Security and compliance platform where teams define their own controls and connect policies and evidence
SOX compliance software with AI control testing
Stage
Not given
Not given
Founded
Not given
Not given
Based in
Not given
US
Pricing model
Freemium
Freemium
Pricing
Compliance Module: $450/month or $5,000/year. Trust Center: $300/month or $3,000/year. Trust Center attribution removal add-on: $25/month. Workflow automation add-on (coming soon): $50/month. Custom domains for questionnaires add-on (coming soon): $25/month. 30-day free trial available with no credi
Free trial: 14 days, $0, includes 5 AI sample tests and 50 manual tests. Starter: $99 first month, then $279/month, includes 25 AI sample tests monthly and unlimited manual testing. Professional: $799/month, includes 80 AI sample tests monthly, year-end package and external auditor package. Enterpri
Key features
Compliance programs for SOC 2, ISO 27001, NIST 800-53, and custom frameworks
Customer-defined controls and subcontrols
Evidence management linked to controls
Policy and procedure management with approval workflows
Map one control across unlimited frameworks at no added charge
Read-only Auditor role for direct auditor access
Risk management tied to controls
Trust Center with NDA-gated documents and published subprocessor list
GraphQL API and scoped organization tokens
Risk and Control Matrix import
Evidence file matching and organization
Multi-entity control management
Deficiency tracking and remediation
Role-based access control
Year-end SOX 404 reporting
Automatic deficiency creation from exceptions
Segregation of duties enforcement
What makes it different
Write your own control language instead of adopting vendor templates
Open source code on GitHub with transparent pricing
82% less time spent on evidence collection
Map one program across unlimited frameworks with no per-framework charge
Unlimited users, SSO, and 2FA included in every plan with no per-seat fees
AI shows its work with exact quote and page citations on every verdict
Hash-chained audit trail that auditors can verify independently
Evidence never used to train AI models
All steps locked and recorded from population upload to signed-off test
Consolidates entire SOX testing workflow in one workspace instead of spreadsheets
Openlane
SOXLayer