Published Pricing. Self-Serve or Guided.
Start with what you need. Add modules as you grow.
For teams replacing spreadsheets and shared folders with one proof system
Best for teams replacing spreadsheets with one proof system
- Governed controls, evidence, and assessments
- Reviewer access and sharing included
- SSO, SCIM, RBAC, and audit exports included
- Ask Aurora AI-assisted answers
- 5 operators, 1 workspace, 1 framework
- 25 review projects per year
For teams buried in reviews, renewals, and vendor diligence
Best for teams running 50+ reviews per year
- Everything in Core, plus:
- Automated evidence collection (10 connectors)
- Risk registers and remediation workflows
- Vendor risk management (50 vendors)
- Built for teams handling 50+ reviews per year
- 50 review projects per year
For broader programs that need the full platform with readiness, risk, and vendor coverage
Best for broad programs needing full readiness and vendor coverage
- Everything in Professional, plus:
- Readiness coverage (training, exercises, incidents)
- Vendor Risk expanded to 250 vendors
- 10 operators and 3 frameworks included
- Starting from $2,600/mo — final pricing scoped to your environment
- Command add-on available for regulated environments
See a sample first-year invoice
Sample Year 1 invoice
A common first-year growth pattern for teams that start on Platform Core and add operator seats and a second framework mid-year. Your invoice depends on the modules, seats, and frameworks you actually select.
| Line item | Qty | Unit / yr | Annual total |
|---|---|---|---|
| Platform Core | 1 | $7,200 | $7,200 |
| Additional Operator (beyond the 5 included) | 2 | $1,200 | $2,400 |
| Additional Framework | 1 | $1,500 | $1,500 |
| Year 1 total | $11,100 | ||
Prices shown match the published catalog above. Actual invoices depend on the modules, seats, and frameworks you select at checkout or through your account team.
Is Aurora the Right Fit for Your Team?
- Recurring buyer, audit, insurance, or regulatory reviews
- Governed proof without per-reviewer licensing
- MSP and vCISO partners managing more than one client
- Hybrid or regulated environments that need in-perimeter evidence (Command)
- You need Aurora Command or in-perimeter collectors
- You operate multiple legal entities, business units, or client tenants
- You need a custom security, procurement, data-residency, or integration review
- You only need a static public trust page
- You have no recurring review, evidence, or control-ownership workflow
- You expect AI output to replace human approval, accountability, or legal judgment
Compare every plan side by side
| Features | Core From $600/Mo | Professional From $1600/Mo | Enterprise From $2600/Mo |
|---|---|---|---|
| Fit & implementation | |||
| teams replacing spreadsheets with one proof system | teams running 50+ reviews per year | broad programs needing full readiness and vendor coverage | |
| No required fee | No required fee | Scoped on a call | |
| No per-seat fee | No per-seat fee | No per-seat fee | |
| Base platform | |||
| 5 | 5 | 10 | |
| 1 | 1 | 1 | |
| 1 | 1 | 3 | |
| 25 | 50 | 25 baseAdditional projects are added per scoping conversation based on your workload. | |
| Reviewer operations | |||
| Compliance automation | |||
| 10 | 10 | ||
| Risk & accountability | |||
| 50 vendors | 250 vendors | ||
| Readiness | |||
| Command | |||
| Quoted separately | |||
| Quoted separately | |||
| Enterprise plan + scoping callCommand is not sold as a standalone self-serve purchase. It requires an Enterprise-tier engagement and a scoping conversation before deployment. | |||
| Voice Operations | |||
| Quoted add-on | Quoted add-on | ||
| 0 | 500 / month | 5,000 / month | |
| 0 | 3 | 10 | |
| Start Core — Self-Serve Checkout | Start Professional — Self-Serve Checkout | Talk Through Enterprise Fit | |
The buyer profile each plan is built around, so you can match your team's workload before you configure anything.
What it takes to go live. Self-serve plans have no required fee; Enterprise and Command are scoped on a call before you buy.
Learn moreExternal reviewers, auditors, and buyers never count against your operator seats and are never capped or charged per seat, on any paid plan.
Learn moreNamed seats for team members who manage controls, approvals, evidence, or reviewer workflows. Reviewers are always free.
Learn moreScoped boundaries for business units, subsidiaries, or client programs. Each workspace gets its own controls, evidence, and reviewer access.
