Plans that grow with your systems
Priced by what you connect and the frameworks you need, not by the number of people whose data you hold. Every plan includes the DPDP Act, DPDP Rules and CERT-In control library and the policy, risk, Statement of Applicability and audit tools. Add ISO 27001, SOC 2, NIST CSF, GDPR or PCI DSS when you need them.
Launch pricing · Indian rupees · GST extra
Free trial
See your real posture before you buy.
No card needed
- Up to 3 users
- 2 connected systems
- Up to 5 data stores scanned
- Full DPDP and CERT-In assessment
- Every framework to evaluate, with policies, risks, SoA and audits
- 1 security questionnaire (up to 100 questions)
- Board pack and audit package, marked "trial"
Starter
For startups and SMEs getting ready for May 2027.
Billed annually: ₹1,78,800 + GST
- Up to 5 users
- 3 connected systems
- Up to 10 data stores scanned
- Consent ledger, rights requests, DPIAs
- Breach and CERT-In incident clocks
- Policies, risk register, gap analysis, SoA and audits
- ISO 27001, SOC 2 and other frameworks as add-ons
- 10 security questionnaires a year
- Public trust page
- Slack and e-mail alerts
- E-mail support, business days
Growth
For multi-cloud companies with customers asking for proof.
Billed annually: ₹4,78,800 + GST
- Up to 20 users
- 15 connected systems
- Up to 50 data stores scanned
- Everything in Starter
- 2 frameworks included, such as ISO 27001 and SOC 2
- Jira, ServiceNow and webhook integrations
- Unlimited questionnaires and vendor evidence requests
- AI governance, shadow AI detection and privacy analysis
- Single sign-on (OpenID Connect) and API keys
- Priority support
Enterprise
For large and Significant Data Fiduciaries.
Annual agreement, scoped to your estate
- Unlimited users
- Connected systems and data stores to your scope
- Everything in Growth
- Every framework included
- Significant Data Fiduciary module: DPIA, independent audit support, algorithmic due diligence
- Multiple legal entities
- Named customer success manager
- Onboarding and connector validation with your team
- SAML single sign-on and SCIM user provisioning
- Private deployment (planned)
Pay only for the frameworks you need
The DPDP Act, DPDP Rules and CERT-In are in every plan. Add other frameworks one at a time, on the same controls and evidence.
Billed annually: ₹58,800 + GST
Each add-on unlocks one framework
- ISO 27001:2022, SOC 2, NIST CSF 2.0, GDPR or PCI DSS 4.0.1
- Posture from controls you already test
- Statement of Applicability and gap analysis
- Crosswalk export and audit package for your auditor
Growth includes two frameworks of your choice and Enterprise includes all of them. Dropping an add-on never deletes anything.
Estimate your monthly price
Compare plans
| Feature | Trial | Starter | Growth | Enterprise |
|---|---|---|---|---|
| Users | 3 | 5 | 20 | Unlimited |
| Connected systems | 2 | 3 | 15 | Scoped |
| Data stores scanned for personal data | 5 | 10 | 50 | Scoped |
| DPDP Act, DPDP Rules and CERT-In controls | Yes | Yes | Yes | Yes |
| Findings, re-tests and exceptions | Yes | Yes | Yes | Yes |
| Consent ledger, rights requests, DPIAs | Yes | Yes | Yes | Yes |
| ISO 27001, SOC 2, NIST CSF 2.0, GDPR, PCI DSS | All, to evaluate | Add-ons | 2 included, more as add-ons | All included |
| Policies, risk register, gap analysis and gap tasks | Yes | Yes | Yes | Yes |
| Statement of Applicability and audit workspace | Yes | Yes | Yes | Yes |
| Regulatory change monitoring | Yes | Yes | Yes | Yes |
| Board pack and audit evidence package | Marked "trial" | Yes | Yes | Yes |
| Security questionnaires | 1 | 10 a year | Unlimited | Unlimited |
| Public trust page | Preview only | Yes | Yes | Yes |
| Vendor evidence requests | 1 vendor | 10 vendors | Unlimited | Unlimited |
| Crosswalk exports and audit packages for those frameworks | — | Yes | Yes | Yes |
| AI governance and shadow AI detection | Yes | — | Yes | Yes |
| Privacy analysis: lineage, purpose drift, minimisation | Yes | — | Yes | Yes |
| Slack and e-mail alerts | — | Yes | Yes | Yes |
| Jira, ServiceNow, webhooks | — | — | Yes | Yes |
| API keys | — | — | Yes | Yes |
| Single sign-on (OpenID Connect) | — | — | Yes | Yes |
| SAML single sign-on and SCIM provisioning | — | — | — | Yes |
| Significant Data Fiduciary module | — | — | — | Yes |
| Support | E-mail, business days | Priority | Named manager |
A connected system is one cloud account or subscription, one identity directory, one code organisation or one database server. Connectors are in early access and are validated with each customer during onboarding.
