Pilot programme: 30 % off in the first year. Places limited. See the conditions

Book a first call
Complass – Navigate compliance Complass – Navigate compliance

Packages and pricing: The price is right here. No sales call.

Four packages build on each other, plus the Praxis package for medical practices.

Which package suits you?

Prices per month for size S (up to 50 employees), net, annual payment. Compare all packages · Complass instead of Excel or a consulting project

Start

Meet one obligation properly

from €199 per month

Configure Start
  • 51 to 250 employees: from €299
  • 251 to 1,000 employees: from €449

For companies that want to meet a specific obligation

  • Know where you stand Guided gap analysis with an action plan for your framework.
  • Evidence in one place Exportable for audit or authority.
  • Report incidents step by step Under the GDPR and, with the respective framework, under NIS2 and the CRA.
  • Risks under control Assess, treat and track them, linked to your measures.
  • 1 framework
  • 3 users
  • 5 GB
  • Auditor accesses free of charge, up to 5 per audit
Typical situation: Start

You have to implement a framework, for example NIS2 or ISO 27001, and do not want to start with spreadsheets, folders and email threads.

Package details: Start

Business

Several obligations, one shared inventory

from €590 per month

Configure Business
  • 51 to 250 employees: from €850
  • 251 to 1,000 employees: from €1,190

For companies with several obligations that want to keep assets and suppliers in one place

  • Assets in one place Up to 1,000 assets in total in one inventory instead of spreadsheets.
  • Suppliers in view Up to 100 suppliers in total, with questionnaires instead of email rounds.
  • Prepared for outages Business impact analysis, continuity plans and exercises.
  • Integrations with Teams, Slack and Mattermost
  • 2 frameworks
  • 10 users
  • 25 GB
  • Auditor accesses free of charge, up to 5 per audit
Typical situation: Business

Several frameworks run in parallel. Assets and suppliers sit in spreadsheets, and the status goes to management by email. With Business you keep everything in one place and prepare for outages with continuity plans.

Package details: Business

Recommended

Professional

Plants, products, supply chain

from €890 per month

Configure Professional
  • 51 to 250 employees: from €1,290
  • 251 to 1,000 employees: from €1,890

For companies with plants, products or a supply chain that must be demonstrably secure

  • All specialist modules included Up to 2,000 assets in total, zones and conduits, vulnerabilities, MITRE ATT&CK for IT and OT.
  • Supply chain in view Up to 150 suppliers in total, with questionnaires.
  • Connected to your systems API, webhooks, connectors and access reviews.
  • Priority support Your requests are handled with priority.

Also included: AI fill-in assistant with 300 suggestions per month, Privacy operations. Available as add-ons: Trust Center, ServiceNow connection and group requirements.

  • 4 frameworks
  • 25 users
  • 50 GB
  • Auditor accesses free of charge, up to 5 per audit
Typical situation: Professional

You run IT and OT, make connected products or depend on suppliers. Customers and auditors want evidence, and your data should work with other systems.

Package details: Professional

Premium

Larger organisations

from €1,490 per month

Configure Premium
  • 51 to 250 employees: from €1,990
  • 251 to 1,000 employees: from €2,790

For larger organisations with many people, frameworks and suppliers

  • 8 frameworks included Implement once, demonstrate many times: one measure for several frameworks.
  • 50 users Permissions per person and area, time-limited if needed.
  • Trust Center Your customers receive evidence through a protected link instead of by email.
  • Group requirements Set once, implement at every site.
  • ServiceNow Measures and incidents become tickets, and the status flows back.
  • 5,000 assets and 250 suppliers in total IT and OT in one inventory, suppliers with questionnaires.

Also included: AI fill-in assistant with 500 suggestions per month, Company colours in the portal.

  • 8 frameworks
  • 50 users
  • 100 GB
  • Auditor accesses free of charge, up to 5 per audit
Typical situation: Premium

Many people take part, several frameworks interlock, and your inventory of assets and suppliers is large. Sites work to shared requirements, and customers ask for evidence.

Package details: Premium

In size L a one-off setup of €1,490 is added, with an onboarding workshop and help with importing your data. Monthly payment: +15 %.

None of the four?

For medical and dental practices

Practice

from €79 per month

Your practice has to implement the IT security guideline under Section 390 SGB V. Fixed content, for practices with up to 5 persons.

  • IT security guideline Under Section 390 SGB V (KBV or KZBV) with all requirements for your practice size.
  • IT inventory For up to 50 devices and programs.
  • Emergency plan For outages of practice software, telematics infrastructure and internet.
  • Training in the portal With certificate of participation.
  • up to 5 persons
  • 3 users
  • 2 GB
  • Auditor accesses free of charge, up to 5 per audit

Configure Practice

For companies that want to cover a single obligation

Individual packages

One topic with a fixed scope instead of a complete package: GDPR, whistleblower protection and the AI Act, on their own or combined, plus the Practice package for medical and dental practices.

View individual packages

The small print, in large print

This applies to every package. The full wording is in the terms and conditions.

  • A clear term

    Minimum term 12 months, then the subscription renews for 12 months at a time. You cancel up to 3 months before the end of the term, directly in the portal, and we remind you by email beforehand.

