Published Pricing. Self-Serve or Guided.

Named seats for team members who manage controls, approvals, evidence, or reviewer workflows. Reviewers are always free.

Scoped boundaries for business units, subsidiaries, or client programs. Each workspace gets its own controls, evidence, and reviewer access.

Compliance frameworks like SOC 2, ISO 27001, or HIPAA. Aurora reuses one proof graph across frameworks instead of rebuilding each one.

Audits, buyer reviews, renewals, and vendor assessments. Aurora meters by project, not by question count or approved domain.

External reviewers, auditors, and buyers access proof without counting against your operator seats. No approved-domain caps or viewer-seat charges.

Publish proof tiers, manage reviewer access, and control what evidence is visible to each audience with full audit trails.

Enterprise identity, access, and role controls ship in every plan. No security-tax upsell to get the basics.

Structured exports, audit-period diffs, SIEM sinks, and webhooks for downstream compliance and security tooling.

Retrieve prior answers, citations, and proof context using AI. Reuse existing evidence instead of rebuilding from scratch.

Read-only integrations, scheduled evidence checks, drift detection, and evidence freshness signals that keep proof current between reviews.

Connector-backed evidence collection from cloud providers, SaaS tools, and infrastructure. Automate what you used to upload manually.

Continuous monitoring flags when evidence drifts from expected state, giving teams time to remediate before the next review.

Track risks, assign owners, set due dates, and produce closure evidence. Remediation workflows replace scattered follow-up threads.

Vendor inventory, due diligence questionnaires, assigned assessments, Vendor Watch, and shareable outputs for third-party reviews.

Route requests to the right owner with escalation paths and SLA tracking. Every request gets an accountable trail.

Training assignments, custom content, acknowledgments, phishing simulations, and readiness dashboards tied to your proof record.

Tabletop exercises, incident management, playbooks, emergency communications, and after-action records with readiness analytics.

Build-your-own training content, phishing simulation campaigns, and completion tracking with evidence that survives the next audit.

On-premises evidence plane with scoped collectors, field coverage, encrypted snapshots, and governed exports for regulated environments.

Governed actions with plan, apply, rollback, and approval history for high-assurance environments that need operational control.

Dedicated single-tenant voice agent for vendor questionnaire intake, compliance evidence interviews, and incident notification fan-outs. TCPA, DNC, consent, and PII scrubbing enforced at the platform layer.

Monthly minute allocation included with the Voice Operations add-on. Additional minutes are available in published 1,000-minute packs at $2,400 per year.

Maximum number of calls a customer's Voice Worker can run in parallel. Additional channels are available at $1,200 per year each.