Skip to main content
All pricing

Pricing · Sagentix Comply (Cyber & AI practice)

Prove your security to whoever is asking

A buyer, a department or a regulator is asking you for proof of cyber security. Sagentix Comply walks you through the framework they ask for, in plain language, and keeps your evidence current. You pay per framework, by the month, and exploring is free.

Who is asking you for proof?

Pick the situation closest to yours. The workspace sets up the frameworks your buyers ask for, in plain language, and you can add others later.

Start here

Canadian defence supplier

You bid on National Defence contracts, and perhaps sell to the US Department of Defense.

  • Canadian Program for Cyber Security Certification (CPCSC) Level 1
  • CPCSC Level 2
  • Cybersecurity Maturity Model Certification (CMMC) Level 1 (included)
  • CMMC Level 2 (self-assessed)

From CA$149 a month, billed annually

CPCSC Level 1 (Band 1, 149); CMMC Level 1 included at no charge

Small or medium Canadian business asked to prove basic security

A client, a large buyer or a contract asks you to show basic cyber security. Your buyers set the deadline.

  • Canadian Centre for Cyber Security (CCCS) Baseline Controls
  • Cross-Sector Performance Goals (CPG) 2.0 of the US Cybersecurity and Infrastructure Security Agency (CISA)
  • CPCSC Level 1
  • System and Organization Controls (SOC) 2 readiness
  • ISO/IEC 27001 readiness (International Organization for Standardization)

From CA$149 a month, billed annually

CCCS Baseline Controls (Band 1, 149)

SaaS selling to businesses

Customers send you security questionnaires and ask for SOC 2 or ISO 27001.

  • SOC 2 readiness
  • ISO/IEC 27001 readiness

From CA$299 a month, billed annually

With ISO/IEC 27001 as well: CA$648 a month.

SOC 2 readiness (Band 2, 299); with ISO/IEC 27001: 499 + SOC 2 added at 149 = 648

Canadian financial services and their suppliers

You are a federally regulated financial institution, or you answer their third-party questionnaires.

  • SOC 2 readiness
  • ISO/IEC 27001 readiness

From CA$299 a month, billed annually

With ISO/IEC 27001 as well: CA$648 a month.

SOC 2 readiness (Band 2, 299); with ISO/IEC 27001: 499 + SOC 2 added at 149 = 648

Ontario hospital, school board, college or university

O. Reg. 51/26 asks you for a cyber security program and a maturity assessment with its summary.

  • Cybersecurity Framework (CSF) 2.0 of the National Institute of Standards and Technology (NIST)
  • CCCS Cloud Medium readiness

From CA$299 a month, billed annually

NIST CSF 2.0 (Band 2, 299)

Healthcare provider or health-data supplier

You provide care, or you host or process personal health information for those who do.

  • NIST CSF 2.0
  • Health Insurance Portability and Accountability Act (HIPAA) Security Rule
  • SOC 2 readiness
  • ISO/IEC 27001 readiness

From CA$448 a month, billed annually

NIST CSF 2.0 (299) + HIPAA Security Rule added (149) = 448

Company building or deploying AI

You build AI systems, or put them to work for customers who ask how they are governed.

  • SOC 2 readiness
  • ISO/IEC 27001 readiness
  • EU Artificial Intelligence (AI) Act
  • Guideline E-23 of the Office of the Superintendent of Financial Institutions (OSFI)
  • Treasury Board (TBS) Directive on Automated Decision-Making

From CA$378 a month, billed annually

SOC 2 readiness (299) + EU AI Act added (79) = 378

Canadian critical infrastructure operator or supplier

You run or supply a vital service, and want your cyber security program running before rules bind you.

  • NIST CSF 2.0
  • NIST Special Publication (SP) 800-82 for operational technology (OT)
  • CISA CPG 2.0
  • CPCSC Level 1

From CA$797 a month, billed annually

OT Moderate (Band 3, 499) + NIST CSF 2.0 added (149) + CISA CPG 2.0 added (149) = 797

Cloud or SaaS selling to the Government of Canada

Departments use your service, and the Cyber Centre assesses it against its cloud profiles.

  • CCCS Cloud Medium readiness
  • CCCS Cloud High readiness
  • US Federal Risk and Authorization Management Program (FedRAMP) 20x readiness
  • SOC 2 readiness

From CA$1,148 a month, billed annually

CCCS Cloud Medium (Band 4, 999) + SOC 2 added (149) = 1,148

Government of Canada department or agency

You run systems for a federal department; each needs an assessment and an authorization decision.

  • CCCS Medium (Protected B) readiness
  • One assessment and authorization path per system

From CA$999 a month per system, billed annually

CCCS Medium (Protected B) readiness (Band 4, 999), per system

Crown corporation

Your board, auditors or federal partners may expect the same assessment and authorization.

