Simple NIS2 pricing
Start with a free scope check. Pay only when you are ready to turn the result into an action plan and audit-ready evidence.
vs. a consultant
€8,000+, 6 weeks, one-off PDF
From €79/mo, start in minutes, always current
vs. enterprise platforms (Vanta, DataGuard)
$10,000+/yr + a sales call
Transparent price, self-serve today
Start here
Check whether NIS2 or DORA may apply and see your first three priorities. No account or card required — full analysis, history and exports come with a subscription.
One workspace. No per-seat pricing.
For teams getting NIS2-ready.
€790 billed annuallysave €158
For teams operating NIS2 continuously.
€2390 billed annuallysave €598
For organisations that want extra support scaling compliance.
€4290 billed annuallysave €1098
EU-region hosting
Cancel any time
Source-referenced outputs
Recommendations point back to their underlying requirement or source.
No setup fee
See what you get
NISDESK links each finding to the relevant article, turns gaps into a prioritised plan and gives you exports you can share with management or an auditor — every step traceable back to the requirement it came from.
View a real sample policy→NIS2 action plan
Article-linkedNIS2 Article 23
Incident handling & reporting
NIS2 & DORA
Built around the actual directives, article by article
Source-referenced
Every recommendation points back to its requirement
EU-region
Data hosted in Frankfurt on EU infrastructure
No per-seat
One workspace price — invite your whole team
NISDESK is a decision-support and compliance operations tool — not a certification body or legal guarantee.
Compare plans
Security & data
Your compliance workspace should be treated with the same care as the controls you manage.
Data stored in Frankfurt (Supabase) with application servers on Hetzner in Germany — no transfer outside the EU/EEA.
All traffic over HTTPS (TLS) with HSTS; data encrypted at rest with AES-256 via Supabase infrastructure.
Database access follows least-privilege RBAC, with row-level security on customer data.
A strict CSP restricts script, style and connection origins across the application.
Personal data is processed under the GDPR, with sub-processors and legal bases documented.
Customer data is never used to train public AI models, and guidance is source-referenced to its requirement.
For MSPs & consultants
For MSPs, consultants and organisations managing multiple compliance programmes.
Clear answers
Start with clarity
Run the free scope check before choosing a plan.