We price Kanonik by what your customers are asking you for.
Start on Starter, and move up when a customer asks for an audit report.
Your compliance work runs on the AI you already pay for, so we don’t charge you for one. No per-user fees, no per-questionnaire fees.
What each plan costs, and what you get on it.
Starter
For your first security questionnaire.
$3,000 a yearor $300 a month
Buy online after a 14-day trial, paying by card monthly or yearly.
- Answers from your approved record, with a proof file the buyer can check
- Foresight checks a new vendor against what you’ve promised customers
- Unlimited users and questionnaires
- AI-drafted policies, each approved by a named person
- Export into the buyer’s own workbook
- NIST CSF 2.0 and GDPR included
- Approval requests in Slack
Audit-Ready
For your first SOC 2, ISO 27001 or HIPAA audit.
$6,000 a year
You buy it on a one-page order form, invoiced yearly.
- A Sealed Audit Package your auditor checks offline, without a Kanonik account
- Your auditor joins free and read-only
- Change your audited framework to another one once a year, free
- Everything in Starter, plus:
- One audited framework: SOC 2, ISO 27001 or HIPAA
- Statement of Applicability
- Control tests, audit sessions and findings
On top of the one included, more frameworks are $3,000 a year each. An extra Sealed Audit Package is $1,800.
Enterprise
For several frameworks, entities, products or auditors, or more than 200 people.
From $18,000 a year
We talk with you first, then send a quote, invoiced yearly.
- Private deployment in your own cloud account or data center
- Every framework on our list
- Everything in Audit-Ready, plus:
- Two Sealed Audit Packages a year, plus one per audited framework
- Priority help
Prices are in US dollars and exclude applicable tax. Your AI subscription stays separate, with the provider you already pay. Plans as listed are for organizations up to 200 people; larger, talk to us.
The audit tools start at Audit-Ready.
Answering questionnaires and keeping your record work the same on every plan. Audit-Ready adds what your auditor will ask you for.
Compare every feature
No feature matches that.
| What you get | Starter | Audit-Ready | Enterprise |
|---|---|---|---|
| Price and paying | |||
| Yearly | $3,000 | $6,000 | From $18,000 |
| Monthly | $300 | Yearly only | Yearly only |
| How you buy it | Online, with a 14-day trial | One-page order form | One-page order form, after we talk |
| Pay by invoice, net 30 | Card only | Yes | Yes |
| Users | Unlimited | Unlimited | Unlimited |
| Organization size | Up to 200 people | Up to 200 people | Any size |
| Security questionnaires | |||
| Questionnaires a year | Unlimited | Unlimited | Unlimited |
| Answers drafted from your approved record | Included | Included | Included |
| Every answer marked as from the record, stated, or open | Included | Included | Included |
| Export into the buyer’s own workbook, a CSV or a proof page, NDA answers held back | Included | Included | Included |
| Proof file with each answer, checkable by the buyer | Included | Included | Included |
| Saved answers, flagged when they go stale | Included | Included | Included |
| Search across your whole record | Included | Included | Included |
| Frameworks | |||
| NIST CSF 2.0 | Included | Included | Included |
| GDPR | Included | Included | Included |
| Audited frameworks (SOC 2, ISO 27001, HIPAA) | Not included | One included; more at $3,000 a year each | All |
| The other 12 frameworks on our list | Not included | $3,000 a year each | All |
| A control counts toward every framework it covers, once your team confirms the mapping | Included | Included | Included |
| Gap finding against a framework | Included | Included | Included |
| Statement of Applicability | Not included | Included | Included |
| Policies, risk and evidence | |||
| Policies and procedures drafted by your AI, versioned | Included | Included | Included |
| Risk register with likelihood, impact, treatment and owner | Included | Included | Included |
| Asset register and vendor register | Included | Included | Included |
| Remediation plans and risk acceptances | Included | Included | Included |
| Evidence records with fingerprint, source and period covered | Included | Included | Included |
| Exceptions that expire and come back for review | Not included | Included | Included |
| Foresight, to check a new vendor or a change against your promises | Included | Included | Included |
| Audit | |||
| Control tests, of design and of operation over a period | Not included | Included | Included |
| Audit sessions and findings | Not included | Included | Included |
| Sealed Audit Packages a year | Not included | One per audited framework; more at $1,800 each | Two, plus one per audited framework; more at $1,800 each |
| Your auditor invited free and read-only, until the end date you set | Not included | Included | Included |
| Proof you can share | |||
| Every AI draft checked by Kanonik before anyone can approve it | Included | Included | Included |
| No policy, control, risk or piece of evidence is recorded until a named person approves it | Included | Included | Included |
| Approved changes join a signed hash chain, so nobody can change the record without the change showing | Included | Included | Included |
| Anyone you share your proof with checks it offline, free, without a Kanonik account | Included | Included | Included |
| Proof Snapshot: signed, free, as often as you like | Included | Included | Included |
| Full history of every change and every decision | Included | Included | Included |
| Works with the AI you already use (Claude, ChatGPT and other MCP clients); that subscription is separate | Included | Included | Included |
| Your team | |||
| Roles for admins, reviewers and authors | Included | Included | Included |
| Your consultant works in your workspace, free | Included | Included | Included |
| Approval requests in Slack | Included | Included | Included |
| Weekly summary of what’s waiting for you, when you ask your AI | Included | Included | Included |
| Help and deployment | |||
| Priority help | Not included | Not included | Included |
| Private deployment in your cloud account or data center | Not included | Not included | Talk to us |
- Prices are in US dollars and exclude applicable tax.
