Yes. US clients are billed in USD and India entities can be billed in INR where that simplifies your accounting.

Pricing | AttriEdge GCC Compliance Operations

Q: Why isn't your exact retainer price published?

The starting prices are published. The exact figure depends on scope: frameworks in play, number of entities and questionnaire volume. The diagnostic produces the precise number.

Risk & Readiness Review $999

A 90-minute diagnostic call plus a 48-hour Evidence Index Blueprint: your top 10 gaps with severity and time-to-close, and a 30/60/90 day priority roadmap.

If you continue to a retainer within 14 days, the $999 counts toward your first retainer month.

Book the diagnostic →

My guarantee

If the blueprint doesn't surface at least three gaps worth fixing, the diagnostic is free.

already just want the $999? book it above. otherwise here is where it leads ↓

Foundational

Starting at$3,500 / mo

vs. a $120K compliance hire you still manage

For companies starting their compliance journey and getting the operating layer running.

Monthly evidence collection across all 5 domains
Up to 2 security questionnaires per month
Vendor risk register, up to 30 vendors
1 hour per week synchronous time
Quarterly Business Review
Template library access
30-day onboarding sprint, scoped and included in your first month

Start with the diagnostic

Active

Starting at$7,500 / mo

vs. a fractional CISO plus a separate ops hire

For companies with an active enterprise pipeline, multi-framework needs or India operations. Typically $7,500 to $9,000 a month.

Everything in Foundational
Full ownership of all three operating pillars
DPDPA and US framework mapping
Up to 6 security questionnaires per month
Multi-framework: SOC 2 plus ISO 27001 plus one of HIPAA or DPDPA
Quarterly compliance operations sprint
3 hours per week synchronous time

Start with the diagnostic

What the operating layer replaces

The serious option, without the serious overhead

The honest comparison most pricing pages avoid. Annual fully-loaded cost of the usual ways a US SaaS covers this work, against the Active retainer.

In-house compliance hireUS, fully loaded

$120K-180K

Fractional CISO + ops supporttwo engagements

~$130K

AttriEdge Active retainerone operator, fully owned

~$90K-108K

One accountable operator running the layer, for less than a single loaded hire you would still have to manage. And you can cancel any month.

The no-lock-in promise

01 Month to month, always 02 Cancel by the 28th, no penalty 03 Zero termination fees 04 No multi-year contract, ever

What happens when you book

No mystery. A bounded, three-step start.

STEP 01

You book the diagnostic

One card payment, no sales call to get through first. You pick a slot that works.

today

STEP 02

The 90-minute call

I run a working session on your real environment, scheduled inside 14 days of booking.

within 14 days

STEP 03

Your blueprint lands

The Evidence Index Blueprint, your top 10 gaps and a 30/60/90 plan, in your inbox.

48 hours after the call

Why one operator, not a firm

One person answers for the work. Every time.

At a firm, your account is a rotating cast: a partner sells it, a manager scopes it, and a junior consultant you have never met does the actual work. When a buyer's security team pushes back, nobody owns the answer.

I run this as a single accountable operator. The person who scopes your compliance is the person who does it and the person who answers for it when an auditor or a buyer asks. That is the whole point of the model, and it is why the work holds up under review.

one name on the work. mine.

Founding cohort, now

You would be early, and that works in your favor.

I am taking a small founding cohort of clients right now. It is the most hands-on this engagement will ever be.

Direct access to the operator, not a support queue
The blueprint and roadmap shaped around your exact setup
Priority while the book is still open

Compare the two retainers

Every engagement starts with the $999 diagnostic. The table compares the two ongoing retainers it can lead into.

What you get	FoundationalFrom $3,500/mo	MOST POPULAR ActiveFrom $7,500/mo
Monthly evidence collection	✓	✓
Security questionnaires handled	Up to 2/mo	Up to 6/mo
Vendor risk register	Up to 30 vendors	Expanded
Synchronous time	1 hr/week	3 hrs/week
Quarterly Business Review	✓	✓
Template library access	✓	✓
Vulnerability remediation	Evidence support	Full ownership
Chain-of-custody evidence	Evidence support	Full ownership
DPDPA and US framework mapping	Evidence support	Full ownership
Multi-framework (SOC 2, ISO 27001, HIPAA or DPDPA)	—	✓
Quarterly compliance operations sprint	—	✓

What is included

Risk & Readiness Review $999, one-time

90-minute live diagnostic call covering 5 compliance domains
48-hour Evidence Index Blueprint, 6 to 8 page PDF
- Domain scorecard across access governance, vulnerability management, evidence systems, vendor management and the DPDPA statutory layer
- Top 10 gaps identified with severity rating and time-to-close estimate
- 30/60/90 day priority roadmap
- Recommended retainer tier with rationale
- One sample template relevant to your largest gap
30-minute readout call to walk through the blueprint
If you continue to a retainer within 14 days, the $999 counts toward your first retainer month

Foundational Retainer $3,500/month

Monthly evidence collection cycle across all 5 domains
Up to 2 security questionnaires per month
Vendor risk register maintenance, up to 30 vendors
1 hour per week synchronous time over Slack and calls
Quarterly Business Review, 90 minutes
Access to the template library
A scoped 30-day onboarding sprint, included in your first month and bounded to that window

Active Retainer typically $7,500 to $9,000/month

Everything in Foundational, plus:
Full ownership of the vulnerability remediation workflow, Pillar 1
Full ownership of chain-of-custody evidence trails, Pillar 2
Full ownership of DPDPA and US framework mapping, Pillar 3
Up to 6 security questionnaires per month
Multi-framework compliance: SOC 2 plus ISO 27001 plus one of HIPAA or DPDPA
Quarterly compliance operations sprint
3 hours per week synchronous time

Add-ons

Available to retainer clients only. One-time charges.

Audit War Room

A 2-week sprint for when you have an active audit plus a 50-plus questionnaire deadline.

$5,000 flat

DPDPA Compliance Sprint

A 30-day DPDPA-ready setup for India operations expansion.

$7,500 flat

Multi-Entity Setup

For adding a new offshore entity to your existing compliance posture.

$3,500 flat

Frequently asked questions

Why isn't your exact retainer price published?

The starting prices are published, which is more than most will do. The exact figure depends on scope: which frameworks are in play, how many entities and your questionnaire volume. The diagnostic produces the precise number, with the rationale.

Do you offer discounts?

Annual prepay is available at a discount. Otherwise the published rates are the rates. I would rather hold an honest price than inflate it to discount it back.

What about a free consultation first?

The $999 diagnostic is the consultation, and it produces a real deliverable rather than a sales pitch. If you continue within 14 days it counts toward your first retainer month, so the assessment effectively costs nothing if we work together.

Can we do hourly?

No. Compliance operations is continuous work, and hourly billing punishes the efficiency you are paying for. The retainers are scoped so you know the monthly number in advance.

How does invoicing work?

Monthly, in advance. Cancel by the 28th of any month with no penalty and zero termination fees. US clients are billed in USD.

Do you accept INR?

Yes. Where it simplifies your accounting, an India entity can be billed in INR while the US parent is billed in USD.

Transparent pricing.
No lock-ins.