Transparent pricing for enterprise risk teams

One platform for privacy, AI, vendor, and security reviews.

Book a Demo Talk to Sales

Enterprise

Starts at $90,000/year

Everything you need to review every launch before it ships.

5 Reviewers

$6,000/year per additional reviewer

3,000 Launches

annually

50 Custom Workflows

Book a Demo

Key Features

Unlimited users

All review modules included

All integrations included

API & MCP access (100,000 calls/mo)

White-glove onboarding*

Dedicated CSM

*One-time onboarding fee of $20,000

Enterprise +

Starts at $160,000/year

For programs running at scale, with TerraTrue experts designing alongside you.

10 Reviewers

$6,000/year per additional reviewer

10,000 Launches

annually

Unlimited Custom Workflows

Talk to Sales

Key Features

All Enterprise features

API & MCP access (500,000 calls/mo)

Dedicated program architect

Staging instance for testing

Priority support

Semi-annual executive reviews

Roadmap input

Smaller team, or a single program to start with? Talk to us and we'll find the right fit.

SOC 2 Type II certified since 2022.

Annual third-party penetration testing. Continuous control monitoring. Hosted entirely on Google Cloud.

View our Trust page

Compare all features

Enterprise

Enterprise +

Scale

Reviewers

Subject matter experts, such as privacy counsel or security engineers, who assess risk. Each reviewer is billed once, even if they participate in multiple teams.

Review Teams

Groups of reviewers organized by domain or business unit, such as Privacy EMEA or AppSec, that launches are routed to.

Users

Anyone with login access who submits or collaborates on reviews, including product managers and engineers.

Unlimited

Launches Per Year

Launches are the atomic units of TerraTrue: each feature, vendor, or project that needs review, tracked like a ticket.

3,000

10,000

Custom Workflows

Design tailored intake and assessment workflows with conditional logic to gather specific information, assign risk levels, or trigger automated actions.

Unlimited

API & MCP Access

One monthly allowance shared by the REST API and the MCP server. Add usage blocks if your integrations or agents need more.

100,000 calls/mo

500,000 calls/mo

Platform

Risk Scorecard

Every launch gets a risk score across categories, generated from its attached context, so reviewers see at a glance what needs attention.

AI-Powered Workflow Response Automation

TerraTrue's AI drafts answers to review and assessment questions from the launch's documents, like product specs, PRDs, and contracts. Reviewers confirm or edit instead of starting from scratch.

Ask TerraTrue AI

AI launch assistant with a free-form chat experience to query documents attached to a launch in real-time.

AI Artifact Insights

Automatically scans and summarizes attached documents such as SOC 2 reports and contracts to identify risks, exceptions, and expiration dates.

AI Agent Integration (MCP)

Connect TerraTrue directly to your LLM agents to manage privacy and security insights in plain language.

Rules-Based Auto-Closing

Rules you define automatically close low-risk launches, with a full audit trail, so reviewers can focus on what matters.

Remediation Task Filing & Management

Create, assign, and track remediation tasks with due dates and priorities directly within a launch to ensure risks are resolved before shipping.

Risk Registry

A centralized repository that allows you to identify, track, and manage potential organizational threats alongside their mitigation strategies, ensuring alignment with industry frameworks like NIST and ISO 27001.

Program Analytics Hub

Visualize your risk program with Privacy Central, a dashboard that provides granular views of data use, trends, and processing activities across your organization.

API Access

Provides programmatic access to TerraTrue data, enabling your team to build custom integrations and automate internal processes.

Integrations

Jira Launch Integration

Enables a bi-directional sync that triggers launches from Jira issues, using TerraTrue AI to analyze attached technical specs and automatically pre-populate intake workflows alongside development.

Slack Launch Integration

Allows users to create new TerraTrue launches directly from Slack, exchange comments bi-directionally, and receive real-time notifications about review status.

Notion Launch Integration

Allows teams to kick off risk reviews directly from Notion project pages, leveraging AI to scan product requirements, extract data context, and pre-fill intake questionnaires instantly.

Google Docs Launch Integration

Enables teams to launch risk reviews straight from Google Docs, using embedded AI to scan requirements documents and automatically pre-populate intake forms to eliminate repetitive data entry.