- Plans as listed are for organizations up to 200 people; larger, talk to us.
- The Starter trial lasts 14 days and needs a card. It continues monthly unless you choose yearly, and we remind you 7 days before the first charge. There’s one trial per organization; plans bought on an order form have none.
- Plans renew automatically at the end of each term. You can cancel Starter from Settings, and any plan by email.
- We give you at least 30 days’ notice before a change to your plan’s price.
- Starter fees paid in the last 12 months are credited to your first Audit-Ready invoice, up to $3,000.
- A framework switched on counts until the subscription year ends.
- No refunds, except as set out in our Terms.
You can try Starter for 14 days before we charge your card.
- Trial
- 14 days, card required
- Reminder
- 7 days before the first charge
- First charge
- Day 15, unless you cancel first
- Trials
- One per organization
You’ll want answers to these before you buy.
Can we move our work to Kanonik from the compliance tool we use now?
Yes. When you set up your workspace, choose “Moving from another tool”. After that, your AI works from what you have now, whether that’s another compliance tool or a set of spreadsheets. From there it drafts your policies, controls and vendors in Kanonik. Then your team checks each draft against its evidence before a named person approves each one.
What happens when the trial ends?
On day 15 we charge your card for Starter. That’s $300 a month, or $3,000 if you chose to pay yearly. Your AI subscription is separate and isn’t part of that charge. We remind you 7 days before that first charge, and if you cancel in Settings during the trial, your card is never charged. There’s one trial per organization, so it’s worth starting it when you have a real questionnaire to answer.
If we start on Starter and an audit comes up later, what do we pay?
You move to Audit-Ready, which costs $6,000 a year and includes one audited framework. We credit the Starter fees you’ve paid in the last 12 months to your first Audit-Ready invoice, up to $3,000. You keep paying for your own AI, as you do now.
Can we pay by invoice?
Yes, for yearly totals from $6,000, which covers Audit-Ready and Enterprise. You sign a one-page order form and we invoice you yearly. You have 30 days to pay, by card, ACH or bank transfer. If it’s your first invoice, your extra frameworks and extra Sealed Audit Packages start once you’ve paid it. On Starter, you pay by card instead of an invoice.
How do renewals work?
Your plan renews automatically at the end of each term, monthly or yearly. We give you at least 30 days’ notice before a change to your plan’s price. You can cancel Starter any time from Settings, and any plan by email to [email protected]. The plan stays fully active until the end of the period you’ve paid for. On Starter, you can undo the cancellation until then.
What happens to our record if we cancel?
We don’t delete anything the day your plan ends. The workspace works as normal right up to that day, when it turns read-only. You can still read your record and export it, but nobody can change it. To start it again, write to us at [email protected].
Which AI do we need?
Claude, ChatGPT or another assistant that supports MCP, the standard way AI assistants connect to tools. You keep your subscription with that provider and pay them as you do now. If your company uses ChatGPT Business (formerly ChatGPT Team), your workspace admin needs to allow Kanonik first. The checks Kanonik runs on each draft use our own AI account, and they’re part of your plan.