Scope the platform around your real programme

Acompli is a single enterprise platform. Every agreement includes all five modules (assessments, risk register, RoPA governance, third-party risk, data mapping), the full AI capability set (specialised agents, grounding verification, confidence scoring, co-pilots), every jurisdiction engine from DPC and ICO through CNIL, BfDI, AEPD, AP and APD, unlimited assessments, and the learning flywheel. There are no feature tiers to choose between — what varies is deployment scope and the procurement, security and support controls around the rollout.

No. The agreement above covers the five-module GDPR platform. DSAR is a separate product, licensed independently — you can run it on its own or alongside the platform. Code Scan AI Governance mode is a paid add-on that extends the platform agreement and is available today. The EU AI Act AI System Register (including 30 Member-State conformity templates and the Article 27 FRIA section) is available on opt-in (early access) alongside the platform agreement. All three are priced separately; contact sales for scope-based pricing.

Generous usage allowances are agreed upfront as part of your deployment, sized to your estate. Compliance registers are never capped, records are never blocked, and nothing is ever auto-billed. If your estate grows beyond the agreed scope, we review it together at rates already set out in your agreement. Every assessment enriches your knowledge base and makes the next one easier to review.

Acompli pricing is agreed per organisation and based on your compliance estate — the data controllers and legal entities the platform works for — along with jurisdictions, onboarding complexity, integrations and security requirements. Read-only stakeholder access is unlimited and free; active authoring access is scoped generously as part of the agreement.

An active user is anyone who creates assessments, edits responses, manages the knowledge base, or participates in approval workflows. A viewer is anyone who views dashboards, reads reports, reviews approved records, or monitors the risk register — without authoring or editing. Viewers are unlimited and free. Executive sponsors, board members, and audit committee members typically use viewer access.

Yes. Viewers are unlimited, and active users are scoped generously — adding people doesn't change your agreement. What changes scope is the estate: additional data controllers or entities are added at the rates set out in your agreement, by signed variation — never auto-billed.

No. Acompli is sold as one enterprise platform with a single scoped annual agreement — there is no entry tier, no upgrade ladder and no feature held back behind a higher plan. Every jurisdiction engine, dual controller/processor RoPA registers, the GRC export API, SCIM provisioning, multi-entity inheritance and named support are all included. What is agreed per organisation is the estate the platform works for and the procurement, security and onboarding requirements around it.

Evaluation access can be arranged after we understand the modules, data-handling requirements and rollout shape. DSAR and Code Scan are separate from the five-module platform.

Yes. Scope changes — additional data controllers, entities or jurisdictions — are handled with your account team as a variation to the enterprise agreement, so scope, timing and commercial terms stay explicit and nothing is ever auto-billed. No data is affected by a scope change; you retain everything in your knowledge base, risk register, and assessment archive.

Yes. We offer adjusted pricing for verified non-profits and public-sector organisations. Contact us to discuss terms.