Pricing
We support GDPR and ISO 27001 — everything your team needs to get and stay compliant. Start free, no credit card required.
Plans
€399/mo · billed €3990/yr
Includes hands-on onboarding from the founder
Everything a growing SaaS needs to run GDPR and ISO 27001 on its own.
€699/mo · billed €6990/yr
Includes hands-on onboarding from the founder
For teams scaling compliance across more people and capabilities.
Talk to sales
Includes hands-on onboarding from the founder
For larger orgs with advanced security, residency and SLA needs.
Need more seats? Additional users are €15–20/mo over your plan's limit.

Book a 20-min call and we'll figure out the right path together — no sales script, just a conversation about your compliance roadmap.
Book a 20-min introSergey Vats · Founder, GRCTrail
| Feature | Growth | Scale | Enterprise |
|---|---|---|---|
| Limits | |||
| Team members | Up to 15 | Up to 50 | Unlimited |
| Additional seats | €15–20 / user / mo | €15–20 / user / mo | Custom |
| Supported frameworks | GDPR + ISO 27001 | GDPR + ISO 27001 | Unlimited |
| Vendors | Unlimited | Unlimited | Unlimited |
| Integrations | Unlimited | Unlimited | Unlimited |
| Core compliance | |||
| Sherpa AI agent | |||
| Policies, registers, controls & dashboard | |||
| Evidence collection & management | |||
| DSAR register & automated intake | |||
| User management | |||
| SSO (SAML / OIDC) | |||
| Audit logs | |||
| PDF / CSV exports | |||
| Advanced features | |||
| Privacy notice monitoring | |||
| Risk management | |||
| Access reviews | |||
| AI policy analysis | |||
| Device management | |||
| Custom integrations | |||
| Scale & Enterprise | |||
| AI security questionnaires (RAG) | |||
| Custom workflows | |||
| Priority support | |||
| Data residency options | |||
| Dedicated CSM | |||
| SLA | |||
| Support & onboarding | |||
| Onboarding | Founder-led | Founder-led | Custom |
| Support level | Priority | Dedicated + SLA | |
Yes — 14 days on any plan, no credit card required. You get full access to every feature in your plan.
Every plan includes both frameworks (GDPR & ISO 27001), the Sherpa AI agent and all core features. Plans differ by the number of team members and a few advanced capabilities — Scale adds AI security questionnaires, custom workflows and priority support; Enterprise adds unlimited frameworks, data residency, a dedicated CSM and an SLA.
GDPR and ISO 27001 are included on every plan. Enterprise supports additional custom frameworks.
You can add seats any time — additional users are €15–20/mo over your plan's limit, or we'll agree a custom rate on Enterprise.
Yes, upgrade at any time — we'll prorate the difference. Downgrades take effect at the next billing cycle.
GRCTrail runs the actual compliance workflows for you with an AI agent, at a fraction of the cost — both frameworks and the agent are included on every plan, with no add-ons.
Your data stays accessible for 30 days after cancellation. Full export tools (PDF, CSV) are always available so you can take your data with you.
Get set up in days, not months. What others charge €5,000+ for.
Book a call