TrustOps pricing
What running your compliance programme actually costs
TrustOps is Atoro’s managed compliance service. We run your ISO 27001, SOC 2 or ISO 42001 programme end to end, from €1,500 a month.
What it costs
TRUST
OPS
Startup, €1,500/monthYou bring your own platform. One framework.
Growth, €3,000/monthPlatform licence included. Two frameworks.
Complete, €4,500/monthUnlimited frameworks. Pen test included.
12-month termExit free in the first 90 days.
01 The problem
The certificate was the easy part
Certification is a project. Staying certified is a function: access reviews, security questionnaires, vendor checks, your internal audit, the certification body’s annual visit. Most companies our size never built that function, so it landed on an engineer with a full-time job already.
You have three options. Keep paying for it in sprint capacity. Hire for it, at €95,000+ base in Ireland before on-costs, platform and testing (Glassdoor, information security manager, Dublin).Or hand the function to a team that runs it every day.
02 Plans
Three plans. Same service in each. You choose what’s bundled.
Every plan includes the full run of your programme: platform administration, evidence quality checks, access reviews, alert triage, security questionnaire responses, vendor risk, staff training cycles, your internal audit, and management of the certification body’s annual visit. A GDPR baseline is included in every plan, because for a European company that is not an optional extra.
| Startup | GrowthRecommended | Complete | |
|---|---|---|---|
| €1,500/month | €3,000/month | €4,500/month | |
| The full run of your programme | Yes | Yes | Yes |
| GDPR baseline | Yes | Yes | Yes |
| Compliance platform licence (Drata or equivalent) | You bring your own | Included | Included |
| Frameworks | 1 included, add more at €500/month each | 2 included, third at €500/month | Unlimited |
| Annual web application penetration test | Available as an add-on | Available as an add-on | Included |
| 90-day out clause | Yes | Yes | Yes |
All plans run on a 12-month term, with a free exit in the first 90 days. Prices are for companies up to 50 people. Add €1,000 a month for each additional 50. Billed monthly, Net 30.
Prices last reviewed: 24 July 2026
03 vCISO cost
How much does a vCISO cost?
A virtual CISO typically costs $3,000 to $20,000 a month (roughly €2,600 to €17,500), with mid-market engagements at $3,000 to $5,000, according to Workstreet and vCISO.com. That buys advice. TrustOps starts at €1,500 a month and buys execution: the reviews, evidence and questionnaire responses a vCISO would tell you to do.
04 Certification cost
How much does ISO 27001 certification cost?
Three separate costs get conflated. The certification body’s audit fees, billed to you directly (we take no margin on them). The platform licence, if you use one. And the work of building and running the management system, which is the part people underestimate. TrustOps prices the third part flat: from €1,500 a month, everything on this page included.
The cost nobody prices in: the certification body’s annual visit in years two and three is where under-owned programmes fail. A lapsed programme is a lost certificate.
05 Managed compliance
What are managed compliance services?
Managed compliance services run your security compliance programme for you: platform administration, evidence collection and quality checks, access reviews, questionnaire responses, vendor risk and the yearly assurance cycle. It sits between software, which collects evidence but doesn’t review it, and a vCISO, who advises but doesn’t operate. Sometimes called compliance as a service.
06 Comparison
The maths against a hire
| Security hire | vCISO | TrustOps Growth | |
|---|---|---|---|
| Year-one cost | €95,000+ base before on-costs, platform, testing (Glassdoor, Dublin) | $36,000 to $240,000/yr, about €31,000 to €209,000 (Workstreet monthly range, annualised) | €36,000, licence included |
| Who does the work | They do, once you’ve recruited them (3-6 months) | You do; they advise | We do |
| Platform licence | Extra | Extra | Included |
| Covers holidays, notice periods | No | Partly | Yes, it’s a team |
07 Proof
Human plus AI, so the numbers work
Atoro is an AI-native consultancy: the repeatable parts of compliance operations run through tooling we govern ourselves, and the judgement calls stay with named humans. We are Europe’s first ISO 42001 certified consultancy, which means our own AI management system passed the certification body’s inspection. We hold a 100% certification success record.
Why the price is possible
AI-native operationsThe repeatable work runs through tooling we govern.
Europe’s first ISO 42001 certified consultancyOur own AI management system passed inspection.
100% certification success recordEvery programme we take to audit passes.
08 FAQ
Pricing questions, answered plainly
Do you really publish your prices?
Yes. Atoro publishes every TrustOps price: €1,500, €3,000 or €4,500 a month, depending on the plan. A proposal confirms your scope, headcount and frameworks and applies those same figures, so you know the cost before you ever get on a call. Extra frameworks are €500 a month, and each additional 50 people adds €1,000 a month.
A 12-month term and a 90-day exit? How do those fit together?
The term is twelve months because a compliance programme runs on an annual cycle; anything shorter sells you half a cycle. The exit exists because you shouldn’t need a full year to know whether it’s working. If in the first 90 days you decide it isn’t, you leave. No exit fee, no remaining-term liability.
What’s not included?
The certification body’s fees, billed to you directly with no margin to us, and any remediation tooling your environment needs. Everything else on this page is in the monthly fee.
We’re not certified yet. Can you get us there?
Yes. That is our ISO 27001 implementation programme, which takes you from nothing to certified. TrustOps then runs the certified programme afterwards, from €1,500 a month. Build programmes are scoped to your roadmap, so book a discovery call for that number.
Which platforms do you work with?
We administer Drata and Vanta daily and hold partner status. On Growth and Complete the licence is in the price; on Startup you keep your own contract.
What is ISO 42001 and why would we add it?
The management system standard for AI governance. If you ship AI features, enterprise buyers are starting to ask. Adding it to an existing ISO 27001 programme shares most of the management system, so it costs far less than a standalone programme.
09 Talk to us
Talk to the people who’d run it
A discovery call is 30 minutes with Tom, not a sales development rep. Bring your framework list and headcount; leave with a number. It will match this page.
Bring to the call
Your framework list (ISO 27001, SOC 2, ISO 42001, GDPR)
Your headcount
Whether you already run Drata or Vanta
Your next audit or surveillance date, if you have one