Clear pricing for every step of your compliance journey
Starter
€2,700
+ VAT (21%) / year
Prove it
A client asks you about security.
Talk to us- Full ISO 27001 + 1 framework of your choice (GDPR, NIS2, ENS or DORA)
- Record of Processing Activities (RoPA) and legal obligations
- Up to 5 users
- 200 evidence files
- Real-time Compliance Score
- Public Trust Center to share with clients
- 3 security questionnaires a year answered with AI
- Asset inventory
- Risk register
- Security policy management
- Task management with owners
- PDF export for auditor
- Immutable audit log
- AI Toolkit (150 uses a month)
- Email support (48h)
Professional
€5,400
+ VAT (21%) / year
Keep it alive
Several clients, and the auditor comes back every year.
Talk to us- Everything in Starter, plus:
- Questionnaires answered with AI, no limit
- Up to 3 frameworks at once, on top of ISO 27001
- Up to 20 users
- 1,000 evidence files
- Audit: objectives, internal audit, management reviews, incidents and training
- Periodic reviews that turn into tasks on their own
- Email warning before a piece of evidence expires
- Compliance calendar
- AI Toolkit (300 uses a month)
- Priority support (24h)
Business
€10,800
+ VAT (21%) / year
Kardu does it with you
You're short on time or experience and would rather do it with help.
Talk to us- Everything in Professional, plus:
- Kardu Foundation: 4-week hands-on programme; afterwards, your programme keeps running
- Simple electronic signature: management approves by email, no account needed
- All frameworks (GDPR, NIS2, DORA, ENS)
- Automatic inventory from Microsoft 365
- Goldfinch AI assistant and 1,000 AI uses a month
- Programme map (Bird view)
- CSV export, with the SHA-256 fingerprint of each piece of evidence
- Up to 50 users
- 2,000 evidence files
- 4h support SLA during business hours
- Coming soon
- SAML SSO + SCIM
Prices exclude VAT. Annual payment, or in 3 instalments of the same contract at no extra charge for splitting it.
Frameworks we add come at no extra cost; you activate as many as your plan includes.
What changes from plan to plan
| StarterProve it | ProfessionalKeep it alive | BusinessKardu does it with you | |
|---|---|---|---|
| Laws and frameworks | ISO 27001 + 1 | ISO 27001 + 3 | All |
| Users | 5 | 20 | 50 |
| Evidence files | 200 | 1,000 | 2,000 |
| Programme | You set it up | You keep it alive: audit, automatic periodic reviews, calendar | We guide you: Kardu Foundation, Bird view |
| Evidence | You upload it | + email warning before it expires | + automatic inventory from Microsoft 365 |
| AI | 150 uses/month | 300 uses/month | 1,000 uses/month + Goldfinch assistant |
| AI questionnaires | 3 a year | No limit | No limit |
| Approvals | Inside Kardu | Inside Kardu | + simple electronic signature |
| Support | Email, 48 h | Email, 24 h | 4-week hands-on programme + 4 h SLA |
| Export | PDF for the auditor | PDF for the auditor | + CSV, with the SHA-256 fingerprint of each piece of evidence |
| In every plan | Compliance Score, public Trust Center, asset inventory, risk register, Record of Processing Activities (RoPA), security policies, tasks with owners and immutable audit log. | ||
Management sign-off, inside Kardu
With proof, instead of getting lost in a stray PDF.
- Email a document, your policies or a risk acceptance to management. Signers need no account: they read, type their name and approve or reject.
- Bundle several items in one email: they are signed once.
- Kardu keeps the name, date, IP, browser and the SHA-256 fingerprint of what was approved, and files a PDF certificate as evidence. If the content changes after sending, the link no longer allows signing.
- It is a simple electronic signature, recognised by eIDAS (EU) and Law 19.799 (Chile). No external provider: no new sub-processor.
Your first 4 weeks, with us
The founding team builds the base of your compliance programme with you.
Diagnosis
A 30-minute call with the founding team to understand your situation and see if we're a fit.
Four weeks with you
We set up the frameworks you need together, with direct support from the founding team.
Afterwards
Your programme keeps running: you stay on Business or, at renewal, move to Professional to keep it alive.
−30%for Design Partners
You use all of Kardu during the programme and every week we hold a call to show you how to get the most out of it and hear your feedback. For helping us improve it, you get −30% in your first year on the plan you choose.
Talk to usFAQ