Skip to content

Pricing

What the work costs, and how it is sized.

Work is priced by how far into your compliance function it goes and by how much regulation applies to you. Every price here is a current list price. Anything led by a practitioner starts with a scoping call.

Three levels of engagement

  1. Requirements inventory

    Every requirement that applies to you, cited to the rule, with the facts behind each one labelled.

  2. Requirements inventory, control testing and priced findings

    The inventory, every control tested against the full population, and findings priced in dollars.

  3. The whole compliance function

    Program, plus screening, transaction monitoring review and regulatory change management, with a named practitioner on every engagement.

How the band is set
BandWhat applies to youEntitiesChange updatesPractitioner review daysAdds
Band A3 or fewer applicable regulatory domains1quarterly1
Band B4 to 7 applicable regulatory domains3monthly2board-ready summary
Band C8 or more applicable regulatory domainsuncappedas published5downstream partner scoping

Under $500M in assets or under $50M in annual payment volume moves one band down. Over $5B moves one band up. Any sponsor bank or BaaS programme with downstream partners is Band C.

Coverage is never rationed. Every band receives every applicable requirement. Entity caps are scoping limits, priced per additional entity.

Engagements

Each one scoped and delivered on its own.

ServiceThe budget line it comes fromPriceNext step
BSA/AML independent testing
The annual independent test the rules require, run against every record rather than a sample, with work papers and findings priced in dollars.
An annual independent testing engagement from an audit firmPriced at scopingBook a scoping call
Practitioner-led. Scope and price are set on the call.
Look-back reviews
A re-review of historical alerts and transactions when monitoring is found to have failed, with every record re-tested.
A look-back engagement from a large consultancyPriced at scopingAsk for a quote
SOC 2 readiness
Readiness and remediation ahead of your SOC 2 examination, with evidence collected once and reused across frameworks.
A readiness consultant or compliance automation onboardingPriced at scopingAsk for a quote
PCI DSS readiness
Readiness and remediation ahead of your PCI DSS assessment, with evidence reused from your other frameworks.
A readiness consultant ahead of the assessor visitPriced at scopingAsk for a quote
State licensing application packets
A complete application packet per state: filings, business plan, compliance programme exhibit, organisational charts and deficiency responses.
Law firm fees per state application$10,000 per state applicationAsk for a quote
Licensing pathway comparison
A comparison of licensing paths for your model, with each state's cost cited to its statute where one exists.
An initial licensing consultationFreeAsk for a quote
Compliance training
A training programme built for your risk profile, delivered, and recorded with attestation records an examiner can review.
An off-the-shelf training libraryPriced at scopingBook a scoping call
Practitioner-led. Scope and price are set on the call.
Marketing and creative compliance review
Each piece of marketing reviewed against the consumer protection rules that apply to it, with every finding cited.
In-house review or outside counselPriced at scopingAsk for a quote
Remediation and issue management
Findings turned into a priced, sequenced plan, each issue tracked to evidenced closure, and progress reported to your committee or board.
Remediation consultants and spreadsheet issue trackersPriced at scopingBook a scoping call
Practitioner-led. Scope and price are set on the call.
Readiness review before your independent test
An audit-grade review of the fixes before the independent tester arrives, reported to management. It is not the independent test.
A dry run by internal staff before the independent testPriced at scopingAsk for a quote
Compliance program design and build
A compliance program designed around the requirements that apply to you, then built: policies, procedures, controls and the tooling behind them.
A program build by a consulting firmPriced at scopingBook a scoping call
Practitioner-led. Scope and price are set on the call.

Testing programme

Control testing that runs through the year.

ServiceThe budget line it comes fromPriceNext step
Automated control testing
Every account and every transaction tested, not a sample of twenty-five, with work papers an examiner can follow.
Sample-based control testing done by hand once a yearPriced at scopingAsk for a quote

Platform services

Ongoing services that sit inside the whole compliance function.

ServiceThe budget line it comes fromPriceNext step
Sanctions screening
Sanctions screening against lists taken directly from the issuing authorities and refreshed every six hours.
A screening data subscriptionPriced at scopingAsk for a quote
Regulatory change management
Continuous regulatory monitoring, scoped to the requirements that apply to you, with each change mapped to what it affects.
A regulatory change feed subscriptionPriced at scopingAsk for a quote
Transaction monitoring review and validation
An independent review of your monitoring rules, thresholds and alert handling, tested against your own transactions.
Model validation consultingPriced at scopingAsk for a quote

Talk to a practitioner

Book a 15-minute chat with our founder.

A real conversation with a senior compliance leader, to see if there's a fit. Not a sales call, not a demo, no pressure.