Commercial access
A guided path to organization access.
Access begins with a guided review of your solution scope, your assurance requirements, and the organization that will own the workspace. Terms are agreed per engagement.
Already part of an organization with a workspace? Sign in
Who it is for
Who uses it
Teams that have to explain their control decisions to someone else.
-
Security and risk teams
Scoping complex cloud, application, data, and AI-enabled solutions, and needing a defensible control baseline rather than a generic checklist.
-
Compliance and quality functions
Required to show why each control applies to a specific solution, what evidence supports it, and which decisions are still open.
-
AI governance groups
Keeping AI control implementation and legal-obligation review as separate records, with separate accountability.
-
Assurance and procurement reviewers
Examining source provenance, review boundaries, and the trace behind a conclusion before they accept it.
The product supports accountable review. It does not replace it.
What acquisition includes
What you receive
One organization, one workspace, one nominated administrator.
-
A dedicated isolated organization workspace
Your organization receives its own workspace. Assessments, evidence, decisions, and audit history are owned by that organization and are not visible to any other customer.
-
Invitation-controlled membership
Nobody joins by signing up, by matching an email domain, or by completing a payment. Every member is invited into the organization, with an explicit role, from inside the application.
-
A nominated first administrator
Acquisition requires your organization to nominate one first administrator. That person verifies identity, opens the workspace, and invites everyone else. The purchaser and the administrator may be different people.
Workspace activation
The four stages
Activation runs from verified access to an open workspace in the same four stages for every customer, and each stage has a named state you can be told about while it is in progress.
- 01
Verify access
The approved purchase, pilot, or contract is verified and recorded as a customer entitlement.
Access state code: acquisition_pending
- 02
Prepare workspace
A customer organization is created or reused and mapped to one isolated workspace that only that organization can enter.
Access state code: workspace_provisioning
- 03
Invite administrator
The nominated customer administrator receives an organization-specific invitation and verifies identity.
Access state code: administrator_invited
- 04
Open workspace
The administrator opens the isolated workspace and invites members with explicit roles from inside the application.
Access state code: workspace_active
How access is priced
Priced by organization
Access is one subscription per customer organization, scaled by the size of its assessment program. The people who contribute evidence and review decisions are deliberately outside the meter: an assessment gets more defensible as more of the right people work on it, so inviting them never costs anything.
Packages and prices are published together with commercial availability, once they are validated with the first customer organizations. Until then, terms are agreed per engagement as part of the guided path.
Prices: published with commercial availability
- Unit of sale
- One subscription per customer organization. It covers the dedicated workspace and everyone your administrator invites into it.
- Scale metric
- Tiers scale with the assessment program: how many assessments are active and how much assurance depth the organization needs. Headcount is never the meter.
- People
- Members, contributors, respondents, and reviewers are never billed, on any tier.
- Pilot
- A paid, scoped first engagement runs in your own organization workspace. It has a defined end date and converts into an ordinary tier.
- Enterprise terms
- Customer-managed single sign-on, directory synchronization, data residency, and dedicated isolation are contractual enterprise terms.
Access boundary
Purchase and authority
Access is checked, never assumed.
Purchase is not authority. A completed purchase starts activation, and it does not open a workspace, create a member, or grant a role. Access exists only once the entitlement, the customer organization, the workspace mapping, and an active membership all agree.
- Entitlement
- A verified purchase, contract, or approved pilot creates a commercial entitlement. It does not create a member.
- Identity
- A verified identity is not access. Entry requires an active membership in the organization that owns the workspace.
- Tenant
- Nothing in a browser can choose an organization. The application resolves the organization, the membership, and the role itself, on every request.
How to start
What happens next
Organizations without a workspace
Access starts with a direct conversation: the solution scope you need to assess, the assurance requirements it has to satisfy, and the organization that will own the workspace.
A guided review confirms that scope and the person your organization nominates as first administrator. Activation begins immediately after.
Access: by direct arrangement
Organizations with a workspace
If your organization already has a workspace, sign in. The application verifies your identity and your organization membership before any workspace opens, and your administrator manages members and roles from inside it.