00 · Pricing · Quoted to your scope, billed quarterly
Choose how much of compliance we run for you
Three ways to work with packets. All three run on the same control tower: governance policies, security practices and compliance proofs in one place. We don’t publish a price list, because no two scopes are the same. Tell us where you are and we’ll quote what you actually need.
Every level includes the platform, your Compliance Expert, your Forward Deployed Engineer and an independent assessor. The price steps up with each level because the scope does. Pick a floor to see what it means.
Going up
Ground floor: where you are today
L1 · Baseline
The baseline customers and regulators keep asking for
L1
You’re likely here if
Your first big customer just sent a security questionnaire
Nobody owns security yet, or it is a side job
Policies live in scattered docs, or nowhere
What we put in place
A named security owner, a risk list and short, approved policies
Attested, never “certified”An attestation is live: it updates as your controls and evidence change. A certificate describes one day. Need both? Take the Certification Accelerator as a side road from any level.
04 · Certification Accelerator
From first gap to certificate, and every year after
Same team, same platform, a different goal: an audit you pass the first time. Your Compliance Expert leads the plan, your Forward Deployed Engineer does the hands-on work, and our agents keep the evidence fresh.
001
Scope & gaps
Agents read your cloud, code and identity tools. We set the audit scope and list every gap.
002
Implement
Your Forward Deployed Engineer closes gaps with your team, most important first.
003
Readiness audit
An internal audit against the standard. Findings are fixed before an auditor sees them.
004
Certification audit
We coordinate the auditor, prepare the evidence room and handle follow-up questions.
005
Stay certified
Evidence keeps flowing. Surveillance and renewal audits are prepared, not scrambled.
Frameworks we take you through
ISO 27001
Information security management system.
Certificate
SOC 2
Security and trust controls, Type I or Type II.
Audit report
SOC 1
Controls relevant to customers’ financial reporting.
Audit report
ISO 42001
AI management system for teams building or using AI.
Certificate
GDPR
Privacy programme for EU personal data.
Compliance assessment
05 · packets Platform
Compliance as infrastructure, not a yearly project
For teams that run compliance themselves. Onboard in minutes, connect your real environment, and let controls run continuously. When a client or auditor asks, the answer is already there.
Connects directly to your cloud, dev tools and security stack. Controls reflect what is actually running, not what someone uploaded to a form.
AWS
GitHub
Okta
Notion
Slack
002
Automation
Evidence collection, control monitoring and audit prep run on their own. No manual uploads, no chasing evidence, no spreadsheet the week before the audit.
Evidence
Controls
Risk
003
AI Agents
Specialist AI employees keep you audit-ready around the clock. They run gap analyses, draft policies, generate documents, score risks and assess vendors.
Gap analysis
Policy drafts
Risk scoring
004
AI Governance
Govern the AI agents, models and automated decisions you build or use, right alongside your standard controls. Built for companies where AI is the product.
Agent logs
Policy binding
Drift detection
AI governance across the full lifecycle
We don’t just certify the company. We govern every AI system inside it.
ISO 42001 ready
01 · Design
Security, privacy, legal and ethical requirements are defined for every AI system before a line is built.
02 · Review & build
Experts review the design, agents check the build behaves as intended, and any drift is flagged before production.
03 · Test & monitor
Automated tests for hallucination, data leakage, adversarial inputs and permissions run before release and in production.
Also in the platform
Compliance tracking. Frameworks, controls, tasks and evidence in one system of record.
Map once, comply many. One control satisfies ISO 27001, SOC 2 and more at the same time.
Trust portal. Share your live security posture with clients in one link.
Risk and control management. Registers, scoring and treatment tied to the controls that fix them.
Always audit-ready. An auditor-facing view shows your audit firm progress in real time.
Grows with you. From founder-led teams to multi-entity enterprises, with SSO, SCIM, API and an auditor portal as you scale.
No price list, no surprise invoices. You see exactly what’s in scope before you sign.
001
Tell us where you are
Two minutes: your team, your tools and what is being asked of you.
002
Scoping call
A Compliance Expert confirms the right plan, level or framework.
003
Your written quote
Scope, team, timeline and a quarterly fee. Nothing hidden.
004
Onboard
Connect your tools and the work starts.
What moves the price
Level or framework
Team size
Systems in scope
Integrations
Modules
Timeline
08 · Questions
Asked before every quote
01Why don’t you publish prices?
Because scope drives cost. A 15-person startup reaching L1 and a 500-person company certifying to three frameworks need very different amounts of work. A quote tells you what you will actually pay.
02We’re new to compliance. Which plan should we start with?
Most companies early in the journey start on the Resilience Elevator at L1. It covers what customers and regulators ask for first, without committing you to a certification you may not need yet.
03What is the difference between an attestation and a certification?
A certification describes where you stood on the day it was signed. An Elevator attestation is live: an independent assessor reviews your evidence and it updates as your controls change. Many companies hold both.
04Do we need ISO 27001 or SOC 2 to start?
Not for the Resilience Elevator. Certifications are side roads you can take from any level, through the Certification Accelerator.
05Is the external auditor’s fee included?
Certification bodies and audit firms charge their own fees. Your quote shows clearly what is included and what is billed by the auditor.
06How does billing work?
All plans are billed quarterly against the scope in your quote. If your scope changes, for example moving from L1 to L2, we re-quote before anything changes.
07Can we move between plans?
Yes. The Elevator leads naturally into certification, and a Platform customer can bring in our experts later. Your platform data stays where it is.
09 · Start
Know where you stand before you spend.
Ask for a quote and talk to a Compliance Expert about the right plan.
packets.build