Learn moreCompliance frameworks like SOC 2, ISO 27001, or HIPAA. Aurora reuses one proof graph across frameworks instead of rebuilding each one.
Learn moreAudits, buyer reviews, renewals, and vendor assessments. Aurora meters by project, not by question count or approved domain.
Learn moreExternal reviewers, auditors, and buyers access proof without counting against your operator seats. No approved-domain caps or viewer-seat charges.
Learn morePublish proof tiers, manage reviewer access, and control what evidence is visible to each audience with full audit trails.
Learn moreEnterprise identity, access, and role controls ship in every plan. No security-tax upsell to get the basics.
Learn moreScoped API tokens for CI pipelines, integrations, and automated workflows ship in every paid plan - no separate API tier.
Learn moreStructured exports, audit-period diffs, SIEM sinks, and webhooks for downstream compliance and security tooling.
Learn moreRetrieve prior answers, citations, and proof context using AI. Reuse existing evidence instead of rebuilding from scratch.
Learn moreRead-only integrations, scheduled evidence checks, drift detection, and evidence freshness signals that keep proof current between reviews.
Learn moreConnector-backed evidence collection from cloud providers, SaaS tools, and infrastructure. Automate what you used to upload manually.
Learn moreContinuous monitoring flags when evidence drifts from expected state, giving teams time to remediate before the next review.
Learn moreTrack risks, assign owners, set due dates, and produce closure evidence. Remediation workflows replace scattered follow-up threads.
Learn moreVendor inventory, due diligence questionnaires, assigned assessments, Vendor Watch, and shareable outputs for third-party reviews.
Learn moreRoute requests to the right owner with escalation paths and SLA tracking. Every request gets an accountable trail.
Learn moreTraining assignments, custom content, acknowledgments, phishing simulations, and readiness dashboards tied to your proof record.
Learn moreTabletop exercises, incident management, playbooks, emergency communications, and after-action records with readiness analytics.
Learn moreBuild-your-own training content, phishing simulation campaigns, and completion tracking with evidence that survives the next audit.
Learn moreOn-premises evidence plane with scoped collectors, field coverage, encrypted snapshots, and governed exports for regulated environments.
Learn moreGoverned actions with plan, apply, rollback, and approval history for high-assurance environments that need operational control.
Learn moreWhat has to be true before Aurora will sell or deploy Command for your environment.
Learn moreDedicated single-tenant voice agent for vendor questionnaire intake, compliance evidence interviews, and incident notification fan-outs. TCPA, DNC, consent, and PII scrubbing enforced at the platform layer.
Learn moreMonthly minute allocation included with the Voice Operations add-on. Additional minutes are available in published 1,000-minute packs at $2,400 per year.
Learn moreMaximum number of calls a customer's Voice Worker can run in parallel. Additional channels are available at $1,200 per year each.
Learn moreWorked from the published numbers above - not a quote. Enterprise and Command totals are confirmed on your scoping call.
Choose Your Path to a Live Workspace
- Core and Professional plans, plus most add-ons and packs
- Published price at checkout - no sales call required
- Workspace provisioning may begin immediately after your purchase is accepted
- Stays inside published thresholds: up to 10 operators, 3 workspaces, 25 automated connectors, 250 vendors, 1,000 covered users, and 5 frameworks
- Enterprise plan, review volume above self-serve thresholds, or a service-heavy launch
- One scoping call confirms configuration and final pricing
- Same published unit prices as self-serve - the call confirms structure, not a hidden rate card
- Command or any in-perimeter deployment - requires a mandatory scoping conversation and deployment package
- Personal, family, household, or public-sector use - the self-service plan is business-use only, and public-sector use needs Borealis's written agreement
- A negotiated DPA, on-site audit, custom data-residency commitment, or bespoke security exhibit - outside the standard self-service terms
This is a plain-language summary, not a substitute for the governing contract. Full terms: Self-Service Subscription Terms.
Build your exact configuration
Core includes 5
Core includes 1
Core includes 1
Core includes 25
Published annual list-price estimate from the same units on this page.
Reference plans help buyers orient. Aurora can package the motion cleanly.
- This configuration qualifies for self-serve checkout at published prices.
Every module and add-on, priced transparently
Every module, add-on, and service is priced below. Filtering and the saved-quote builder activate once this page finishes loading in your browser, and the published prices are the same either way.
