Scope & fair use
Why we put limits on a fixed price
- A fixed price only means something if the scope is fixed too. Otherwise it is a bait price.
- You get a cap on your own spend, not an open-ended engagement.
- A 30-person company should not be paying for the complexity of a 500-person one.
- If scoping shows you are in a larger band, you hear it before you sign — never as a surprise invoice.
- Named targets — domains, entities, systems — are listed in the contract annexe, agreed in writing before the price is fixed.
Corporate Digital Trust Audit from €2,400
What the price includes
- 1 organisation, 1 primary domain
- Up to 3 sending domains or subdomains
- 1 brand name checked for impersonation
- Up to 3 named executives for footprint review
- Up to 25 externally reachable hosts
Beyond that scope
- +€400 per additional sending domain
- +€300 per additional named executive
- +€600 per additional 25 hosts
- Multi-brand estates: from €4,900
DORA / NIS2 Evidence Sprint from €7,900
What the price includes
- 1 legal entity
- 1 regulation (DORA or NIS2)
- Up to 100 employees
- Up to 15 supplier or ICT contracts reviewed
- Up to 25 existing policies assessed
Beyond that scope
- +€250 per additional supplier contract
- +€1,900 per additional legal entity in the same group
- 100–500 employees, or two regulations at once: from €13,900
AI Governance & Shadow-AI Sprint from €5,900
What the price includes
- 1 legal entity
- Up to 5 AI systems or tools inventoried
- Up to 100 staff surveyed for shadow-AI discovery
Beyond that scope
- +€700 per additional AI system
- +€1,400 per system requiring high-risk classification work
DORA from €4,400
What the price includes
- 1 financial entity
- Register of Information covering up to 20 ICT arrangements
- 1 supervisory relationship (БНБ, КФН, CySEC or equivalent)
Beyond that scope
- +€200 per additional ICT arrangement in the register
- Implementation of the roadmap: from €9,900
Roles we fill
Retainers are time-boxed
A named officer role is an allowance of senior time each month, not unlimited availability. We publish the allowance so you can compare us honestly with anyone else.
| Tier | Per month | Included |
|---|---|---|
| Advisor | €1,400 | 1 day per month |
| Programme | €2,600 | 2 days per month |
| Embedded | €4,900 | 4 days per month |
| Published day rate | €950 |
- Unused time rolls over for one month, up to half of that month’s allowance.
- Additional days are billed at the published day rate — no renegotiation.
- 4-hour response in business hours for critical issues, one business day otherwise.
- No 24/7 promise. Where you need it, a vetted partner provides it and we say so up front.
- 30 days’ notice to cancel, at any time.
Boundaries
Not included
- Implementing the remediation — that is quoted separately as a fixed-scope project
- 24/7 cover or emergency incident-response hours
- Unlimited security-questionnaire answering
- Certification, statutory audit or legal opinions — accredited partners do those
Prices are “from” a named scope unit. The exact figure is fixed in writing after a free scoping call.
Book a scoping call