OnwynThe platform has a price. Services have a range.
No discovery-call theater. The Semantic Compliance Engine has committed prices — €149, €349 or €649 a month by company size, locked for 36 months — and you can sign up today, free for 30 days, without a card. Consultant-led services are published as honest ranges; a short scoping settles the exact fixed fee inside the range, and it doesn't drift. Never hourly, either way.
Pick what fits. The number updates as you click.
Three clicks — a committed price for the platform, an honest range for consultant-led services. Nothing here is gated behind a call.
What do you need?
Company size
Fixed scope — same price at any size.
Over 250 people is outside the self-serve range — tell us your size and we will quote it properly.
Certification audit included?
Small companies only for now.
Expanding into the United Kingdom? (scoped, not estimated)
A UK branch or subsidiary attaches a second regulatory regime to your company — company law, direct and indirect tax, employment, data, product conformity, customs — each on its own clock. It is a separate engine on a separate invoice from your compliance programme, and it is scoped in a conversation rather than estimated here, because which obligations open for you falls out of your corporate structure rather than out of anything you could pick from a menu. See the five register domains, the deadline classes and the fixed fees →
Add a penetration test?
Applications / web-hosting interfaces to test (3 included)
Three applications or web-hosting interfaces are included in the €3,500–4,000 base. Every one after that is €1,000 more, on both ends of the range.
Documentation language
The Semantic Compliance Engine. Every live framework, one subscription.
Eighteen frameworks live in the engine — from ISO 27001 and GDPR to DORA, the EU Cyber Resilience Act and the RED cybersecurity requirements — with more added continuously, and every live framework included at every tier: no per-framework pricing, ever. These are committed prices, not ranges — the number on the card is the number on the invoice, locked for 36 months. Up to 20% of every payment accrues as service credit toward consultant-led work — a loyalty bonus on top of the subscription, not money back. Credit expires 24 months after it accrues, the balance is capped at 12 months of accrual, and it covers at most 50% of our own fee element on any one service invoice.
Start free for 30 days. No card, no call.
Starter, Growth and Scale all begin with a 30-day free trial of the whole engine — every live framework, every requirement, the evidence vault and the crosswalk. Not a limited demo. We ask for no payment details at signup, so there is nothing on file to charge.
When the 30 days are up, nothing is switched off and nothing is deleted. Your account moves to our free plan: it goes on showing you exactly where your compliance stands — every requirement you answered, every document you uploaded, your whole audit trail — read-only, for as long as you want it. We do not invoice you, there is nothing to cancel, and you can still export everything and still ask a consultant for help.
When you want to carry on working on it, you activate a plan yourself and everything is editable again — at the price on your card the day you signed up, locked for 36 months whether you activate the next morning or the following spring.
Starter
Up to 5 people
€149 /month
Committed price — locked 36 months
First 30 days free — no card
- Every live framework + crosswalk engine included — 15 today, more added continuously
- Readiness scoring & evidence vault
- Consultant one click away on any requirement — review, call, or done-for-you
- Compliance credit — up to 20% of every payment accrues as service credit toward consultant-led work. A loyalty bonus on top of the subscription, not money back: each month’s credit expires 24 months after it accrues, your balance is capped at 12 months of accrual (accrual pauses at the cap), and credit covers at most 50% of our own fee element on any one service invoice. The full rules.
- Async support only — email and in-portal
Growth
6–100 people
€349 /month
Committed price — locked 36 months
First 30 days free — no card
- Every live framework + crosswalk engine included — 15 today, more added continuously
- Readiness scoring & evidence vault
- Consultant one click away on any requirement — review, call, or done-for-you
- Compliance credit — up to 20% of every payment accrues as service credit toward consultant-led work. A loyalty bonus on top of the subscription, not money back: each month’s credit expires 24 months after it accrues, your balance is capped at 12 months of accrual (accrual pauses at the cap), and credit covers at most 50% of our own fee element on any one service invoice. The full rules.
Scale
101–250 people
€649 /month
Committed price — locked 36 months
First 30 days free — no card
- Every live framework + crosswalk engine included — 15 today, more added continuously
- Readiness scoring & evidence vault
- Consultant one click away on any requirement — review, call, or done-for-you
- Compliance credit — up to 20% of every payment accrues as service credit toward consultant-led work. A loyalty bonus on top of the subscription, not money back: each month’s credit expires 24 months after it accrues, your balance is capped at 12 months of accrual (accrual pauses at the cap), and credit covers at most 50% of our own fee element on any one service invoice. The full rules.
Certify
Up to 10 people
€400–500 /month
Fixed 18-month term — ≈ €7.2–9K all-in
- Accredited ISO 27001 certification audit and its fee, included — certification itself is decided by the certification body under its own accreditation rules and is not guaranteed (Certify Plan Addendum cl. 3.2)
- Every live framework + crosswalk engine included
- Readiness scoring, evidence vault & auditor access
- Compliance credit — up to 20% of every payment accrues as service credit toward consultant-led work. A loyalty bonus on top of the subscription, not money back: each month’s credit expires 24 months after it accrues, your balance is capped at 12 months of accrual (accrual pauses at the cap), and credit covers at most 50% of our own fee element on any one service invoice. The full rules.
- Price fixed for the whole term
Starter, Growth and Scale are committed prices — sign up and the number on the card is the number on the invoice, locked for 36 months, after the 30 free days. Your plan follows your team size, so the trial covers whichever of the three you land on. The Certify plan bundles an accredited audit into a fixed 18-month term, so it has no trial: its exact fee inside the range is settled in one short scoping conversation before the term starts.
