BUILT FOR GCC ORGANISATIONS

Compliance Automation Priced for Saudi Arabia and the UAE.

Three plans. All include NCA-ECC, PDPL, ISO 27001, and ISO 42001 coverage. Pricing scales with your team — not with the number of frameworks you need.

Save 20% with annual billing

Starter

For organisations getting compliant for the first time. One framework, guided setup, automated evidence.

From
SAR 18,000/ year

or SAR 1,875/month billed monthly

WHAT'S INCLUDED
1 active compliance framework
Up to 50 employees
Automated evidence from GitHub
50+ pre-built policy templates
Risk register with basic ALE
NDMO breach notification
Email support (2-day SLA)
Onboarding session
Get Started →
MOST POPULAR

Growth

For scaling teams managing multiple GCC frameworks. Full automation, ALE risk quantification.

From
SAR 48,000/ year

or SAR 5,000/month billed monthly

EVERYTHING IN STARTER, PLUS
Up to 3 active frameworks
Up to 500 employees
All integrations (Okta, AWS, etc)
Full ALE risk quantification
Cross-framework mapping
PDPL DSR fulfillment
Multi-user roles
Priority support (8-hr SLA)
Quarterly GRC review call
Book a Demo →

Enterprise

For large organisations, government entities, and financial institutions requiring custom programs.

Custom pricing

Scoped to your frameworks, team size, and residency.

EVERYTHING IN GROWTH, PLUS
Unlimited frameworks
Unlimited employees
Dedicated GRC Specialist
KSA / UAE Cloud or On-prem
SSO / SAML integration
Custom control frameworks
Arabic board reporting
SLA-backed uptime
On-site support (Riyadh/Dubai)
Custom MSA / Procurement
Talk to Sales →
NCA-ECC · PDPL · ISO coverage
KSA data residency
Invoiced in SAR or AED
No long-term lock-in
Scale on employees

Compare Plans

Every plan includes GCC-specific frameworks, NDMO-ready workflows, and evidence export.

FeatureStarterGrowthEnterprise
Compliance Frameworks
NCA-ECC
PDPL
ISO 27001
ISO 42001
Simultaneous active frameworks13Unlimited
Custom frameworks
Evidence & Automation
Automated evidence collection
GitHub integration
Okta, AWS, Azure, Slack, Jira
Custom integrations (API)
Cross-framework shared evidence
Policy templates (pre-built)50+50+Custom
Risk & Financial
Risk register
ALE risk quantificationBasicFull GCCFull + Custom
Board risk reportingArabic Option
TPRM (third-party risk)
Support & Success
Onboarding session1 session3 sessionsDedicated
Support SLA2 business days8 hours2 hours
Quarterly GRC reviewMonthly
On-site support
PRICING FAQ

Common Pricing Questions

All listed prices are in Saudi Riyal (SAR). We also invoice in UAE Dirham (AED) for UAE-based customers. Prices are exclusive of applicable VAT. For enterprise customers, we can accommodate local procurement processes and generate formal quotations in Arabic.
Yes. The Starter plan covers one active framework at a time. You can upgrade to Growth at any point to activate multiple frameworks simultaneously — and because DeepNotch maps shared controls across frameworks, you don't repeat work you've already done.
We'll reach out before billing changes. We don't auto-charge for overages — you and your account specialist will agree on the right tier before any adjustment is made.
We don't offer a self-serve free trial, but every demo includes a live walkthrough against your actual compliance posture. Enterprise customers can request a structured 30-day paid pilot before committing to an annual contract.
Government and quasi-government entities in Saudi Arabia and UAE are quoted under the Enterprise plan with a dedicated government SLA, on-premise or KSA-cloud deployment options, and procurement paperwork in Arabic. Contact us to discuss your requirements.

Not Sure Which Plan You Need?

Book a 30-minute session and we'll recommend the right plan for your frameworks, team size, and regulatory deadlines.

Book a Demo →Talk to Sales