Confluence Launch Integration

Empowers teams to initiate and track risk reviews directly from Confluence pages, utilizing AI to parse project documentation, automatically complete intake questionnaires, and generate launch summaries without disrupting existing workflows.

Rally Launch Integration

Streamlines intake by allowing product teams to trigger new risk reviews directly from their Rally workspace.

Integration with Ironclad Contract Lifecycle Management

A bi-directional sync that automatically creates launches from Ironclad workflows, utilizing AI to scan uploaded contracts and DPAs to extract key risk exceptions and pre-fill worksheets.

Procurement Integration with Zip

Connects procurement and risk functions by automatically triggering TerraTrue reviews when a new purchase request is initiated in Zip.

Okta Vendor Sync

Automatically synchronizes vendor application data from Okta to keep your third-party inventory up to date and ensure risk review coverage.

Google Sheet Automatic Workflow Export

Automatically pushes launch data and workflow responses to Google Sheets for custom reporting and external analysis.

Privacy & AI

Out-of-the-box Configurable Privacy Modules for GDPR, US State Laws, and EU AI Act

Pre-built frameworks that automatically surface relevant questions and risks for specific regulations like GDPR, CCPA, and the EU AI Act.

Intelligent Privacy Assessments (DPIA, PIA, LIA, TIA) and Libraries

Automated assessments that are triggered by data context, helping you identify and minimize risks related to personal data processing.

ROPA Automation and Management

Automatically builds and updates your Record of Processing Activities (ROPA) in real-time as launches and reviews are completed.

Data Spec and Privacy Worksheet

Dynamic workflows that help stakeholders document data usage in minutes, automatically triggering the appropriate privacy reviews and risk flags.

Third-Party Risk Management

Out-of-the-box Configurable Workflows for Third-Party Due Diligence

Standardized questionnaires and review paths designed to evaluate the security and privacy posture of new vendors.

4 hours

Third-Party Risk Management Dashboard

A centralized view of all vendor relationships, showing risk scores, assessment statuses, and renewal timelines at a glance.

Support tickets

Third-Party Invitation Management

Streamlines the process of sending assessments to vendors and linking their responses directly to the relevant review launch.

AI Insights on Vendor Documents

AI reads vendor SOC 2 reports, DPAs, and contracts to surface risks, exceptions, and expiration dates, so due diligence takes minutes instead of hours.

Automated Third-Party Security Monitoring

Uses AI to continuously scan public information for third-party security incidents, delivering instant alerts via email or Slack so your team can quickly assess exposure.

Customizable Third-Party Profiles

A profile for each vendor that keeps its owner, data shared, risk score, documents, and review history in one place, with fields you define.

Automatic Scheduling of Re-assessment

Set how often each vendor should be re-reviewed, and TerraTrue opens the re-assessment automatically when it's due.

Security & Provisioning

Data Encryption At Rest and In Transit

All customer data is encrypted at rest and in transit using industry-standard encryption. See our Trust page for details.

4 hours

OAuth with Google / SAML-based SSO

Allows users to log in securely using their existing corporate credentials, supporting providers like Google, Okta, Microsoft Entra (Azure AD), OneLogin, and JumpCloud.

Support tickets

SCIM User Provisioning

Automates the creation, update, and deactivation of user accounts in TerraTrue directly from your identity provider.

Identity Provider Groups

Syncs your existing user groups (e.g., from Okta or Azure AD) to automatically assign TerraTrue roles and review team memberships.

User Permissions & Access Groups

Role-based permissions that control who can view, edit, review, and administer launches, down to individual teams and workflows.

Audit Logs

Maintains a comprehensive record of user actions, configuration changes, and access history for security and compliance auditing.

Product SLA

A contractual 99.9% uptime commitment, with service credits if we miss it.

99.9%

Customer Success

Initial White-Glove Implementation Support

Hands-on setup of your integrations, workflows, review teams ,and SSO, so your first launches run through TerraTrue within weeks.

$20,000

one-time

$20,000

Ongoing Support

Help from people who know the product, whenever your team needs it.

Dedicated CSM

Program Architect

Priority Support

Program Architect

Workflow Configuration Guidance

Expert guidance on configuring your intake forms and review logic in TerraTrue to match your organization's specific risk operations.

