Skip to content
Sentinel Unity

Pricing

Value tiers for enterprise GRC

Sentinel Unity is packaged as Startup, Mid-Market and Enterprise tiers for organisations wherever they operate, scoped to your entities, modules, frameworks and deployment choice. We do not publish list prices; every proposal is tailored after discovery.

ISO/IEC 27001NIST CSF 2.0NIST SP 800-53PCI DSSCSA CCMGDPR+ your regulator

Plans

Choose the tier that matches your program

Three packaging models, from a single entity standing up its first programme to multi-entity groups with strategy, delivery and finance in scope, or a requirement to run on their own infrastructure. All tiers show Contact for pricing until we understand your scope.

Startup

A single entity standing up its first structured GRC programme, usually around one or two standards.

Contact for pricing

  • Frameworks & Controls with the international standards library
  • Compliance Management and Findings Management
  • Policy Management with acknowledgements and exceptions
  • Enterprise Risk with appetite, treatment and indicators
  • Asset Management and Organization structure
  • Documents & Evidence, My Work and notifications
  • Multi-tenant SaaS hosting
  • Standard support during business hours
Most popular

Mid-Market

Multi-entity organisations running one programme across subsidiaries, several standards and a vendor estate.

Contact for pricing

  • Everything in Startup
  • Full multi-entity structure with entity-scoped frameworks, appetite and roles
  • Operational, IT and Cyber Risk programmes, and Cyber Field Assessment
  • Third-Party Risk with tiering, contracts, due diligence and monitoring
  • Business Catalog and executive drill-down
  • Workflow Designer: copy and change any system flow
  • Reporting & Dashboards with schedules, share links and BI export
  • Priority support

Enterprise

Groups and regulated institutions with strategy, delivery and finance in scope, heightened oversight, or a requirement to run on their own infrastructure.

Contact for pricing

  • Everything in Mid-Market
  • Strategy & Objectives, Measurement, Execution and Finance
  • Single-tenant deployment on your own infrastructure, or hosted in an agreed region
  • Object-level scope administration and separation-of-duties overrides
  • Custom fields on every module and bulk data import
  • Dedicated onboarding, implementation planning and alignment workshops
  • Enhanced support models, agreed per engagement

How we quote

Scoped to your operating model

Subscriptions reflect active modules, legal entities, framework coverage, deployment choices, and support level, not per-seat checkout. We keep packaging honest: tiers describe typical scope, not hidden module fees.

  • Modules and frameworks in scope
  • Single entity vs multi-entity group structure
  • Hosting and data-residency requirements
  • Onboarding depth and support tier

What we do not publish here

  • List prices or currency amounts
  • Per-user or per-module calculators
  • Guaranteed SLAs or audit certificates

Request a demo or contact sales for a proposal aligned to your entities, frameworks and deployment.

Module coverage

Module availability by tier

Real product module names (typical packaging only). Final scope is confirmed in your commercial proposal.

Module availability by pricing tier
ModuleStartupMid-MarketEnterprise
Frameworks & ControlsIncluded: IncludedIncluded: IncludedExtended
Compliance ManagementIncluded: IncludedIncluded: IncludedIncluded: Included
Findings ManagementIncluded: IncludedIncluded: IncludedIncluded: Included
Policy ManagementIncluded: IncludedIncluded: IncludedIncluded: Included
Documents & EvidenceIncluded: IncludedIncluded: IncludedExtended
Enterprise RiskIncluded: IncludedIncluded: IncludedIncluded: Included
Risk Indicators (KRI / KPI)Included: IncludedIncluded: IncludedIncluded: Included
Operational RiskDiscussIncluded: IncludedIncluded: Included
IT RiskDiscussIncluded: IncludedIncluded: Included
Cyber RiskDiscussIncluded: IncludedIncluded: Included
Cyber Field AssessmentNot includedIncluded: IncludedIncluded: Included
Third-Party RiskNot includedIncluded: IncludedIncluded: Included
Asset ManagementIncluded: IncludedIncluded: IncludedIncluded: Included
OrganizationIncluded: IncludedExtendedExtended
Business CatalogDiscussIncluded: IncludedIncluded: Included
Strategy & ObjectivesNot includedDiscussIncluded: Included
MeasurementNot includedDiscussIncluded: Included
ExecutionNot includedDiscussIncluded: Included
FinanceNot includedDiscussIncluded: Included
My Work & notificationsIncluded: IncludedIncluded: IncludedIncluded: Included
Workflow DesignerDiscussIncluded: IncludedIncluded: Included
Reporting & DashboardsDiscussIncluded: IncludedIncluded: Included
Access ControlIncluded: IncludedExtendedExtended
Administration (custom fields, import, locale)Included: IncludedIncluded: IncludedExtended
Single-tenant, on your infrastructureNot includedDiscussIncluded: Included

Included: in tier scope. Extended: enhanced configuration (e.g. multi-entity scoping, object-level access, extended framework packs). Discuss: available; scoped during sales. Table reflects typical packaging; final scope is confirmed in your proposal.

FAQ

Common questions

Implementation, frameworks, residency, multi-entity structure, and support, answered factually. Where specifics depend on your engagement, we say so.

Every tier includes onboarding aligned to your scope. Startup deployments focus on a single entity and the core modules. Mid-Market and Enterprise engagements add multi-entity configuration, role and scope design, workflow tailoring and framework setup. Complex data migration or bespoke integrations are scoped separately after discovery; we do not quote fixed professional-services hours on this page.

Security architecture details are on our Security & Trust page.

Get a proposal for your GRC program

Tell us about your entities, frameworks, and operating markets worldwide. We will recommend a tier and prepare pricing through contact sales.

No commitment required. Pricing is shared after discovery.