OnwynThe platform has a price. Services have a range.
No discovery-call theater. The Compliance Engine has committed prices — €149, €349 or €649 a month by company size, locked for 36 months — and you can sign up today, free for 30 days, without a card. Consultant-led services are published as honest ranges; a short scoping settles the exact fixed fee inside the range, and it doesn't drift. Never hourly, either way.
Pick what fits. The number updates as you click.
Three clicks — a committed price for the platform, an honest range for consultant-led services. Nothing here is gated behind a call.
What do you need?
Company size
Fixed scope — same price at any size.
Certificate included?
Small companies only for now.
Add a penetration test?
Applications / web-hosting interfaces to test (3 included)
Three applications or web-hosting interfaces are included in the €3,500–4,000 base. Every one after that is €1,000 more, on both ends of the range.
Documentation language
The Compliance Engine. Every live framework, one subscription.
Fifteen frameworks live in the engine — from ISO 27001 and GDPR to DORA and the EU Cyber Resilience Act — with more added continuously, and every live framework included at every tier: no per-framework pricing, ever. These are committed prices, not ranges — the number on the card is the number on the invoice, locked for 36 months. Up to 20% of every payment comes back as service credit; credits expire 24 months after they accrue.
Start free for 30 days. No card, no call.
Starter, Growth and Scale all begin with a 30-day free trial of the whole engine — every live framework, every requirement, the evidence vault and the crosswalk. Not a limited demo. We ask for no payment details at signup, so there is nothing on file to charge.
When the 30 days are up, nothing is switched off and nothing is deleted. Your account moves to our free plan: it goes on showing you exactly where your compliance stands — every requirement you answered, every document you uploaded, your whole audit trail — read-only, for as long as you want it. We do not invoice you, there is nothing to cancel, and you can still export everything and still ask a consultant for help.
When you want to carry on working on it, you activate a plan yourself and everything is editable again — at the price on your card the day you signed up, locked for 36 months whether you activate the next morning or the following spring.
Starter
Up to 10 people
€149 /month
Committed price — locked 36 months
First 30 days free — no card
- Every live framework + crosswalk engine included — 9 today, more added continuously
- Readiness scoring & evidence vault
- Consultant one click away on any requirement — review, call, or done-for-you
- Compliance credit — up to 20% of every payment back as service credit; credits expire 24 months after they accrue
- Async support only — email and in-portal
Growth
11–100 people
€349 /month
Committed price — locked 36 months
First 30 days free — no card
- Every live framework + crosswalk engine included — 9 today, more added continuously
- Readiness scoring & evidence vault
- Consultant one click away on any requirement — review, call, or done-for-you
- Compliance credit — up to 20% of every payment back as service credit; credits expire 24 months after they accrue
Scale
101–250 people
€649 /month
Committed price — locked 36 months
First 30 days free — no card
- Every live framework + crosswalk engine included — 9 today, more added continuously
- Readiness scoring & evidence vault
- Consultant one click away on any requirement — review, call, or done-for-you
- Compliance credit — up to 20% of every payment back as service credit; credits expire 24 months after they accrue
Certify
Up to 10 people
€400–500 /month
Fixed 18-month term — ≈ €7.5–9K all-in
- Accredited ISO 27001 certificate and audit included
- Every live framework + crosswalk engine included
- Readiness scoring, evidence vault & auditor access
- Compliance credit — up to 20% of every payment back as service credit; credits expire 24 months after they accrue
- Price fixed for the whole term
Starter, Growth and Scale are committed prices — sign up and the number on the card is the number on the invoice, locked for 36 months, after the 30 free days. Your plan follows your team size, so the trial covers whichever of the three you land on. The Certify plan bundles an accredited audit into a fixed 18-month term, so it has no trial: its exact fee inside the range is settled in one short scoping conversation before the term starts.
Compliance packages. Several standards, one click.
Curated bundles of frameworks you start together in the portal — one click, every requirement tracked in one program. Every framework is included at every tier, no per-framework pricing: packages change what you start, never what you pay.
AI Governance Package
Deploy AI responsibly — the EU regulation, the management system, the risk framework, and the impact assessments in one program.
EU Digital Baseline
The regulatory floor for operating digitally in the EU.
Trust & Security Package
The certifications enterprise buyers ask for.
Every package spans several frameworks, so you pick the one you want inside the engine right after signup — each button above creates your account first. Packages are fully self-serve; you run them at your own pace. If you ever want expert eyes, consultant review or done-for-you implementation is one click away on any requirement.
