Full suite. One price.
Everything included.
No module math. No add-on surprises. Controls, risk, audit projects, policies, third-party risk, whistleblower, and surveys & attestations — plus all of Opal's AI — in one platform, at one published price.
The meter is simple: only controls on an active testing, operation, or certification cadence count. Documented controls, policies, and records are unlimited and free — in every tier.
In every tier. No exceptions.

Go live in weeks, not quarters.
A flat, productized launch — not a platform project. Data migration, a framework mapping session, control cadence setup, team training, and go-live in a defined number of weeks.
The fine print, in plain language.
Only controls on an active testing, operation, or certification cadence. Your auditors and frameworks set that number, so you know it before you ever talk to us — no estimates, no bill shock.
No. There is no metered billing and no AI overage invoice, ever. If your program outgrows its tier, that's a renewal conversation — not a surprise line item.
10% off for a two-year term, 15% for three years, prepaid.
Beyond your included hours — framework-mapping workshops, training, configuration — services are billed from a published rate card. Product support is always unlimited and free.
One number. The whole platform behind it.
We built Opal to be the best value in GRC. Judge for yourself in the demo.
See Opal in action