Free while we are in beta.
Every framework, every integration, unlimited users. No credit card, no trial countdown. Paid plans arrive when Beviso leaves beta — and you will get 30 days notice before anything changes.
Everything we have built, unlocked. No tiers, no seat limits, no credit card. In exchange we ask for your feedback.
Start freeFrameworks
- All 17 frameworks (ISO 27001:2022, SOC 2, GDPR, HIPAA, NIS 2, DORA, NIST CSF 2.0, PCI DSS v4 & more)
- Pre-loaded control libraries
- Cross-framework control mapping
- Custom frameworks
Evidence & automation
- All 100+ integrations
- Automated evidence collection
- Manual evidence upload
- Audit readiness scoring
- Audit management & scheduling
Modules
- Unlimited policies
- Unlimited vendors
- Vendor security questionnaires
- Risk register
- Incident log
- Trust centre & auditor portal
Platform
- Unlimited users
- API access
- Custom fields & advanced RBAC
- Auditor-ready report export
- Direct access to the team building it
Running a real audit on this?
Tell us what you need. During beta we work directly with the teams using Beviso, and the roadmap is largely whatever you tell us is missing.
Talk to usFrequently asked questions
What does "free during beta" mean?
Every feature is unlocked and free to use while Beviso is in beta. There is no trial clock, no seat limit and no credit card required. We will introduce paid plans once the product leaves beta.
What happens to my account when beta ends?
You will get at least 30 days notice before any plan takes effect, and your data stays yours either way. Nothing you have set up is deleted or locked if you decide not to continue on a paid plan — you can export it at any time.
Why is it free?
Because it is early and we want real programmes running on it. Beta users shape what gets built, and we would rather trade features for feedback than charge for something still finding its shape.
What should I expect from a beta?
Active development. Features will change, some rough edges are still there, and we do not offer a contractual uptime SLA yet. What we do commit to is that your data is handled properly, backed up, and exportable whenever you want it.
Is Beviso itself certified?
Not yet, and we would rather say so plainly than imply otherwise. Beviso is in beta and has not completed an independent SOC 2 or ISO 27001 audit. We are running our own programme inside the product and will publish the results in our trust centre when the audits complete.
Do you offer a DPA for GDPR?
Yes. Beviso acts as a processor under GDPR Article 28 when it collects evidence on your behalf, and we provide a Data Processing Agreement on request before you connect any system.
Where is my data stored?
In the EU. Beviso is EU-hosted only — there is no US region and no option to choose one. Your data is stored and processed in the EU, which keeps it outside the scope of GDPR Chapter V transfer rules.
Which frameworks are included?
All 17, with no gating during beta: ISO 27001:2022, SOC 2, GDPR, HIPAA, NIS 2, ISO 42001, SOC 1, NIST CSF 2.0, PCI DSS v4, SOX, CMMC Level 2, CIS V8, ISO 27701, DORA, NIST SP 800-53, FedRAMP and ISO 22301.
What integrations are available?
We support 100+ integrations across cloud (AWS, Azure, GCP, DigitalOcean), identity (Okta, Azure AD, Auth0, JumpCloud), security (CrowdStrike, SentinelOne, Snyk, Wiz, Datadog), MDM (Jamf, Kandji, Mosyle), HR (BambooHR, HiBob, Personio, Deel) and more. All of them are unlocked during beta.
What is NIS 2 and do I need it?
NIS 2 is the EU Network and Information Security Directive that came into force in October 2024. It applies to medium and large companies in critical sectors operating in the EU. Our NIS 2 module maps the 21 security measures to actionable controls and helps you document compliance.
Still have questions?
Talk to our team — we are happy to help you get your first framework set up.