The entire sales process, published in advance.
You know the sequence. Fill in the form, get a discovery call, get a demo, get a quote that depends on how you answered "how many employees", get a follow-up from someone named Chad. We skipped it. Here is the price, the terms and the part we do not do.
$3,000/year if you run the numbers. Same figure whether you are four people or forty-nine.
- Unlimited users — invite the whole company
- SOC 2, ISO 27001 and GDPR in one control set
- Onboarding run by the founding team
- No seat tiers, no framework upsell, no setup fee
Not included, and we will not pretend otherwise: the independent CPA firm that performs the examination. That is billed by them, not us.
What you would have asked on the call
In the order people actually ask them, including the ones vendors prefer you ask late.
- Is that price real, or a starting point?
- Real, and on a public page. There is no volume tier and no negotiation theatre. If we discount for you and not for the next founder, we have simply been overcharging one of you.
- Do I have to sign for a year?
- No. Monthly. Compliance is a long game and we would rather earn month twelve than trap you in it.
- Is there a free trial?
- There isn't. Two weeks alone inside an empty compliance tool teaches nobody anything — the value shows up once your systems are connected. Instead: a real price you can read, and a free policy generator you can use today without talking to us.
- Who runs the demo?
- A founder. There is no sales department to get past and no qualification call before the demo. If you would rather just read, everything is on the site.
- Does buying this get me a SOC 2® report?
- No, and be suspicious of anyone who implies otherwise. The report comes from an independent CPA firm that examines your controls. We get you to the point where that examination is a short, boring conversation.
- We are twelve people. Are we too small?
- You are exactly the size this was built for. Under fifty, no compliance hire, a deal or an investor asking questions. That constraint shaped every screen.
- What if it does not work out?
- You cancel, and your policies, evidence and register are yours to take with you. Holding data hostage is a retention strategy for products nobody wants to keep.
Nobody buys this in a vacuum
You have four options and you already know three of them. Written out plainly, because a comparison you can check is more persuasive than one you cannot.
Do nothing yet
Free, until the quarter a customer asks and the answer is "give us six months". The cost lands all at once, usually in the middle of a deal.
A spreadsheet and willpower
Genuinely works at eight people, right up until the evidence needs dates and somebody asks what access looked like in March.
A consultant
Excellent judgement, hourly rate, and a body of knowledge that leaves when the engagement ends. Budget in the tens of thousands.
A large platform
Serious software, built for companies with a compliance team, priced and staffed accordingly. Plans commonly start in the thousands per year and climb with seats and frameworks.
The unglamorous procurement answers
The questions your finance person will ask on the day, and one they should ask more often.
Kickoff
Onboarding is run by the founding team, not handed to a customer success queue. We connect your systems with you rather than sending a help article.
Invoices and paperwork
Proper invoices, a DPA when you need one, and answers to your own vendor review. We are on the other side of that form often enough to sympathise.
Your data
Exportable, and it leaves with you if you go. See how we handle it — we run our own program inside the product.
Support
You are messaging the people who wrote the code. That does not scale forever, which is precisely why it is worth having now.
Second framework
No upgrade. Controls map across SOC 2, ISO 27001 and GDPR, so ISO after SOC 2 is a gap exercise rather than a fresh purchase.
Cancelling
Monthly, so leaving is a decision rather than an escape. Nobody will put you through a retention call.
You cannot actually buy anything on buyhumadroid.com
Which is a poor showing for the name. Humadroid was what we were called before the compliance product became the company and turned into AuditBadger; we kept the domain, and we send a little outbound mail from it so a single spam filter having a bad day cannot silence the whole business.
Checkout, docs and the humans live at auditbadger.com. If our email was not welcome, reply and say so — we would rather shorten the list than annoy you.
No call required, but one is available
Start on the pricing page like a normal purchase, or book thirty minutes with a founder and ask the awkward questions directly.
Or read the SOC 2 overview first. It is free and nobody will call you about it.