Onwyn Sign (Beta) is included. Every plan comes with a monthly allowance of sealed documents, from 10 on the smallest plan to 150 on the largest. Extra documents come in top-up packs, from about €1.20 to €1.50 per document. Signers and verification are always free, and during the Beta the allowance is free for existing compliance clients. How Onwyn Sign and its allowance work.
Compliance packages. Several standards, one click.
Curated bundles of frameworks you start together in the portal — one click, every requirement tracked in one program. Every framework is included at every tier, no per-framework pricing: packages change what you start, never what you pay.
AI Governance Package
Deploy AI responsibly — the EU regulation, the management system, the risk framework, and the impact assessments in one program.
EU Digital Baseline
The regulatory floor for operating digitally in the EU.
Trust & Security Package
The certifications enterprise buyers ask for.
Every package spans several frameworks, so you pick the one you want inside the engine right after signup — each button above creates your account first. Packages are fully self-serve; you run them at your own pace. If you ever want expert eyes, consultant review or done-for-you implementation is one click away on any requirement.
Consultant-led. Fixed fees, published ranges.
AI drafts, senior consultants sign off — and every engagement is a fixed fee for an agreed scope. Never hourly, never a meter running in the background.
ISO 27001 readiness — small companies
€4,000–6,000
Fixed fee, up to ~10 people · certification-body audit fee quoted by the body once your scope is set, passed through at cost
Lean-scope gap assessment, policy drafting and evidence review to audit-ready — sized for a first certification, not shrunk from an enterprise template.
ISO 27001 readiness — mid-market
€28,000–38,000
Fixed fee, 11–250 people · never hourly
Full gap-to-audit lifecycle scaled to your headcount, sites and tech estate, with a named senior consultant signing off every artifact.
Penetration test
€3,500–4,000
Fixed, published scope
External perimeter + up to 3 applications or web-hosting interfaces, up to 3 user roles, retest of criticals included. Each further interface is €1,000 — work it out in the estimator.
Extra frameworks via crosswalk
€6,000–12,000 each
SOC 2, NIS2, DORA and more
Your second framework starts partly done — the crosswalk maps existing evidence across standards, so it's an increment, not a re-engagement.
Surveillance-audit prep
€1,500–2,500 per cycle
Optional — no mandatory retainer
Evidence refresh and a pre-audit review before each surveillance cycle. Book it when you want it; skip it when you don't.
Platform included
During any engagement
Every consultant-led engagement runs on the Onwyn platform, and the platform is included for the duration — one scope, one evidence library, one place your team and your auditor look.
Certification-body audit fees are always quoted separately and passed through at cost — we don't mark up the auditor, because your auditor shouldn't be our margin.
Expansion tracks — coming soon
Four tracks in preparation. No pricing yet — when it's published, it'll be published as ranges, same as everything else here.
TISAX
Information security assessments for the automotive supply chain.
SOC 2 — North America
Trust Services Criteria attestation readiness for North American buyers.
Healthcare — EU/US
Healthcare-sector compliance across EU regulation and HIPAA.
GCC — UAE-first
Gulf-region frameworks, starting with the UAE.
Pricing questions, answered plainly
Is there a free trial, and do you need a card?
Yes — Starter, Growth and Scale all start with a 30-day free trial of the whole engine, and no card is required. Signup collects no payment details at all, so there is nothing on file to charge, and no invoice is raised while the trial runs. Thirty days rather than fourteen because you should be able to get a framework genuinely underway before deciding.
When the trial ends, nothing is switched off and nothing is deleted: your account moves to our free plan, which keeps showing you where your compliance stands, read-only, indefinitely. We do not invoice you and there is nothing to cancel — you activate a plan yourself when you want to carry on, at the price locked when you signed up. The Certify plan is a fixed 18-month term and has no trial.
Why ranges instead of an exact price?
Because two companies of the same headcount can differ in entities, sites and data footprint — and pretending otherwise is how quote-only competitors get you on a call. The range is where you'll actually land; a short scoping settles the exact fixed number inside it, and that number doesn't move. The low end is a real price for a simple setup, not a discount to be negotiated away.
What is the compliance credit?
Up to 20% of every platform payment accrues as service credit you can spend on any consultant-led service — readiness work, a penetration test, surveillance-audit prep. It is a loyalty bonus granted on top of the subscription rather than money back: it has no cash value and is never refunded. Three limits, and we would rather you read them here than find them later — each month’s credit expires 24 months after it accrues; your unredeemed balance is capped at 12 months of accrual, with accrual pausing while you sit at the cap; and credit covers at most 50% of our own fee element on any single service invoice, so it always accompanies a paid purchase and never funds one outright. Certification-body and other pass-through fees, subscription fees and VAT are outside it. Your portal ledger shows every tranche, its expiry date and the cap in real time.
Do you mark up certification-body audit fees?
No. Audit fees are passed through at cost — you see the certification body's own invoice, never a bundled line with margin baked in. We prepare you; an independent accredited body audits you. Keeping those two roles — and their money — separate is what makes your certificate worth something.
Can we work on several standards at once?
Yes — that's what compliance packages are for. Pick a package in the portal and every framework in it starts together with one click, or multi-select any frameworks from the catalog and start them as a set. Since every framework is included at every tier, working on four standards costs exactly what working on one does — there is no per-framework pricing to think about.
What happens after we're certified?
No mandatory retainer. You keep the platform subscription if you want the evidence vault, readiness scoring and crosswalk working year-round, and you can book surveillance-audit prep per cycle (€1,500–2,500) when a surveillance audit approaches. Nothing renews you into a services contract by default.
The platform price is final. The services number is one call away.
Sign up for the Semantic Compliance Engine free for 30 days — no card, live in under a day — then at the price on this page: committed, locked 36 months. For consultant-led work, one short scoping conversation turns your estimate into a fixed fee inside the range: never hourly, no drift, no theater.