Two plans. Read-only by design.
Every compliance capability is included in both plans: all 5 frameworks, all 7 connectors, the full 437-rule engine. Professional raises the subscription cap. Nothing else differs.
- ✓All 5 frameworks: 437 rules
- ✓39 Azure resource types
- ✓All 7 connectors
- ✓Email support: 4h/8h/12h by severity
- ✓7-year immutable audit trail
- ✓All 5 frameworks: 437 rules
- ✓39 Azure resource types
- ✓All 7 connectors
- ✓Email support: 4h/8h/12h by severity
- ✓7-year immutable audit trail
Available on Azure Marketplace. Purchases count toward your Microsoft Azure Consumption Commitment (MACC). Estates above 50 subscriptions are not currently served.
What Sev 1 and Sev 2 mean.
Severity is defined by impact on your evidence pipeline, not by ticket wording. Full definitions are part of the Terms of Service.
| Severity | Definition | Response: both plans |
|---|---|---|
| SEV 1 | Platform unavailable, or evidence production failing across all connected subscriptions | Email: 4-hour response |
| SEV 2 | Material feature degraded (scan, export, or notifications) with a workaround available | Email: 8-hour response |
| SEV 3 | Questions, minor issues, feature requests | Email: 12-hour response |
Support is provided by email on both plans, with response targets of 4 hours (Sev 1), 8 hours (Sev 2) and 12 hours (Sev 3), measured during support hours: 08:00–18:00 Irish time, Monday to Friday, excluding Irish public holidays.
The non-negotiables are not tier features.
Read-only by design
The platform reads Azure metadata via Resource Graph. There is no write path, no policy push, no resource modification, on any plan, under any failure mode.
EU data residency
All data processed and stored exclusively in Azure North Europe (Ireland) and West Europe (Netherlands). No data leaves the EU under any flow.
Evidence immutability
Evaluation records are write-once at the database layer. Historical state is permanent. Never updated, never deleted. Seven-year retention.