Enterprise: the same product, deployed for you
Enterprise is not a feature tier. Every framework, module and portal is already in the free platform. What Enterprise changes is where it runs and what is contracted around it.
Data residency you specify
The free platform runs on UK and EU infrastructure. If a contract, a regulator or a customer's security review requires a particular region, a dedicated instance is how you get it in writing.
Your own instance, not a workspace
Self-hosted means the deployment is yours: its own database, its own upgrade window, and no shared infrastructure to explain to an assessor.
Contractual terms
An MSA, a DPA and a security review you can put in front of a buyer. The free tier runs on standard terms, which is fine until somebody's procurement team says it is not.
Named support with an SLA
A person who knows your deployment, with a response time attached, rather than the community and in-product help that cover the free platform.
| Feature | Free | Enterprise |
|---|---|---|
| Price | £0 | Contact us |
| Deployment | Shared cloud, single-tenant workspace | Dedicated self-hosted instance |
| Frameworks | Cyber Essentials, Cyber Essentials Plus, ISO 27001, Defence Cyber Certification L2 | All of them |
| Core modules | All - controls, policies, evidence, risk, security, monitoring | All |
| Integrations | Included | Included |
| Portals | Supplier, training and Trust Centre - all login-free | Same, on your own domain |
| Usage | Unmetered evidence, controls and portal links | Uncapped |
| Data residency | UK and EU infrastructure | The region you specify |
| Support | Community and in-product | Named contact with an SLA |
| Onboarding | Self-serve guided first run | Assisted deployment and migration |
| Managed services | Available as optional add-ons | Included in contract |
| Commercials | Standard terms | MSA, DPA and security review |
How a deployment usually goes
Most organisations start on the free platform and move later, which is the order we recommend: run a real programme in it first, then tell us what your deployment needs to look like. The programme moves with you - controls, evidence, policies and history.
Pricing is per deployment rather than per seat or per framework, and depends on the instance and the services around it. Tell us what you are working with and we will price the actual thing.