  • A fixed price

    Your price does not change during the term. An increase at renewal is at most 8 % per component.

  • Grows with you

    A larger package, further frameworks or modules apply at once and are charged pro rata. You can scale down at the end of the term.

  • Your data stays yours

    After the contract ends, your main user has 12 months of read access and can export your content, for example as Word, PDF, Excel or a ZIP package.

  • Help when you need it

    Support by ticket in the portal and by email; for disruptions the first response comes by the next working day at the latest. You can add onboarding and implementation support if needed.

  • Try it free for 14 days

    No payment details. The trial ends by itself; a contract only comes about if you order.

Compare packages

Values for size S (up to 50 employees). In M and L, users, storage and quantities grow; the configurator shows every value for your size. Practice has a fixed scope without sizes and without add-ons.

✓ included, + available as add-on, – not available
FeaturePracticeStartBusinessProfessionalPremium
Price per month, size S, annual€79from €199from €590from €890from €1,490
Quantities
Employee access, up to employees2550505050
Sites11112
Users33102550
Auditor accessesfree of charge, up to 5 per auditfree of charge, up to 5 per auditfree of charge, up to 5 per auditfree of charge, up to 5 per auditfree of charge, up to 5 per audit
Frameworks1 (fixed)1248
Further framework per monthnot available€99€99€99€99
Projects per framework11355
GB for evidence252550100
Assets in total50available as add-on1,0002,0005,000
Suppliers in totalnot availableavailable as add-on100150250
AI suggestions per monthnot availableavailable as add-on (300)available as add-on (300)300500
In every package
Baseline protection under GDPR and AI Act and Whistleblower protection (HinSchG)includedincludedincludedincludedincluded
Core features: guided projects, templates, gap analysis, action plan, evidence, export, helpincludedincludedincludedincludedincluded
Incident management: personal data breaches under the GDPR, NIS2 and CRA reports with the respective frameworkincludedincludedincludedincludedincluded
Risk managementnot availableincludedincludedincludedincluded
Management cockpit (Section 38 BSIG), PowerPoint reports, and counters and app badge in the navigationnot availableincludedincludedincludedincluded
Email report to managementnot availableincludedincludedincludedincluded
Deadlines page with calendar subscription, key figure trend and management reportincludedincludedincludedincludedincluded
Training in the portal with certificate of participationincludedincludedincludedincludedincluded
Secure sign-in: MFA, passkeys and single sign-on (OpenID Connect)includedincludedincludedincludedincluded
Permissions per area with role profilesincludedincludedincludedincludedincluded
Domain check stage 1: SPF, DKIM, DMARC, certificates and further public settings of your domainsincludedincludedincludedincludedincluded
Specialist modules
Business continuity management (BCM) with business impact analysisincludedavailable as add-onincludedincludedincluded
Vulnerabilities and attack techniques (incl. SBOM, CRA product file, MITRE ATT&CK)not availableavailable as add-onavailable as add-onincludedincluded
Privacy operationsnot availableavailable as add-onavailable as add-onincludedincluded
Access reviewsnot availableavailable as add-onavailable as add-onincludedincluded
Academy and awarenessnot availableavailable as add-onavailable as add-onincludedincluded
Custom frameworksnot availableavailable as add-onavailable as add-onincludedincluded
Certification management coming soonnot availableavailable as add-onavailable as add-onincludedincluded
Connections and functions for customers and sites
Connectors Open-source connectorsnot availableavailable as add-onavailable as add-onincludedincluded
Microsoft Teamsnot availablenot availableincludedincludedincluded
Slacknot availablenot availableincludedincludedincluded
Mattermostnot availablenot availableincludedincludedincluded
Jiranot availableavailable as add-onavailable as add-onincludedincluded
Zammadnot availableavailable as add-onavailable as add-onincludedincluded
ServiceNownot availableavailable as add-onavailable as add-onavailable as add-onincluded
API and webhooksnot availablenot availablenot availableincludedincluded
Trust Centernot availablenot availableavailable as add-onavailable as add-onincluded
Group requirementsnot availablenot availablenot availableavailable as add-onincluded
Priority supportnot availablenot availablenot availableincludedincluded
Configure PracticeConfigure StartConfigure BusinessConfigure ProfessionalConfigure Premium

Features marked “coming soon” cannot be used yet; they are added at no extra charge once available. All prices for businesses, net plus VAT, with annual payment; monthly payment +15 %. As of 6 November 2026.

Note on the beta connectors

The vulnerability scanners Qualys, Rapid7, Greenbone, Tenable.sc and Tenable Vulnerability Management, plus Okta, Splunk, Microsoft Sentinel and device compliance from Intune are available as a beta where your package includes connectors. They are free during the beta and come without a service commitment (SLA); your administrators switch them on deliberately. Read-only until the test against the real system has passed: Microsoft Intune, Qualys VMDR, Rapid7 InsightVM, Okta, Splunk, Microsoft Sentinel, Tenable Vulnerability Management, Tenable Security Center, Nessus, Tenable Vulnerability Management (Relay).

Security in every package: how we assess against OWASP ASVS 5.0.

Try Complass with your own data

Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.