Consultant-led. Fixed fees, published ranges.
AI drafts, senior consultants sign off — and every engagement is a fixed fee for an agreed scope. Never hourly, never a meter running in the background.
ISO 27001 readiness — small companies
€4,000–6,000
Fixed fee, up to ~10 people · certification-body audit fee quoted by the body once your scope is set, passed through at cost
Lean-scope gap assessment, policy drafting and evidence review to audit-ready — sized for a first certification, not shrunk from an enterprise template.
ISO 27001 readiness — mid-market
€28,000–38,000
Fixed fee, 11–250 people · never hourly
Full gap-to-audit lifecycle scaled to your headcount, sites and tech estate, with a named senior consultant signing off every artifact.
Penetration test
€3,500–4,000
Fixed, published scope
External perimeter + up to 3 applications or web-hosting interfaces, up to 3 user roles, retest of criticals included. Each further interface is €1,000 — work it out in the estimator.
Extra frameworks via crosswalk
€6,000–12,000 each
SOC 2, NIS2, DORA and more
Your second framework starts partly done — the crosswalk maps existing evidence across standards, so it's an increment, not a re-engagement.
Surveillance-audit prep
€1,500–2,500 per cycle
Optional — no mandatory retainer
Evidence refresh and a pre-audit review before each surveillance cycle. Book it when you want it; skip it when you don't.
Platform included
During any engagement
Every consultant-led engagement runs on the Onwyn platform, and the platform is included for the duration — one scope, one evidence library, one place your team and your auditor look.
Certification-body audit fees are always quoted separately and passed through at cost — we don't mark up the auditor, because your auditor shouldn't be our margin.
Expansion tracks — coming soon
Four tracks in preparation. No pricing yet — when it's published, it'll be published as ranges, same as everything else here.
TISAX
Information security assessments for the automotive supply chain.
SOC 2 — North America
Trust Services Criteria attestation readiness for North American buyers.
Healthcare — EU/US
Healthcare-sector compliance across EU regulation and HIPAA.
GCC — UAE-first
Gulf-region frameworks, starting with the UAE.
Pricing questions, answered plainly
Is there a free trial, and do you need a card?
Yes — Starter, Growth and Scale all start with a 30-day free trial of the whole engine, and no card is required. Signup collects no payment details at all, so there is nothing on file to charge, and no invoice is raised while the trial runs. Thirty days rather than fourteen because you should be able to get a framework genuinely underway before deciding.
When the trial ends, nothing is switched off and nothing is deleted: your account moves to our free plan, which keeps showing you where your compliance stands, read-only, indefinitely. We do not invoice you and there is nothing to cancel — you activate a plan yourself when you want to carry on, at the price locked when you signed up. The Certify plan is a fixed 18-month term and has no trial.
Why ranges instead of an exact price?
Because two companies of the same headcount can differ in entities, sites and data footprint — and pretending otherwise is how quote-only competitors get you on a call. The range is where you'll actually land; a short scoping settles the exact fixed number inside it, and that number doesn't move. The low end is a real price for a simple setup, not a discount to be negotiated away.
What is the compliance credit?
Up to 20% of every platform payment accrues as service credit you can spend on any consultant-led service — readiness work, a penetration test, surveillance-audit prep. Credits expire 24 months after they accrue, so the subscription quietly pre-funds the expert help you'll eventually want.
Do you mark up certification-body audit fees?
No. Audit fees are passed through at cost — you see the certification body's own invoice, never a bundled line with margin baked in. We prepare you; an independent accredited body audits you. Keeping those two roles — and their money — separate is what makes your certificate worth something.
Can we work on several standards at once?
Yes — that's what compliance packages are for. Pick a package in the portal and every framework in it starts together with one click, or multi-select any frameworks from the catalog and start them as a set. Since every framework is included at every tier, working on four standards costs exactly what working on one does — there is no per-framework pricing to think about.
What happens after we're certified?
No mandatory retainer. You keep the platform subscription if you want the evidence vault, readiness scoring and crosswalk working year-round, and you can book surveillance-audit prep per cycle (€1,500–2,500) when a surveillance audit approaches. Nothing renews you into a services contract by default.
The platform price is final. The services number is one call away.
Sign up for the Compliance Engine free for 30 days — no card, live in under a day — then at the price on this page: committed, locked 36 months. For consultant-led work, one short scoping conversation turns your estimate into a fixed fee inside the range: never hourly, no drift, no theater.