Know your risk. Quantify it. Decide what matters.Prove what you did.
Three plans — Core, Pro, and Enterprise — each unlocking deeper Decision Intelligence: live trust scoring, monetary risk quantification, AI-curated decision cards, and integrated GRC + ESG on one evidence foundation. The DI-OS engine underneath scales with you.
Core
4 Strategic Pillars · 32 Engines · Real-time GTI
Establish your GRC foundation with live trust scoring, AI-assisted policy, and core compliance coverage across 3 major frameworks.
Live GTI score, risk heat map, control testing, policy lifecycle, and 3 compliance frameworks out of the box.
- Global Trust Index (GTI) — live organisational health score
- Risk Management with interactive heat map
- 3 compliance frameworks (ISO 27001, SOC 2, GDPR)
- Policy Lifecycle, Issues, Attestation & Asset Management
Intelligent assistant with contextual briefings per module, basic policy drafting, and proactive compliance gap detection.
- AI Co-Pilot with personalised executive briefings
- Contextual AI briefings per GRC module
- Pre-emptive compliance gap identification
- 5 Sovereign AI orchestrations/month
Basic ESG metric tracking, dashboard visibility, and Scope 1 & 2 carbon footprint analysis.
- ESG Metrics tracking & dashboard
- Manual ESG report generation
- Scope 1 & 2 carbon footprint analysis
Up to 5 users with custom RBAC, engagement gamification, and core support.
- Up to 5 users · Custom RBAC (own records scope)
- Gamification (points, badges, leaderboards)
- Core Support Fabric (Email)
14-day free trial · No credit card required
Pro
8 Strategic Pillars · 64 Engines · Full VaR Modeling · Up to 25 Users
Full Decision Intelligence with AI-curated Decision Cards, deterministic VaR quantification, autonomous vendor workflows, and 50+ compliance frameworks.
GTI Halo, AI-curated Decision Cards with [Approve][Simulate][Delegate], and full VaR monetary scoring — board-ready in real time.
- GTI Halo — sovereign trust score with role-based lenses
- Decision Cards — AI-curated [Approve] [Simulate] [Delegate]
- Financial VaR (Value at Risk) — monetary risk translation
- Contextual Side Panel — risk → vendors → controls → ESG instantly
Full-spectrum AI Co-Pilot with 24/7 anomaly detection, 6-month predictive forecasts, autonomous vendor workflows, and 50 orchestrations per month.
- Full AI Co-Pilot with Executive Role Lenses (CEO/CRO/CFO/Auditor)
- 24/7 AI Anomaly Detection — priority-throttled, live
- Predictive GRC Analytics — 6-month forecasts
- 50 Sovereign AI orchestrations/month
Full ESG goal tracking, AI peer benchmarking, double materiality assessment, and full Scope 1/2/3 carbon accounting with CSRD-ready reporting.
- Full ESG Metrics & Goal Tracking with AI benchmarking
- Regulatory Horizon Scanner (ESG Vector)
- Double Materiality Assessment (CSRD-ready)
- CSRD, TCFD, CDP report generation
Up to 25 users, advanced RBAC with team/all data scopes, complete audit trail, and priority support.
- Up to 25 users · Advanced RBAC (Team or All data scopes)
- Complete Sovereign Audit Trail
- Priority Email & Chat Support
14-day free trial · No credit card required
Enterprise
Omni-Sector · All 10 Strategic Pillars · 88 Elite Engines · Custom Sector Hardening
The complete DI-OS. Unlimited capacity, sector-hardened engines (ITAR, HIPAA, NGFS, Islamic Finance), dedicated data sovereignty, and autonomous multi-vector orchestration.
Every Decision Intelligence feature, plus evidence-backed External Intelligence, a Decision Feedback Vault, Reg-Delta Visualization, and an immutable Sovereign Audit Vault.
- External Intelligence — geopolitical/sanctions signals become evidence that informs decisions
- Decision Feedback Vault — Approve/Reject trains the scoring model
- Sovereign Audit Vault — immutable proof-of-integrity per Decision Card
- Reg-Delta Visualization — new regulations highlight affected controls instantly
Unlimited AI orchestrations, Sharia Governance Engine, multi-dimensional Black Swan simulation, and 12-month+ custom predictive forecasts.
- Sharia Governance Engine (AAOIFI/IFSB) — Elite Sector Hardening
- Autonomous Multi-Vector Adaptive Workflows — unlimited
- Risk Cascade & Black Swan Simulation (multi-dimensional)
- Predictive GRC Analytics (12-month+ custom forecasts)
ESG predictive analytics, unlimited data connectors, and fully automated CSRD, TCFD, CDP, SBTi disclosures.
- ESG Predictive Analytics (12-month+ AI forecasting)
- Unlimited ESG Data Connectors
- Automated CSRD, TCFD, CDP, SBTi disclosures
- Unlimited Carbon Reduction Targets
Unlimited users, enterprise RBAC hierarchies, dedicated on-premise or private cloud deployment, SSO, white-label, and 24/7 SLA-backed support.
- Unlimited users · Enterprise RBAC (custom roles & hierarchies)
- Dedicated Data Sovereignty: On-Premise / Private Cloud Deployment
- SSO (SAML 2.0, LDAP, Okta, Azure AD) + White-Label
- Dedicated Account Manager · 24/7 Premium Support with SLA
Not ready to subscribe? Start with a guided pilot — discovery, configure, evidence, decide.
Hard Structural Capacity Comparison
These are hard architectural boundaries — not marketing tiers. Each row defines precisely which DI-OS engines, pillars, and sovereign capabilities are activated at each access level.
| Sovereign Capability | Core | Pro | Enterprise |
|---|---|---|---|
| Strategic Pillars | 4 Strategic Pillars | 8 Strategic Pillars | All 10 Strategic Pillars |
| Analytical Engines | 32/88 Engines | 64/88 Engines | 88/88 — Full Suite |
| Global Trust Index (GTI) | Core GTI Score | GTI Halo + Role Lenses | GTI + Decision Vault + Reg-Delta |
| VaR Quantification | Basic risk scoring | Deterministic VaR (£) + Confidence Engine | Full VaR + Contagion + Black Swan |
| Decision Cards | [Approve][Simulate][Delegate] | Full Decision Intelligence + Feedback Vault | |
| AI Co-Pilot | Standard Co-Pilot | Automation Pulse Engine (50 orchestrations/mo) | Unlimited + Autonomous Orchestration |
| Sector Hardening | ITAR, HIPAA, NGFS, SAMA, Islamic Finance | ||
| Industrial Core Engines | All 8 Sector-Hardened Engines | ||
| External Intelligence | ⚡ EXT SIGNAL on Decision Cards | Full geopolitical + sanctions (evidence-backed) | |
| Active Integrations (plan limit) | 3 | 15 | Unlimited + Custom SDK |
| Live Native Connectors | Open SDK + webhooks | Open SDK + webhooks + native connectors | Open SDK + webhooks + native connectors + custom |
| Confidence & Evidence Lineage | 0.0–1.0 badge per card | Full audit export for regulatory submission | |
| Data Residency | EU/UK shared | Multi-region | Dedicated cluster + on-premise |
| Compliance Frameworks | 3 frameworks | All 50+ | Unlimited + Custom |
| Users | Up to 5 | Up to 25 | Unlimited |
Frequently Asked Questions
Everything you need to know about ThinkGRC pricing, security, and data sovereignty.