Published prices. No quote calls.

An in-scope supplier is one whose disruption, compromise, or substandard security would materially affect your essential or important service under NIS2 — not your whole vendor master, just the suppliers you actually have to track. Most regulated mid-market buyers have between 10 and 80 in-scope suppliers, depending on size and sector. A 100-person Slovak utility typically lands in the 20–35 range. A 400-person fintech often sits closer to 50–80. Manufacturing buyers concentrate in fewer, more critical suppliers; SaaS-heavy buyers tend toward longer in-scope lists.

The supplier library is the broader register of all suppliers visible in your account — including the in-scope ones plus suppliers you are tracking but not actively assessing. You pay for in-scope suppliers, not for everyone in the library. The library exists so you can map your full vendor ecosystem in one place, then promote suppliers into in-scope as your assurance programme grows. Library caps: 25 in Free, 200 in Starter, 400 in Growth, 600+ in Enterprise.

No. One supplier counts as one in-scope supplier per year, no matter how many process areas you assess them against — governance, incident handling, BC/DR, supply chain dependencies, secure development, access control, asset and logging. Reassessments triggered by certificate expiry, incident, or scheduled review do not count as additional suppliers. The pricing follows the supplier, not the workload.

You can add a Supplier Uplift pack for €1,200 a year, which adds ten in-scope suppliers to your current tier. Up to three packs stack on Starter or Growth — beyond that we will walk you through the next tier instead. Uplift packs are pro-rated to the remainder of your annual term. Enterprise has uncapped supplier counts and does not need uplift packs.

Paid tiers bill annually at launch. We're a small team, and every hour spent operating a monthly billing pipeline is an hour not spent shipping V1.2. Annual matches how every comparable product in the market sells — 3rdRisk, OneTrust, Vanta, Drata, Risk Ledger. The pilot through Q4 2026 is your trial. If V1 launch signups tell us monthly is what mid-market buyers want, we'll add it on Microsoft Marketplace. Until then: one invoice a year, on the date you sign.

No. Tiers include a fixed number of buyer users — 1 in Free, 5 in Starter, 10 in Growth, unlimited in Enterprise. If you need more users on a tier, that is a signal to look at the next band, not a per-seat upsell.

From V1 production (Q4 2026), yes — Supply Chain Assurance will be available on the Microsoft commercial marketplace, with subscription cost committable against your Microsoft Azure spend. Direct billing will follow. Pilot customers join under a direct agreement at free or compute-cost pricing.

Suppliers do most of the work in the assurance loop. Charging you to answer your customer's questions would be backwards. The free supplier tier covers a verified trust profile, a reusable evidence library, response to buyer requests, and the supplier directory. Buyers pay because they need management visibility across many suppliers — that is where our price sits.