Program⬇ Download .md

Pricing by Company Size

The initial assessment runs $150K to $350K by company size — and the annuity is the operate-and-attest loop on top, not the one-time assessment.

Confidential · June 2026. Pricing below is set as indicative ranges — anchored to company size and finalized by the initial assessment, which scopes everything downstream. Figures are pre-finalization and subject to scoping with counsel and the first design partner. The Grace Hill internal estate referenced for placement is ASSUMED, not confirmed.

The anchor

The initial assessment — "the discovery" — runs $150K for a smaller enterprise up to $350K for a large one. It is the entry engagement and the wedge: it surfaces shadow AI with a dollar figure, reviews the AI a company ships, and sizes the real estate so everything after it is scoped to reality instead of a guess. Where a company lands in that band is a function of three inputs:

Estate size — identities, endpoints, data stores, and SaaS tenants the Aperture engine has to connect to and reconcile.
Number of AI surfaces — every AI a company uses (sanctioned and shadow) and every AI it ships. A shipped model in a compliance-sensitive workflow is its own assessment — the heaviest single line.
Regulatory exposure — the frameworks in scope (NIST AI RMF, ISO/IEC 42001, EU AI Act, OWASP, MITRE ATLAS, CSF 2.0) and any sector regime (fair-housing, financial, health) that raises the attestation bar.

The annuity is the other half. The assessment and the implement build are one-time; operate (the managed run) and attest (the recurring cycle) recur — because an attestation is valid only against a fresh record. That loop is the recurring revenue, and it is the point: governance is a posture you hold, not a certificate you frame.

The price table

One-time figures are project fees; recurring figures are annual.

Tier	Estate / profile	Initial assessment (discovery)	Implement build	Operate / managed-run (yr)	Attestation cycle (yr)
SMB (<200)	Single tenant, few AI surfaces, light regulatory load	$150K–$175K	$150K–$300K	$90K–$160K	$45K–$85K
Mid-market (200–2,000)	Multi-tenant, several used AI + one shipped product-AI, sector exposure	$200K–$250K	$300K–$600K	$180K–$350K	$90K–$160K
Enterprise (2,000+)	Sprawling estate, many AI surfaces, multi-framework	$300K–$350K	$500K–$1M	$350K–$700K	$200K–$400K
Regulated-enterprise	Enterprise estate under a binding sector regime + EU AI Act high-risk	$350K+ (custom)	$1M–$2M+	$600K–$1.2M	$350K–$650K

The initial assessment runs the $150K → $350K band across the first three tiers. The regulated-enterprise tier is the same product with the attestation bar raised — so it scopes custom above the band, and its recurring lines lift because the re-baseline cadence tightens. The implement build is the widest band: it depends entirely on how far the current state sits from the designed target, which the assessment is what determines.

How the annuity compounds

For a mid-market account, the one-time work (assessment + build) lands around $135K–$250K, paid once. The recurring lines — operate plus attest — land around $105K–$205K per year, paid every year the engagement holds. Within roughly two years the annuity matches the original build, and unlike the build it does not end. The standard creates the relationship, the engine sustains it, and the attestation is the artifact that makes the recurring spend defensible to the customer's own board.

Discovery is deliberately the smallest, fastest line relative to everything downstream. A cheap, honest assessment that produces a credible shadow-AI number is the wedge into the whole account — which is exactly why it is priced to get in the door, not to maximize the first invoice.

Where Grace Hill lands

Grace Hill is a mid-market property-management compliance and training SaaS company — the Mid-market tier — and two factors push it to the upper half of the band. It ships AI: "Gracie," a generative assistant in compliance-sensitive workflows, which means a full product-AI review on top of the used-AI inventory. And fair-housing / tenant-screening exposure raises its effective regulatory load toward the regulated profile.

On that basis — and explicitly ASSUMED, inferred from a mature mid-market SaaS profile, not confirmed about Grace Hill — Grace Hill models to roughly a $65K initial assessment, a $160K implement build, then a recurring $120K operate + $55K attestation per year. Fair-housing exposure is why the attestation cycle and re-baseline cadence sit at the firm end of the mid-market range.

Pricing is finalized on the initial assessment and scoping with counsel and the first design partner.