StandardOS

What we sell

  • StandardOS

    €249/mo

    The system, every feature

    Start free, no card
  • Now in force . Reporting duties apply since 11 Sept 2026.

    CRA file

    €5,000

    CRA file, one product

    Buy
  • Now in force . Reporting duties apply since 11 Sept 2026.

    CRA distribution

    €2,500

    CRA, importers and distributors

    Buy

  • Machinery file

    €5,000

    Machinery file, one machine

    Buy
  • Now in force . Reporting duties apply since 11 Sept 2026.

    CRA toolkit

    €199

    Offline: file, registers, runbook

    Buy

  • DORA vendor pack

    €199

    Offline: clauses, register, due diligence

    Buy

  • NIS2 registration pack

    €199

    Offline: worksheet, registration, runbook

    Buy

One subscription · packs bought once · services by invoice

Subscribers already have all of this, live, inside the product; the toolkit is for companies without one.

Software

The management system itself. One price per organization, every feature, unlimited people.

StandardOS

€249/mo, excl. VAT

The ISO 27001, ISO 42001 and ISO 9001 management system: 93 Annex A controls with a Statement of Applicability decided from seven questions, the policy pack, the risk register, the compliance calendar, 12 read-only integrations for automated evidence, and tamper-evident records your auditor can verify without us.

  • All 93 ISO 27001:2022 controls and the Statement of Applicability
  • ISO 42001 and ISO 9001 on the same terms
  • 12 read-only integrations for automated evidence
  • Unlimited people, no per-seat charge
  • Month-to-month, cancel in the app
Start free, no cardPricing details

14-day trial, no card

Documentation packs

Bought once, per product or per organization, and delivered by software into your StandardOS organization the moment Paddle confirms the payment. No subscription needed: a trial organization is enough to buy one, and the documents stay editable and exportable.

Now in force . Reporting duties apply since 11 Sept 2026.

CRA technical file

€5,000 once, per product, excl. VAT

The technical documentation Annex VII of the Cyber Resilience Act requires, for one product with digital elements: 11 controlled documents drafted from your product record the moment you pay.

11 controlled documents
Applies from December 11, 2027
BuyWhat is in it
Now in force . Reporting duties apply since 11 Sept 2026.

CRA importer and distributor pack

€2,500 once, per organization, excl. VAT

The records Articles 19 and 20 of the Cyber Resilience Act ask of an importer or distributor, for the whole organization however many products it supplies: 7 controlled documents drafted at checkout.

7 controlled documents
Applies from December 11, 2027
BuyWhat is in it

Machinery Regulation technical file

€5,000 once, per machine, excl. VAT

The technical file Annex IV of Regulation (EU) 2023/1230 requires, for one machine: 7 controlled documents drafted from your machine record the moment you pay.

7 controlled documents
Applies from January 20, 2027
BuyWhat is in it
Now in force . Reporting duties apply since 11 Sept 2026.

CRA Readiness Toolkit

€199 once, a download, excl. VAT

For a company without a subscription: the Annex VII technical file structure, the registers, the Article 14 runbook with the ENISA field schema, and the generators, offline, delivered as a download the moment Paddle confirms the payment.

Applies from September 11, 2026
BuyWhat is in it

DORA Vendor Pack

€199 once, a download, excl. VAT

For an ICT third-party service provider that a bank, insurer or fund asks for DORA: every Article 30 contract clause with the ISO/IEC 27001 records that answer it, the register-of-information fields that describe you, the due diligence answers, the incident clock you have to feed, an exit plan template and the subcontracting chain, as files, delivered as a download the moment Paddle confirms the payment.

Applies from January 17, 2025
BuyWhat is in it

NIS2 Registration Pack

€199 once, a download, excl. VAT

For an entity working out whether NIS2 applies: the Annex I and II entity types and the size rule as a worksheet, the registration data and where to send it in every member state, the 24 hour, 72 hour and one month incident runbook with the significance criteria, the ten Article 21(2) measures with the ISO/IEC 27001 records that show each, and the Article 20 management record, as files, delivered as a download the moment Paddle confirms the payment.

Applies from October 18, 2024
BuyWhat is in it

How buying works

  1. 1. Paddle is the merchant of record

    Every payment is taken by Paddle.com Market Ltd, which issues the invoice and adds the VAT for your country or reverse-charges it against your VAT number. Your receipt names Paddle; your contract for the software is with us.

  2. 2. Delivery is by software, at the moment of payment

    A subscription starts with a 14-day trial that needs no card, and nothing is charged unless you go through checkout yourself. A pack is drafted into your organization the moment Paddle confirms the transaction: the documents already contain everything your record holds, marked where something is still to be written.

  3. 3. Leaving is as easy as arriving

    Cancel the subscription in the app, effective at the end of the billing period, with no notice period and no call. A pack is yours: the documents stay editable and exportable in your organization whether or not you subscribe. The cancellation and refund policy.

Sold to businesses and organizations only. Every price excludes VAT.

Start with the trial, add what you need

A trial organization can buy a pack on its first day. Nothing on this page needs a conversation with us, and every price is the one you will pay.

Start 14-day free trialPricing details