Dedicated CSM

Program Design

A named program architect who designs and refines your review program: workflows, questionnaires, risk taxonomy, and new programs such as the EU AI Act as your obligations change.

Add-on

Executive Business Reviews

Strategic meetings to review program performance, ROI, and long-term goals.

Yearly

Semi-annual

Product Roadmap Alignment

Regular sessions with TerraTrue's product team to share your priorities and preview what's coming next.

Yearly

+ Design Partner Access

Professional Services

Migration from your current tools and custom implementation projects, scoped and priced separately. For ongoing program work, see Program Design.

Add-on

Data Catalog (Optional Add-on)*

*$1,000 per connector per year

Data Source Connectors

Automatically scan and map your data ecosystem by directly integrating with data sources, like AWS RDS, BigQuery, Databricks, Snowflake, and AI infrastructure. Priced per connector, per year with no minimum.

Add-on

Exploration of Data Sources & Data Classification

Scans your data tables to automatically populate, classify, and match data types to your TerraTrue taxonomy, providing a searchable, bird's-eye view of your organization's data usage.

Dedicated CSM

Automated Launch Creation with Custom Triggers

Utilizes a rules-based engine to automatically trigger new risk reviews (launches) whenever specific data types or schema changes are detected in your catalog.

Dedicated CSM

AWS Ingestion Agent

A client agent that runs within your own cloud environment (Kubernetes) to securely scan AWS datastores without sensitive data or credentials ever leaving your VPC.

Add-on

API Ingestion

Allows for the programmatic ingestion of metadata, ensuring your catalog can accept data from custom sources or tools regardless of the ingestion method.

Yearly

Additional Instance

Additional Instance for Staging or Testing

A separate environment to test workflow changes before they go live. Limited to 500 users.

$20,000/yr

Add what your program needs

Grow reviewers, usage, or expert help as your program grows. Billed annually with no surprise overages.

Add-on

Price

Additional Reviewer

One more reviewer seat

$6,000/yr

Usage Block

+100,000 API and MCP calls per month

$6,000/yr

Scale Pack

+500,000 API and MCP calls per month

$24,000/yr

Program Advisory

A named program architect: workflow and questionnaire design, quarterly review program (~8 hours/mo)

$30,000/yr

Included in Enterprise+

$30,000/yr

Included in Enterprise+

$30,000/yr

Program Partner

New programs built each year (e.g. EU AI Act or vendor-risk program), monthly reviews, and board-ready reporting (~20 hours/mo)

$60,000/yr

Data Catalog

Connect production data sources and catch drift from approved designs

$1,000 per connector/yr

Staging Instance

A separate environment to test workflows before they go live

$20,000/yr

Included in Enterprise+

$20,000/yr

Included in Enterprise+

$20,000/yr

Pricing FAQs

Here are quick answers to the most common questions we get from teams considering TerraTrue.

What is a launch?

A launch is the basic unit of work in TerraTrue: a feature, vendor, AI model, or project that needs review. Think of it as a ticket that collects everything reviewers need.

Who counts as a reviewer?

A subject-matter expert who assesses risk and provides approval, such as privacy counsel, a security engineer, or an AI governance lead. Each reviewer is billed once, however many teams they review for.

Who counts as a user?

Anyone who logs in to submit or collaborate on a launch: product managers, engineers, or procurement. Users aren't billed.

What counts towards my API and MCP allowance?

Every call through the REST API or the MCP server counts toward one monthly pool. Most customers stay well inside 100,000 a month. Teams running agents on TerraTrue add usage blocks or move to Enterprise+.

What happens if we go over our allowance?

Nothing breaks. We'll show you your usage and add the right block at renewal. We never throttle your integrations or agents mid-term.

How is Program Design different from customer success?

Your customer success manager makes sure you get the most from the product. A program architect designs your program: your workflows, questionnaires, and risk taxonomy, plus new programs such as the EU AI Act as your obligations change.

Is there a plan for smaller teams?

Talk to us. If you're starting with a single program, we'll scope a plan that fits and grow with you.

How does billing and cancellation work?

Plans are billed annually in advance. You can choose not to renew at the end of any term. Multi-year terms are available.

What if my question isn’t listed here?

Contact Sales sales@terratrue.com for any questions or feedback.

Powering the risk programs at