Plans and pricing¶

There are three plans. Starter is $3,000 a year or $300 a month. Audit-Ready is $6,000 a year and includes one audited framework of your choice. Enterprise starts at $18,000 a year.

Your compliance work runs on the AI you already pay for, so we don't charge you for one. No per-user fees, no per-questionnaire fees.

The pricing page is the price list. This page covers what each plan buys you and how paying works.

What every plan includes¶

Unlimited users. We don't charge extra for additional people, and we believe the more of your team is involved in compliance work, the healthier the program.
Unlimited questionnaires answered from your record. Each answer is marked as from the record, stated or open, and exports in the buyer's format with a proof file per answer.
AI-drafted policies and procedures, and risk, asset and vendor registers with their evidence records.
NIST CSF 2.0 and GDPR included.
Proof Snapshots, free and as often as you like: a signed copy of where your program stands, which anyone can check at kanonik.ai/verify.
Foresight, which checks a planned change against what you have promised customers.
Approval requests in Slack, and a weekly summary.
Free access for the consultants who work with you.

Plans as listed are for organizations up to 200 people.

Starter¶

$3,000 a year or $300 a month.

Starter is for the day a customer sends you a security questionnaire. You start it yourself, connect the AI assistant you already use, and your record starts filling in the same day.

Audit-Ready¶

$6,000 a year, with one audited framework included: SOC 2, ISO 27001 or HIPAA.

Audit-Ready is for the day a customer asks for your SOC 2 report. It adds:

the one audited framework you choose
the Statement of Applicability
control tests, and audit sessions with findings
expiring exceptions
your auditor, invited free for the engagement
one Sealed Audit Package a year for your audited framework

Enterprise¶

From $18,000 a year.

Enterprise is for several frameworks, entities, products or auditors, or for an organization over 200 people. It adds every framework, two Sealed Audit Packages a year plus one per framework, and priority help. Private deployment in your own cloud account or data center is offered on Enterprise; talk to us and we will test it with you.

Extras¶

Another audited framework is $3,000 a year.
Another Sealed Audit Package is $1,800.

Paying¶

Pay by card, or by invoice for yearly totals from $6,000.
Starter fees are credited to your first Audit-Ready invoice, up to $3,000.
Refunds are made except as set out in our Terms.
We give 30 days' notice of any price change.

The 14-day trial¶

The trial is for Starter only. A card is required at signup. The trial converts to monthly billing unless you choose yearly, and we send a reminder 7 days before the first charge. There is one trial per organization. Invoiced plans have no trial.

You can cancel from your workspace settings. Signing up and your trial has the steps.

Adding a framework¶

NIST CSF 2.0 and GDPR come with every plan. Audit-Ready includes one audited framework, and you can add another for $3,000 a year. The new framework's Statement of Applicability and control mapping are generated, checked, and sealed into the record. Because the record underneath is framework-agnostic, a second framework is mostly recognition of work you already did. See Working to more than one framework.

For ISO 27001, Kanonik uses the clause numbers with its own descriptions, never the standard's text, and asks you to confirm you hold a licensed copy before it builds your audit package.

Sealed Audit Package¶

The Sealed Audit Package is the Auditor Export bundle and the evidence narrative with reviewer attribution, for a finalized audit session. Whoever you hand it to can check it at kanonik.ai/verify without a Kanonik account and without trusting our servers.

Your auditor joins your workspace read-only, so they can follow the record without changing it. You set an end date and a reason when you invite them.

Where your workspace is hosted¶

Workspaces are hosted in the United States. If you need your data held in another region, talk to us.

About your AI¶

You bring your own AI for your side of the work, so the model cost sits with your provider under your contract. Kanonik's safety check runs on Kanonik's servers, under Kanonik's own model account, separate from your key. Today it uses an Anthropic model, so if your AI is Claude the check comes from the same model company.

For anything about the price list, email [email protected].