Risk signals your whole review board can sign off on.
The same API and the same public prices as everyone, with what a large organization needs around them: decisions you can explain, data you control, documents you can file, and signed paper when your policies require it.
Evaluating for your company? Sign up with your work email and request a $10 credit from the Billing page.
Decisions you can explain
- Every point of a score is a named reason, in a sentence an analyst can read.
- You set the thresholds for review and deny, per organization.
- Each response names the rule set that produced it; stored assessments keep it for audit.
- A signal that is down raises the verdict, never lowers it.
A review you can finish from your desk
- Stored and processed in the EU, in Belgium. The one exception, the email check, is documented.
- Retention is yours to set, down to zero. Files are deleted after 30 days.
- Two sub-processors, named, with 30 days’ notice of any change.
- A pre-signed GDPR Article 28 DPA, and a page that says what we do not have.
Paper and payment, your way
- One public rate card. No negotiation needed to know the price.
- Invoices and bank transfer, without a contract.
- Purchase orders, a signed MSA, an SLA and a negotiated DPA under an enterprise agreement.
- Billing address and tax ID collected at checkout.
An integration that stays simple
- One REST call, JSON in and out, an OpenAPI contract.
- Sandbox keys with deterministic results, including a simulated outage.
- Stable error codes, and a cost on every response.
- Files by API for the batch jobs, with the same rates.
Built for more than one person.
An organization, its members, their roles and its keys, managed from the dashboard.
Four roles
Owner, admin, developer and analyst. An analyst reads assessments; a developer manages keys; billing stays with the owner.
Invitations bound to a verified email
A colleague joins only by invitation, and only with the verified address the invitation was sent to.
Keys you can rotate
Up to 25 active keys per organization, live and sandbox, each named, each revocable, each stored only as a hash.
A record behind every decision
Assessments are stored with their inputs, score, reasons and raw signal results for as long as your retention says, the most recent ones listed in the dashboard.
Everything your vendor file needs.
Published, current and written to be read. Each page prints cleanly, or saves as a PDF, for a questionnaire or a contract file.
Talk to sales- Security & sub-processorsLocations, retention, measures, sub-processors, and what we do not have.
- Data processing agreementPre-signed, GDPR Article 28, applies to every account.
- GDPRThe two roles we play, and what stays yours to decide.
- Privacy policyWhat we collect about you as a customer, and why.
- Terms of serviceThe agreement every account runs on.
- Enterprise agreementMSA, SLA, negotiated DPA, purchase orders.
What enterprise buyers ask.
Is there a separate enterprise product or price?
Do you hold SOC 2 or ISO 27001?
Do you support single sign-on?
What does an enterprise agreement cost?
Can we pay by invoice?
Can we evaluate before we buy?
Who do we talk to?
Send us your questionnaire.
Or the clause your policy requires. We will tell you plainly what we can sign.