Pricing
Compliance software, priced per framework
Checkpoint runs entirely inside your own Microsoft 365 tenant — no third-party GRC platform, no data leaving your environment. Pick the frameworks you need, start a 7-day free trial, and run the programme yourself. Hiring the same work out as consulting runs $30k–$60k; this is a fraction of that.
Card required to start the trial, charged only on day 8 unless you cancel. Prices in AUD, ex GST.
Self-serve frameworks
One annual price per framework
Every framework is the full Checkpoint experience — the control set, continuous evidence, posture scanning, reports and the AI tools. The only thing that changes with headcount is the audit/evidence scope, so there are two straightforward tiers.
SOC 2
Enterprise procurement
Privacy Act
Australian Privacy Principles
Bundle: 10% off 3 or more frameworks. Frameworks share one set of registers, one internal audit and one management review, so the third standard costs you less work, and less on the invoice. For example, ISO 27001, ISO 27701 and ISO 42001 together for 50–250 staff: $29,997 becomes $26,997 a year. How the three run as one system.
Over 250 staff? See Enterprise pricing below.
250+ staff
Enterprise
The same Checkpoint experience as above, scoped to a larger estate. Because headcount above 250 varies enormously — 300 staff and 30,000 staff aren't the same job — the exact annual fee is confirmed in a written quote before you're ever invoiced, but the starting price, billing period and everything included are published here, not hidden behind a sales call.
Billing: Annual, invoiced (PO and multi-year terms available).
What's included
- The full Checkpoint experience for every framework — control set, continuous evidence, posture scanning, reports and AI tools
- Multiple Microsoft 365 tenants or legal entities under one engagement
- Sign-in via your organisation’s existing Microsoft Entra ID — no separate credentials or directory to manage
- Dedicated onboarding session with a named Compliance365 contact
- Priority support with a defined response-time commitment
- Annual invoicing with purchase-order support, and a custom Master Service Agreement / Data Processing Agreement on request
You'll see the exact annual price and term in writing before anything is invoiced or charged — nothing is billed from this conversation alone.
Build your quote
See your exact annual price
How the free trial works
From sign-up to running, in minutes
- Pick your framework and start the trial. Choose what you need above and start a 7-day free trial. A card secures it, but you're not charged until day 8 — cancel any time before then and you pay nothing.
- Sign in with Microsoft. Checkpoint activates against your own tenant — we read your tenant ID straight from your Microsoft sign-in, so there's nothing to copy or configure by hand.
- Provisioned automatically. Your Checkpoint workspace — control set, registers, evidence library — is set up inside your own SharePoint the moment you activate. Nothing is emailed, nothing is pasted.
- Run your programme. Scan your posture, collect evidence continuously, and produce audit-ready reports. If it's not for you, cancel in one click.
Government & regulated
Some frameworks aren't self-serve — on purpose
IS18 (QGEA), RFFR, DISP / ISM / IRAP and APRA CPS 234 come with a regulator, a sponsor or an assessor, and scoping that a card-and-go flow can't responsibly handle. These are delivered as a consulting-led engagement with Checkpoint included — the same tool, with us alongside you.
IS18 (QGEA)
Queensland Government
Consulting-led engagement — Checkpoint included. Scoped to your agency, systems in scope and the assurance report you need before anything is quoted.
Talk to usRFFR
DEWR Employment Services
Consulting-led engagement — Checkpoint included. Scoped to your provider arrangements and accreditation timeline before anything is quoted.
Talk to usDISP / ISM / IRAP
Defence & government
Consulting-led engagement — Checkpoint included. Scoped to your sponsorship, vetting and classification requirements before anything is quoted.
Talk to usAPRA CPS 234
APRA-regulated entities
Consulting-led engagement — Checkpoint included. For banks, insurers and super funds. Scoped to your information assets, third parties and board reporting before anything is quoted.
Talk to usThree ways to buy
As much help as you want
Checkpoint does most of the work in all three. What changes is how much of our time you want alongside it.
Checkpoint on its own
From $7,000 a year per framework
Your team runs the programme with Checkpoint's guided build, How-to guides and next-step prompts. Includes a free 30-minute setup call.
Start a 7-day free trialCheckpoint plus consulting days
$2,000 a day, plus the licence
You run Checkpoint and book us by the day where you want an expert: the internal audit, help setting up, or support on audit day.
Book a call to plan your daysFixed-price engagement
Fixed fee, Checkpoint included
We run the programme with you to certification for a price agreed before work starts.
See our servicesYear one and three years for each option, audit fees included. AUD, ex GST.
How much consulting do you need?
Usually less than you'd expect
In a traditional engagement most consultant days go on writing policies, building registers and assembling audit packs. Checkpoint produces those from your own records, so paid time is only worth buying where a person's judgement matters.
Checkpoint does
- Policies and procedures drafted from your answers and approved in the tool
- Risk, asset, supplier and action registers, with suggested risks from your scope
- A Statement of Applicability with exclusions and justifications
- Evidence from your Microsoft 365 posture scans, filed against each control
- Owner reminders, management review packs and the Stage 1 readiness pack
Worth an expert's time
- Agreeing scope and risk appetite with leadership
- Workshops only your people can answer: privacy processing, AI impact
- An independent internal audit, if no one in-house can audit impartially
- A readiness check before the certification body arrives
| Your situation | Typical days | What the days are for |
|---|---|---|
| You already run a management system | 0–1 daysup to $2,000 | Usually none. Some teams book a day for an independent internal audit, because ISO 27001 requires internal audits to be objective and impartial. |
| First certification, one standard | 2–4 days$4,000–$8,000 | A scoping and risk workshop with leadership, the internal audit, and a readiness check before your certification body arrives. |
| Adding ISO 27701 or ISO 42001 to an existing ISO 27001 | 1–2 days$2,000–$4,000 | Per standard: a privacy or AI impact workshop with the people who own the data or the systems. The rest builds on records you already have. |
Days at $2,000 each, ex GST, billed only as used. If a quote for the same programme runs to weeks of consulting, ask which of those days Checkpoint would replace.
Questions
Pricing FAQ
Is the price really per framework, per year?
Yes. Each framework is a separate annual licence. License 3 or more together and the framework licences are 10% off, every year you keep them together.
What happens after the 7-day trial?
Your card is charged the annual price on day 8 and your licence continues for the year. Cancel any time during the trial and you're never charged. Cancel after that and your licence runs to the end of the period you've paid for — we don't cut off access mid-term.
Where does my data live?
Entirely in your own Microsoft 365 tenant — SharePoint lists you own, in your own region. Checkpoint reads and writes there on your behalf; nothing is copied to us. That's the whole design.
Do I need a consultant?
No — self-serve Checkpoint is built to be run by your own team. If you want expert help for part of it, such as the internal audit, book consulting days at $2,000 a day ex GST. For the whole programme, the same tool comes with a fixed-price consulting engagement. Book a call to talk it through, or estimate the cost.
How is GST handled?
Prices shown are ex GST. GST is applied at checkout where applicable, and your tax invoice is issued automatically by our billing provider.
We're over 250 staff — how does pricing and billing work?
Enterprise pricing starts from $14,999/yr per framework ($17,999/yr for SOC 2), billed annually and invoiced rather than charged automatically to a card — see the full Enterprise plan above for what's included. Because headcount and entity count vary so much above 250 staff, we confirm your exact annual fee in a written quote first; nothing is invoiced or charged before you've agreed to that number.
Start compliance today, not next quarter
Pick a framework, start your 7-day free trial, and be running inside your own tenant in minutes. Cancel any time.
