Clear, predictable pricing.

No “contact sales”, no discovery call to find out what this costs. Vanta and Drata make you book a call before they’ll say a number. The price below is the whole conversation.

Basic (SOC 1)

1-10 people

The 60 IT general controls SOC 1 and SOC 2 share.

$129/mo

or $107/mo billed annually

  • SOC 1: IT general controls only
  • 1 connected AWS account
  • 60 of 120 control activities
  • Registers, document templates, evidence export
  • Email support

SOC 1 also tests controls over financial reporting (revenue recognition, billing accuracy) that no AWS API can see. Every plan includes a Financial Reporting Controls Overview document to walk through with your accountant and auditor; it organizes the conversation, it doesn't replace it. See the FAQ below.

Get started

Pro

11-50 people

Both reports. They overlap more than auditors let on.

$349/mo

or $291/mo billed annually

  • SOC 1 and SOC 2 both included, no per-framework surcharge
  • Up to 5 connected AWS accounts
  • Auditor share links
  • Unlimited team members
  • Priority support
Get started

Team

51-100 people

Bigger roster, more AWS accounts, one binder.

$699/mo

or $583/mo billed annually

  • Unlimited connected AWS accounts
  • Everything in Pro
  • Onboarding call
Get started

More than 100 people? Add $150/mo per additional 50 people to Team, the same way every other number on this page works: published, flat, and computed before you sign up, not quoted after a call.

For comparison: Vanta’s median annual contract is $20,000/year for a single framework, and its small-company band (1–50 employees) runs $12,000–28,000/year, per Vendr’s aggregated purchase data, not either company’s marketing page. Pro, billed annually, is $3,492/year and covers both SOC 1 and SOC 2.

Questions

Do I have to talk to sales first?

No. Every price on this page is what you pay. Sign up, connect an AWS account, start collecting evidence. The Team tier offers an onboarding call because some people want one, not because it’s required to check out.

What’s the “business-process half” of SOC 1?

SOC 1 has two halves. We automate the first: IT general controls, the same access, change-management and operations evidence SOC 2 tests, pulled from AWS and GitHub. We don’t automate the second: controls over your financial reporting, such as revenue recognition, billing accuracy and month-end close. Those live in your accounting process rather than your AWS account, so no integration can see them.

So how do I cover that other half?

Every signup gets a Financial Reporting Controls Overview document in the library: a plain-language checklist of those areas with somewhere to write down how each one works today. Your auditor tests that half by walking through your books with you or your accountant, as they always have. The document is what you bring to that conversation, not a replacement for it. If you don’t have a controller or an outsourced accounting firm yet, ask your auditor early: that is normal for a first SOC 1 and expected before the engagement starts, not a sign you are missing something.

What if I need SOC 1 and SOC 2 later?

Add the second framework any time by upgrading to Pro or Team. Both are included there at no extra charge. Basic comes in a SOC 1 or a SOC 2 version; it’s one or the other, not both.

What if we have more than 100 people?

Team covers up to 100. Beyond that it’s $150/mo per additional 50 people, added automatically, the same flat-rate logic as everything else on this page. No “Enterprise, contact us” tier that quietly brings the sales call back.

What happens if I connect more AWS accounts than my plan?

You’ll be asked to upgrade before the extra account starts collecting evidence. Nothing is throttled or hidden after the fact. You’ll see this coming before it happens.

Is this a CPA firm?

No. SOC Binder gathers and keeps evidence; it issues no audit opinion. A licensed firm still performs and signs your audit.

See what your AWS account would report today

Signing up and connecting an account takes about five minutes, and the first collection runs immediately.

Get started