Guidestone pricing
One price. Every framework included.
Guidestone covers around 105 frameworks and 27,724 controls, AI governance, and your cloud and ITSM evidence. All of it, at every price. There are no per-framework fees, no per-module upgrades, and no metered seats for the people who own your controls.
Always included, at every tier.
- All ~105 frameworks (~27,724 controls)
- AI governance: EU AI Act, ISO 42001, ISO 27701
- AWS, Azure and GCP configuration ingestion
- ITSM incident and change ingestion. Guidestone ingests from your ITSM tools and sits alongside them, it does not replace them
- Control-owner rollout across your organisation, free and never metered per head
No per-framework add-ons and no per-module AI-governance fee, ever.
Priced by the size of your organisation, nothing else.
- Up to 3 full users
- Control-owner rollout included
- Up to 6 full users
- Control-owner rollout included
- Up to 12 full users
- Unlimited control owners
- Priority support
- Up to 12 full users
- Unlimited control owners
- Priority support
- Up to 12 full users
- Unlimited control owners
- Priority support
Need more full users than your band includes? £1,500 a year each. Control owners are always free.
Every price includes standard go-live (one to two weeks) for £1,500, one time.*
* Onboarding covers platforms with a tested connector. Custom ITSM tools, or platforms without a tested connector, are not included; we estimate those on review.
What you actually get.
Frameworks and standards
One library covering ISO 27001, SOC 2, GDPR and around 105 frameworks in all, mapped across 27,724 controls, kept current for you.
AI governance, built in
EU AI Act, ISO 42001 and ISO 27701, included at every band, not a separate module.
Evidence, ingested automatically
We read AWS, Azure and GCP configuration and the incidents and changes in your ITSM tools, and hold only the signal your controls need, so they stay backed by what is actually happening. Your systems remain the source of record.
Your whole team, no seat tax
Bring every control owner in at no extra cost. You only pay for full users, and only above your band.
Prefer to run it in your own tenancy?
Guidestone can run inside your own environment, for data residency or control requirements, with the same all-inclusive platform.
Partner or MSP? We licence per managed entity. Talk to us.
We run on your data. We do not hold it.
Guidestone runs its engines against your systems and does not take a copy of them. Your incidents, cloud configuration and documents stay where they live.
- Incidents: we hold the incident type and impact, to map your assets to risks and controls. The incident itself stays in your ITSM tool.
- Cloud, Azure, GCP and AWS: we read configuration to assign assets to risks and controls, not to copy your environment.
- Documents: we assess their content against the obligations in your controls and clauses. We do not store your documents.
A full copy of your database, made available immediately on request, and a single-user, read-only live version of your data in a read-only app for up to six months if you need it. Data retention is agreed with you at signature, and our policies, including our GDPR obligations, follow what we agree with you.
Straight answers.
Where does my data live, and what do you actually store?
Your incidents, cloud configuration and documents stay in your own systems. Guidestone runs its engines against them and holds only what compliance needs: incident type and impact, control assessments, and how your assets map to risks and controls. We do not keep copies of your documents or your source systems. You can have a full copy of your database immediately on request, and a single-user read-only live view of your data for up to six months if you ever need it. Retention and our GDPR obligations are agreed with you at signature.
Is it really all included?
Yes. Every framework, AI governance, and cloud and ITSM ingestion are in the band price. The only extras are full users above your band (£1,500 a year) and, if you self-host, implementation and hosting.
What if I only need one framework today?
You are priced by organisation size, not framework count. One standard today, every standard you will need tomorrow, at no extra cost as regulations like the EU AI Act and UK DUAA land.
How does onboarding work?
Hosted go-live takes one to two weeks for a flat £1,500. If you self-host, you are up and seeing compliance results within days; the first five to seven weeks are where we fully tune the engine to your own document standards and help with internal connectivity.
Can I get my data out?
Always, in open formats, whenever you ask.