Transparent pricing. Every framework, one price.
Most compliance tools hide their pricing and charge extra for each framework and connector. Joopler publishes its prices. Every plan from Startup up includes SOC 2, HIPAA, ISO 27001, PCI DSS, and ISO 42001, with no per-connector fees. PCI DSS on its own is $20 a month.
A 12-month term, billed monthly - the best price without paying a year up front
PCI
Get PCI DSS ready for $20 a month. Upgrade when you add frameworks.
PCI DSS only · cancel anytime
- PCI DSS only
- Tamper-evident evidence ledger + OSCAL export
- Every connector, no per-integration fees
- Public Trust Center
- Community support
Startup
For teams landing their first SOC 2 or HIPAA audit.
12-month term · billed monthly
- Up to 25 employees
- All frameworks: SOC 2, HIPAA, ISO 27001, PCI, ISO 42001
- Every connector, no per-integration fees
- Tamper-evident evidence ledger + OSCAL export
- AI usage logging + shadow-AI discovery (observe-only)
- Public Trust Center
- Email support
Growth
For scaling SaaS running multiple frameworks at once.
12-month term · billed monthly
- Up to 250 employees
- Everything in Startup
- Inline AI enforcement: block, redact & MCP tool-call deny
- Auditor portal + white-label Trust Center
- Questionnaire automation
- Access reviews, vendor & risk management
- Slack + Jira alerting
- Priority support
Enterprise
For regulated industries, multi-entity groups, and self-host.
annual contract
- Everything in Growth, including inline AI enforcement
- Unlimited employees + custom catalogs
- Self-host option (same codebase)
- SSO, SCIM & custom SLAs
- Multi-entity / multi-tenant management
- Dedicated CSM + auditor introductions
Most tools start around $10,000-$12,000/yr for a single framework, and add roughly $7,500 for each additional one.
Every Joopler plan from Startup up includes all frameworks (SOC 2, HIPAA, ISO 27001, PCI DSS, ISO 42001), collected once and mapped across frameworks via OSCAL. The third-party audit is separate; we can introduce you to auditors experienced with Joopler evidence.
Prices are for the Joopler platform (software). Choose your term above: a 12-month plan billed monthly, month to month, or a prepaid year. Volume and non-profit discounts available.
Common questions about pricing.
What do I get for $20 a month?+
The PCI plan covers PCI DSS end to end for $20 a month, with the same tamper-evident evidence ledger, OSCAL export, and connectors as the paid plans. It is scoped to PCI DSS; add SOC 2, HIPAA, ISO 27001, or ISO 42001 anytime by upgrading to Startup or above.
Can we try it before we buy?+
Yes. The $20 PCI plan is self-serve: sign up and start in minutes, no call required. For Startup and above, book a demo and our team gets you set up, so you can see live posture and evidence collection on your own stack before you commit.
Do you charge per connector or per framework?+
No. Every plan includes all connectors, and every plan from Startup up includes all frameworks (the $20 PCI plan is scoped to PCI DSS). Controls that overlap across SOC 2, HIPAA, ISO 27001, PCI DSS, and ISO 42001 are collected once and mapped everywhere via OSCAL, so you never pay a per-framework upsell.
How does this compare to legacy compliance tools?+
Legacy platforms typically start at $10,000-$12,000/yr for a single framework, keep pricing behind a sales call, and add per-framework and add-on fees that push the real cost 30-50% higher. Joopler publishes its pricing, includes every framework, and is usually meaningfully less, with cryptographically verifiable evidence they can't match.
Does the price include the audit?+
No. The third-party audit (the auditor who issues your SOC 2 / HIPAA report) is billed separately by the auditor, typically around $5,000 per framework depending on scope. We can introduce you to auditors who work well with Joopler's OSCAL evidence.
Can we self-host?+
Yes. Self-host runs the same codebase as Joopler Cloud and is available on the Enterprise tier.
Ready to see verifiable compliance?
Book a demo. Connect your stack. Share auditor-defensible evidence in days, not months.