Plans & Features

Choose Your Plan.
Pricing Tailored to You.

Every organisation is different. We build pricing around your size, scope, and compliance requirements. Book a demo to discuss your needs.

STARTER
Starter

Everything you need to get compliant fast. Ideal for SMEs and growing businesses.

Custom Pricing

Pricing tailored to your organisation size and compliance scope.

Request Pricing
✓9 compliance modules included
✓M1 Behavioural Anomaly Detection
✓PCI DSS SAQ Automation
✓UK GDPR 72-hr Breach Detection
✓ISO 27001 + Cyber Essentials
✓Monthly Risk Score + Board Summary
✓Third Party Risk (up to 10 suppliers)
✓Phishing Simulation (up to 10 users)
✓Self-onboarding — live in under 4 hours
✓Email + chat support
✗Multi-tenant management
✗Dedicated account manager
Most Popular
PROFESSIONAL
Professional

Advanced modules and deeper integrations for scaling compliance teams.

Custom Pricing

Pricing tailored to your organisation size and compliance scope.

Request Pricing
✓Everything in Starter
✓SOC 2 Type II assessment module
✓ISO 22301 Business Continuity
✓NDPA (Nigeria) compliance module
✓VAPT / Pen Test workflow automation
✓Multi-environment monitoring
✓Up to 50 users
✓Priority support (4hr SLA)
✓Custom evidence templates
✓API access
✓Advanced reporting + exports
✗Dedicated account manager
ENTERPRISE
Enterprise

Full platform access with dedicated support for large and complex organisations.

Custom Pricing

Volume discounts and bespoke packages available for large organisations.

Contact Sales
✓Everything in Professional
✓Unlimited users
✓Multi-tenant management console
✓Dedicated account manager
✓Custom framework mapping
✓White-label options available
✓1hr SLA / 24/7 support
Custom
Build Your Own Package

Not a perfect fit? We tailor pricing and modules to your exact scope — pick the frameworks, connectors and capacity limits you need, and we’ll assemble a bespoke package with pricing to match. Ideal for regulated, multi-entity or negotiated deployments.

Request a Custom Package
Extend Your Plan

Optional Add-Ons

Bolt on additional capability to any plan.

VAPT Assessment

Annual vulnerability assessment & penetration test by DeCompass’s PCI DSS QSA team. Covers internal, external, and web application scope.

Contact for pricing
Additional Frameworks

Add individual compliance frameworks beyond your plan allowance. NDPR, HIPAA, SOC 2, FCA Guidelines, or custom regulatory mapping available.

Contact for pricing
Compliance Audit Support

Dedicated preparation support for certification audits. Our QSA team will review evidence packs, conduct pre-audit walkthroughs, and liaise with external auditors.

Contact for pricing
Custom Packages

Need Something Bigger?

For organisations with complex regulatory environments, global footprints, or custom security requirements — let’s build the right package together.

Unlimited users & API calls
Private cloud or on-premise deployment
Custom SLA & DPA with data residency
Annual VAPT included
Talk to Sales
Book a Demo
FAQ

Frequently Asked Questions

Still unsure? We’re happy to talk through any of these in a call.

Yes — all plans come with a 14-day free trial, no credit card required. We’ll help you connect your first integration and see real anomalies in your data within the first session.
A user is anyone with a login to the DeCompass platform — analysts, managers, executives, or viewers. Service accounts and API integrations do not count toward your user limit.
Yes. You can upgrade at any time and the change takes effect immediately. Downgrades take effect at the next billing cycle.
Annual plans are billed as a single upfront payment and save you 20% versus monthly billing. You’ll receive one invoice for the full year.
By default, data is processed and stored in UK-based data centres (AWS London region). Enterprise customers can choose EU or Africa data residency. All data is encrypted at rest (AES-256) and in transit (TLS 1.3).
No — DeCompass is complementary to your SIEM. Where a SIEM aggregates logs, DeCompass adds compliance intelligence: it maps threats to specific regulatory clauses, scores entities, and generates audit-ready reports.
PCI DSS v4.0, ISO 27001:2022, GDPR/UK GDPR, SOC 2 Type II, NDPR, FCA/PRA Guidelines, and HIPAA. Additional frameworks are added each quarter based on customer demand.
Yes — we offer discounted pricing for registered charities, NHS trusts, and public sector organisations. Please mention this when booking a demo.