Modules
- Continuous Compliance$6,000 / yrIncludes 10 automated connectors
- Risk & Accountability$3,000 / yrOperator-scoped workflow layer
- Vendor Risk$3,000 / yr (50) · $7,500 / yr (250) · $15,000 / yr (1,000)Active vendors
- Messaging Operations$1,800 / yrOperator-scoped internal accountability lane
- Workforce Readiness$4,800 / yrIncludes 250 covered users
- Response Readiness$5,400 / yrPeople and exercise-driven readiness workflows
- Readiness Suite$8,400 / yrConnected readiness stack
- Command InsightStarts at $30,000 / yrEnvironment boundary, collector lane, devices/assets
- Command ControlStarts at $18,000 / yrAdd-on to Command Insight
- Voice OperationsStarts at $12,000 / yrDedicated single-tenant Voice Worker, 500 monthly minutes, 3 concurrent calls
Scale & Add-Ons
- Additional Operator$1,200 / seat / yrNamed edit, approve, or admin seat
- Additional Workspace / Entity$3,000 / yrAdditional business unit, subsidiary, or scoped entity
- Additional Framework$1,500 / yr or 3 for $3,600 / yrPer framework or regulation overlay
- Connector Pack$2,000 / yr10 additional automated connectors
- Covered User Pack$1,500 / yr250 additional covered users
- Exercise Pack$1,500 / yr12 additional formal exercises or sessions
- Review Project Pack$1,000 / yr25 additional review projects
- Command Expansion PackStarts at $8,000 / yrAdditional boundary or 250 devices/assets
- Voice Minutes Pack$2,400 / yr1,000 additional voice minutes per month
- Voice Concurrent Channel$1,200 / yrOne additional concurrent voice call
Professional Services
- Implementation and Success$1,500-$25,000 one-time · $6,000 / yr premium supportService package
How Implementation Effort Scales by Plan
Aurora does not publish standard implementation timelines. Setup Services, when included with a plan, must be used within 60 days of purchase or first workspace access (Subscription Terms §5.4).
Pricing that doesn't require a sales call to understand
No per-reviewer fees
External reviewers, auditors, and buyers don't count against your operator seats. No per-viewer fees or approved-domain caps on standard usage.
No surprise enterprise tax
SSO, SCIM, RBAC, audit exports, diffs, and webhooks are in the base plan. You should not have to pay extra for security basics.
Predictable review metering
Aurora meters review projects, not individual questions. Your costs scale with real workload, not arbitrary counts.
Framework expansion without rebuild costs
Adding SOC 2, ISO 27001, HIPAA, or any framework reuses your existing proof graph. No reimplementation cost.
Renewals you can read in five minutes
Annual renewals with clear terms. No uplift math, no surprise rate changes, no legalese.
Self-serve checkout for standard plans
Start Platform Core or any standard configuration without waiting for a sales call. Enterprise and Command get a proper scoping conversation.
Evidence that stays inside your perimeter
Command requires a scoping conversation because every deployment is sized to your environment. The prices below cover onboarding, deployment, and ongoing support.
Pricing questions, answered plainly
Can I start without talking to sales?
When do I need a sales conversation?
How does enterprise pricing work?
How do you count reviews and questionnaires?
What's included in every plan?
Can I add modules mid-contract?
What happens when I hit a usage limit?
How do true-ups and renewals work?
What payment methods do you accept?
Why is Command priced separately?
Are services priced separately from software?
How is Voice Operations priced?
Renewals and cancellation, plainly
A plain-language summary of what our subscription terms already say. The full legal language controls if anything here reads differently.
- 30 days' notice for annual business plan changes
- If we change pricing or packaging for a future renewal on an annual business plan, our default practice is at least 30 days' notice before that renewal. If you do not agree with a changed price, you can cancel before the changed renewal takes effect.
- Cancel any time through the billing interface
- An account administrator or billing contact can cancel through the online billing interface. Cancellation stops future renewals - it does not cut short the paid term you are already in.
- Workspace deletion targeted within 14 days
- Export what you need before your paid term ends. After it ends, we target deleting the workspace from primary production systems within 14 days, subject to legal, backup, security, disaster-recovery, and fraud-prevention retention, and other archival systems that clear later in the ordinary course.
Aurora helps your team organize, update, and share compliance work. It does not provide legal advice, replace auditors or assessors, or guarantee compliance outcomes or certification. Your team, auditor, and counsel own the final judgment. See full product boundaries