Published prices. No quote calls.

An in-scope supplier is one whose disruption, compromise, or substandard security would materially affect your essential or important service under NIS2 — not your whole vendor master, just the suppliers you actually have to track. Most regulated mid-market buyers have between 10 and 80 in-scope suppliers, depending on size and sector. A 100-person Slovak utility typically lands in the 20–35 range. A 400-person fintech often sits closer to 50–80. Manufacturing buyers concentrate in fewer, more critical suppliers; SaaS-heavy buyers tend toward longer in-scope lists.

Your account holds a broader register of suppliers than the ones you actively assess — the in-scope suppliers plus suppliers you are tracking in the background. You pay for in-scope suppliers, not for everyone in the register. The register exists so you can map your full vendor landscape in one place, then promote suppliers into in-scope as your assurance programme grows. Total supplier caps: 50 in Free, 250 in Starter, 750 in Growth, 5,000 in Enterprise (uncapped on request).

No. One supplier counts as one in-scope supplier per year, no matter how many process areas you assess them against — governance, incident handling, BC/DR, supply chain dependencies, secure development, access control, asset and logging. Reassessments triggered by certificate expiry, incident, or scheduled review do not count as additional suppliers. The pricing follows the supplier, not the workload.

You can add a Supplier Uplift pack for €1,200 a year, which adds ten in-scope suppliers to your current tier. Up to three packs stack on Starter or Growth — beyond that we will walk you through the next tier instead. Uplift packs are pro-rated to the remainder of your annual term. Enterprise has uncapped in-scope supplier counts and does not need uplift packs.

Paid tiers bill annually at launch. Every hour spent operating a monthly billing pipeline is an hour not spent shipping V1.2. Annual matches how every comparable product in the market sells — Diligent 3rdRisk, OneTrust, Vanta. The pilot is your trial until subscriptions open with V1 (listed on the Microsoft Marketplace Q4 2026; commercial launch Q1 2027). If V1 signups tell us monthly is what mid-market buyers want, we'll add it on Microsoft Marketplace. Until then: one invoice a year, on the date you sign.

No. Tiers include a fixed number of buyer users — 2 in Free, 5 in Starter, 15 in Growth, unlimited in Enterprise. If you need more users on a tier, that is a signal to look at the next band, not a per-seat upsell.

Yes — the Microsoft Marketplace listing goes live Q4 2026, with V1 commercial launch in Q1 2027; subscription cost is committable against your Microsoft Azure spend. Direct billing will follow. Pilot customers join under a direct agreement at free or compute-cost pricing.

Suppliers do most of the work in the assurance loop. Charging you to answer your customer's questions would be backwards. The free supplier tier covers a verified trust profile, a reusable evidence library, and response to buyer requests — the trust-profile surface launches with V1; a public supplier directory is planned for later versions. Buyers pay because they need management visibility across many suppliers — that is where our price sits.