Simple, per-site pricing.
From €149/site/month — EU-hosted, audit evidence included. No per-sensor games, no feature paywalls. SSO, RBAC, audit log, and NIS2 control-mapped evidence export are included at every tier.
How buying works: verify the sample evidence pack · run the 14-day pilot · roll out per site.
Per-site bands
One price per site, all-in. The per-site rate drops automatically as your fleet grows. Every band includes the full evidence platform — higher bands add retention and support depth, never audit-readiness.
€249/site/mo
1–4 sites
Month-to-month · priority install
- ✓NIS2/GDPR control-mapped evidence export
- ✓Append-only, hash-chained audit log
- ✓SSO (OIDC/SAML) + RBAC
- ✓Offline buffer (≥24h) + lossless backfill SLO
- ✓6-month evidence retention
- ✓Standard support
€199/site/mo
5–25 sites
The typical starting fleet
- ✓Everything in Eval
- ✓12-month evidence retention
- ✓API + webhooks
- ✓Auditor Summary included in exports
- ✓Offline buffer/backfill SLO commitment
€169/site/mo
26–100 sites
Strongest evaluation fit: 20–100 sites
- ✓Everything in Growth
- ✓24-month evidence retention
- ✓Priority support
- ✓Dedicated onboarding
€149/site/mo
101–200 sites
Fleet-wide rollouts
- ✓Everything in Scale
- ✓36-month evidence retention
- ✓Quarterly compliance review
- ✓Rollout plan + named contact
Annual prepay: −15% · MSP aggregate: −20% with a 12-month commit across your client fleet (Growth and Scale bands).
Add-ons (rare): cold-storage exports beyond included retention €10/site/mo · extended retention to 5 years +€20/site/mo.
Not ready to commit? Start with the proof.
€4,000 flat
25–100 sites. Includes the full unplug test (30/60/120 min), 7-day evidence export, and a stakeholder debrief with the artifact checklist (CIO/IT Ops + DPO sign-off).
Fee credited in full on conversion to any paid plan. No bespoke features during the proof; one integration path (SSO).
Success criteria: lossless backfill verified + evidence pack exported with reproducible hash. If a success criterion fails, you don't roll out — that's the point of the pilot.
Request a PilotWhat's Included in Every Plan
EU Data Residency
All data stays within the EU. No data transfers to third countries without your explicit consent.
Zero-PII telemetry
No personal data collected or transmitted at any tier. We only collect technical metadata — no privacy concerns, no GDPR headaches.
Evidence Exports
Time-scoped exports built for review: inventories, continuity proof, NIS2/GDPR control mapping, and integrity hashes.
Evidence continuity →SSO & RBAC Included
Single Sign-On (SAML/OIDC) and Role-Based Access Control are included at all paid tiers. Never enterprise-gated.
Append-only hash-chained audit log
Tamper-evident by design — reproducible hashes, immutable logs, and auditor-verifiable continuity.
Offline buffer (≥24h) with lossless backfill SLO
Evidence is buffered locally during WAN outages and backfilled losslessly on reconnection. No gaps in your audit record.
Frequently Asked Questions
Is there a free trial?
No. You can download the sample evidence pack and verify its hash yourself — that shows you exactly what the product produces. Hands-on validation happens in the 14-day pilot, which is credited in full when you convert.
Is NIS2 control mapping extra?
No. Control-mapped evidence export is what the product is — it's included at every tier. We don't gate audit-readiness behind a higher plan.
We have fewer than 5 sites — is this for us?
Usually not, and we'll tell you so. Verity Edge is built for 5–200 distributed sites; the strongest fit is 20–100. Under 5 sites, the per-site economics rarely beat doing evidence manually.
Can I upgrade as I add sites?
Yes — the per-site price drops automatically as you cross band thresholds. Retention and support depth step up with the band.
What's your cancellation policy?
Cancel anytime with 30 days' notice. No cancellation fees. Your evidence exports are yours — we provide a full export on exit.
7-day evidence export promise
Our 7-day evidence export promise has explicit preconditions: ≤100 sites, standard SNMP v2c/v3 and Redfish scope (read-only), outbound egress permitted to EU endpoints (TLS 443), baseline config delivered Day 0. If a precondition isn't met, the promise is void until rectified — that's what keeps it falsifiable. See known limits for complete details.