description, network diagram, org chart, control matrix, vulnerability review, and oversight minutes. Founder effort is measured in hours, not weeks.

It leaves with you. Your evidence packs are signed and exportable, verifiable outside Screenata with the free verify CLI, so your compliance program is portable by design rather than locked to our platform.