Transparent pricing. Every framework included.
Most compliance tools hide their pricing and charge extra for each framework and connector. Joopler publishes its prices. SOC 2, HIPAA, ISO 27001, PCI DSS, and ISO 42001 come standard in every plan, with no per-connector fees. PCI DSS is free, forever.
Save ~17% with annual billing
Free
Get PCI DSS ready at no cost. Upgrade when you add frameworks.
PCI DSS only · free forever
- PCI DSS only
- Tamper-evident evidence ledger + OSCAL export
- Every connector, no per-integration fees
- Public Trust Center
- Community support
Startup
For teams landing their first SOC 2 or HIPAA audit.
billed annually · $6,000/yr
- Up to 25 employees
- All frameworks: SOC 2, HIPAA, ISO 27001, PCI, ISO 42001
- Every connector, no per-integration fees
- Tamper-evident evidence ledger + OSCAL export
- AI usage logging + shadow-AI discovery (observe-only)
- Public Trust Center
- Email support
Growth
For scaling SaaS running multiple frameworks at once.
billed annually · $18,000/yr
- Up to 250 employees
- Everything in Startup
- Inline AI enforcement: block, redact & MCP tool-call deny
- Auditor portal + white-label Trust Center
- Questionnaire automation
- Access reviews, vendor & risk management
- Slack + Jira alerting
- Priority support
Enterprise
For regulated industries, multi-entity groups, and self-host.
annual contract
- Everything in Growth, including inline AI enforcement
- Unlimited employees + custom catalogs
- Self-host option (same codebase)
- SSO, SCIM & custom SLAs
- Multi-entity / multi-tenant management
- Dedicated CSM + auditor introductions
Most tools start around $10,000-$12,000/yr for a single framework, and add roughly $7,500 for each additional one.
Every Joopler plan includes all frameworks (SOC 2, HIPAA, ISO 27001, PCI DSS, ISO 42001), collected once and mapped across frameworks via OSCAL. The third-party audit is separate; we can introduce you to auditors experienced with Joopler evidence.
Prices are for the Joopler platform (software). Choose monthly or annual billing above. Volume and non-profit discounts available.
Common questions about pricing.
Is PCI DSS really free?+
Yes. The Free plan covers PCI DSS end to end at no cost, with the same tamper-evident evidence ledger, OSCAL export, and connectors as the paid plans. Add SOC 2, HIPAA, ISO 27001, or ISO 42001 anytime by upgrading.
Is there a free trial of the paid plans?+
Yes. Start free and connect your stack to see live posture and evidence collection before you buy. No card required.
Do you charge per connector or per framework?+
No. Every plan includes all connectors and all frameworks. Controls that overlap across SOC 2, HIPAA, ISO 27001, PCI DSS, and ISO 42001 are collected once and mapped everywhere via OSCAL, so you never pay a per-framework upsell.
How does this compare to legacy compliance tools?+
Legacy platforms typically start at $10,000-$12,000/yr for a single framework, keep pricing behind a sales call, and add per-framework and add-on fees that push the real cost 30-50% higher. Joopler publishes its pricing, includes every framework, and is usually meaningfully less, with cryptographically verifiable evidence they can't match.
Does the price include the audit?+
No. The third-party audit (the auditor who issues your SOC 2 / HIPAA report) is billed separately by the auditor, typically around $5,000 per framework depending on scope. We can introduce you to auditors who work well with Joopler's OSCAL evidence.
Can we self-host?+
Yes. Self-host runs the same codebase as Joopler Cloud and is available on the Enterprise tier.
Ready to see verifiable compliance?
Start free. Connect your stack. Share auditor-defensible evidence in days, not months.