  • CCCS Medium (Protected B) readiness
  • One assessment and authorization path per system

From CA$999 a month per system, billed annually

CCCS Medium (Protected B) readiness (Band 4, 999), per system

The Government of Canada provides its own online Level 1 self-assessment tool, and the self-attestation is yours to make. Sagentix does not certify anyone and does not replace that tool: we sell the work to reach a truthful result and keep it current.

One price per framework

Frameworks are grouped into four bands by how much work they take: the number of controls, and whether you attest yourself or an auditor or government assesses you.

  • Band 1

    CPCSC Level 1 · CMMC Level 1 · CCCS Baseline Controls · EU AI Act · OSFI Guideline E-23 · TBS Directive on Automated Decision-Making

    Added framework: CA$79 a month (CA$89 on monthly billing)

    CA$149a month, billed annually

    CA$179 on monthly billing

  • Band 2

    SOC 2 readiness · HIPAA Security Rule · CISA CPG 2.0 · NIST CSF 2.0 · CMMC Level 2 (self-assessed)

    Added framework: CA$149 a month (CA$179 on monthly billing)

    CA$299a month, billed annually

    CA$359 on monthly billing

  • Band 3

    ISO/IEC 27001 readiness · CPCSC Level 2 · NIST SP 800-82 OT (Low, Moderate)

    Added framework: CA$249 a month (CA$299 on monthly billing)

    CA$499a month, billed annually

    CA$599 on monthly billing

  • Band 4

    CCCS Cloud Medium and Cloud High readiness · CCCS Medium (Protected B) readiness · FedRAMP 20x readiness · NIST SP 800-82 OT (High)

    Added framework: CA$499 a month (CA$599 on monthly billing)

    CA$999a month, billed annually

    CA$1,199 on monthly billing

  • Your most demanding framework is billed at its band price.
  • Each other framework costs its “added” price, half its band.
  • You never pay for more than 3 frameworks at once.
  • CMMC comes free beside CPCSC at the same level: the same evidence answers both.

Want a person with you?

Human help is an add-on to any framework subscription, not a separate plan. We confirm your request, then switch it on.

Guided support

+CA$300a month, billed annually

CA$360 a month on monthly billing

  • An onboarding gap review
  • A two-hour session before each annual self-attestation
  • A quarterly evidence check
  • Two advisory hours a quarter

CPCSC Level 1 (CA$149) with Guided support: CA$449 a month.

Level 2 service

+CA$750a month, billed annually

CA$900 a month on monthly billing

  • System security plan and plan of action, kept current
  • A mock assessment before the accredited one
  • Two advisory hours a month

CPCSC Level 2 (CA$499) with the Level 2 service: CA$1,249 a month.

Advisory hours

Monthly blocks on a 12-month term. Unused hours roll forward one month.

  • 4 hours a monthCA$1,000
  • 8 hours a monthCA$1,900
  • 16 hours a monthCA$3,600

Ad hoc hours: CA$300 an hour.

Free to explore, with no trial clock: sign up, read your plan in plain language, see the requirements and what the collector would check. Paying unlocks the collector, evidence uploads, policies, the declaration and share links. You subscribe inside the workspace, monthly or annually. No onboarding fee on annual plans; CA$500 onboarding on monthly plans. Audit and certification-body fees are always extra. The workspace holds Unclassified and Protected A information only.

How authorization projects are priced

Two steps, and the first one is deliberately small. The subscription has published prices.

Step one

For an authorization project: a paid pre-qualification first

Every engagement starts with a scope-fixing first unit at its own fixed price. It produces a scoping memo: a security categorization, the control profile that actually applies, a complexity classification, and the scope the work genuinely needs rather than the one that fits a template.

The fee is credited against the engagement if you proceed within ninety days. Fixed-price offers such as First Agent, Known Stack are separate products with their own published prices.

For AI agents, this first unit is the AI Agent Workspace Readiness Check

Step two

Then a firm fixed price for the project

Catalogue work sold through a prime is firm-fixed-price in defined blocks. Continuing readiness work is the subscription: the workspace plus advisory hours, at the published prices.

Why authorization projects have no published number

We publish a price where we can guarantee the scope. The subscription and the advisory hours have a fixed scope, so their prices are published. An authorization project does not work that way — the effort depends on your control environment, your cloud footprint and how much evidence already exists. Anyone who publishes a fixed number for that is either quoting a gap analysis or planning to re-scope you later. We start with a paid pre-qualification, and then you get a firm fixed price for the actual work.

Looking for something else? See Go-to-Market pricing, or the three fixed-price offers.