Why these prices
Consent-only tools cost less but do not test your systems. Global compliance platforms test systems but price in dollars, treat DPDP and CERT-In as add-ons and often start at several lakh rupees a year before an Indian framework is included.
TrustNiq is built around Indian obligations first, with policy, risk and audit tools in every plan, and prices set for Indian budgets. ISO 27001, SOC 2, NIST CSF, GDPR and PCI DSS sit on the same evidence and are added as you need them, so you do not pay for frameworks you do not use.
Outside India, each plan has a fixed price in your currency. It is set from the rupee price and already covers payment and currency conversion costs, so your invoice matches this page whatever the exchange rate does.
What every plan includes
- Evidence hashing and a verifiable audit trail
- Data export at any time, in open formats
- Multi-factor authentication for every user
- Data residency in India by default
- No charge per Data Principal or per record
Pricing questions
Which currency do we pay in?
Organisations in India are invoiced in rupees. Elsewhere we invoice in US dollars, euros, pounds sterling, Australian, Canadian or Singapore dollars, or UAE dirhams, as shown for your country; other countries pay in US dollars. The page picks a currency from your location, and you can change it.
Will exchange rates or bank charges change what we pay?
No. Prices outside India are fixed in your currency for your subscription term, not converted on the day, and already cover our payment and currency conversion costs. You pay the invoiced amount; your own bank's charges, if any, stay with you.
Are prices inclusive of tax?
No. In India, GST is added at the applicable rate (registered businesses can usually claim it as input tax credit). Outside India, prices exclude local VAT, GST or sales tax; business customers usually account for it themselves under reverse charge. If your law requires you to withhold tax from a payment to us, the invoice is grossed up so the amount we receive equals the price.
What happens when the free trial ends?
The organisation becomes read-only: you can still sign in, view results and export your data. Choose a plan to continue. If you do nothing, trial data is deleted 30 days after the trial ends.
How do framework add-ons work?
Every plan includes the DPDP Act, DPDP Rules and CERT-In Directions. ISO 27001, SOC 2, NIST CSF 2.0, GDPR and PCI DSS are added one at a time: Growth includes two of your choice, Enterprise includes all of them, and on Starter each one is an add-on. An add-on unlocks a framework's posture, Statement of Applicability, gap analysis, crosswalk export and audit package. If you later drop an add-on, nothing is switched off or deleted; you just cannot activate another framework until you are back within your allowance. The free trial lets you try every framework.
What counts as a connected system?
One cloud account or subscription, one identity directory, one code organisation or one database server. Vulnerability report imports and API submissions do not count.
Can we change plans later?
Yes. Upgrades take effect immediately and are charged pro rata for the rest of the billing period. Downgrades apply from the next renewal.
Do you offer discounts for startups, NGOs or educational institutions?
Yes, on request. Early customers also get launch pricing held for their first renewal.
Can TrustNiq run in our own cloud?
A private deployment is planned for Enterprise customers. Talk to us about your requirements.
See your compliance posture on your own systems
DPDP, CERT-In, ISO 27001, SOC 2 and more. Connect one cloud account and one identity directory in a 14-day trial. No card needed.