Home/Pricing
Four tiers · Built for your scale

Pricing built for your maturity journey.

MaturityOne operates on a four-tier model designed to serve organisations across the full spectrum of maturity journey, scale, and customisation need - from SMEs entering through One Lite, through focused Standard and comprehensive Enterprise deployments, to fully customised Premium engagements. One Lite is the recommended starting point - it produces a defensible baseline in a single engagement and opens a natural upgrade path into Standard, Enterprise, or Premium as requirements grow.

Book a walkthrough →Get pricing
Four-tier model
Built
$
Pricing
4
Pricing tiers
13
Disciplines available
AU
Hosted in Australia
Talk
No published list price
🇦🇺🇸🇬🇭🇰🇯🇵🇦🇪🇸🇦
Designed for Australia, APAC and GCC markets
01The four tiers

Four tiers. One natural upgrade path.

Each tier is designed for a different stage of the maturity journey - and a different scale of organisation. All tiers include AI Advisor access and audit-ready report generation. Standard tier clients choose any three of the twelve specialist domains.
One LiteSME flagship · Recommended starting point
Start here
The recommended starting point for every organisation. Integrated SME-grade assessment covering all 13 disciplines in a single engagement. Delivers a board-ready maturity baseline and a defensible action plan. Includes Cross-Domain Intelligence, AI Advisor, and audit-ready report generation. Re-runnable annually.
→ Contact us for pricing13 disciplines · Single engagement
StandardFocused on three specialist disciplines
Focused
Access to any three specialist domains plus portfolio dashboard. Self-service assessment with guided workflows and AI Advisor. Ideal for organisations focused on specific risk disciplines - for example: cyber, third-party risk, and AI governance. Choose any three of the twelve specialist domains.
→ Contact us for pricing3 of 12 specialist domains
EnterpriseFull platform access
Comprehensive
Full access to all twelve specialist domains, all regulatory add-on modules, cross-domain analytics, benchmarking, and advanced reporting. For organisations requiring comprehensive, enterprise-wide maturity visibility across cyber, AI, third party, projects, resilience and the rest of the platform.
→ Contact us for pricingAll 12 specialist domains · All add-ons
PremiumWhite-glove with practitioner consulting
Bespoke
Everything in Enterprise, plus dedicated consulting engagement. Customisable questions, answer frameworks, and assessment flows tailored to your organisation. White-glove delivery with Effective Risk Management practitioners - the same people who built the platform.
→ Contact us for pricingBespoke · Practitioner-delivered
02What's in every tier

Five things. Every tier.

Whether you start with One Lite or commission a Premium engagement, five capabilities are always included - they're the platform's foundation, not features that get unlocked at higher tiers.
1
AI Advisor (Coming Soon)
Recommendation engine
2
Cross-Domain Intelligence
Cascade engine
3
Audit-ready reports
Evidence traceability
4
Australian hosting
GCP · Data sovereignty
5
Practitioner content
20+ years of practice
Why no published list price? Maturity assessment scope varies meaningfully by organisation - number of business units, number of business lines, regulatory scope, depth of evidence required, customisation needed. We price each engagement to the actual scope, not to a tier label. The first conversation establishes scope; the second conversation establishes price.
03Tier comparison

What's in each tier. Side by side.

Use this comparison to map your organisation to the right tier. Most organisations start with One Lite, then upgrade to Standard or Enterprise as a specific discipline or scope becomes a focus area. Premium adds white-glove practitioner consulting on top of Enterprise.
Disciplines coveredHow many disciplines you can assess
Scope
One Lite: All 13 disciplines · SME-grade depth.
Standard: Any 3 specialist disciplines · Full depth.
Enterprise: All 12 specialist disciplines · Full depth.
Premium: All 12 specialist disciplines plus customised content.
→ Scope per tier1L · ST · EN · PR
Regulatory add-on modulesISO, APRA, EU AI Act, ASD E8…
Compliance
One Lite: Not included - One Lite is the cross-domain baseline.
Standard: Add-ons for the 3 chosen disciplines.
Enterprise: All regulatory add-ons across all disciplines.
Premium: All regulatory add-ons plus customised mapping.
→ ISO 42001 · CPS 230 · etcST · EN · PR
Cross-domain analyticsCascade engine + benchmarking
Engine
One Lite: Cross-Domain Intelligence engine - included.
Standard: Cross-domain analytics across the 3 chosen disciplines.
Enterprise: Full cross-domain analytics + industry benchmarking.
Premium: Full analytics + tailored benchmark cohorts.
→ Cascade visualisation1L · ST · EN · PR
Reporting and dashboardsPer-domain · cross-domain · executive
Output
One Lite: Single board-ready maturity baseline report.
Standard: Per-discipline + portfolio dashboard.
Enterprise: Three-tier dashboards (domain · cross-domain · executive 2x2).
Premium: All Enterprise reporting plus bespoke executive packs.
→ Audit-ready evidence1L · ST · EN · PR
CustomisationTailoring to your organisation
Bespoke
One Lite: Standard SME questions, no customisation.
Standard: Standard specialist questions, no customisation.
Enterprise: Light customisation of weighting profiles.
Premium: Full customisation - questions, frameworks, flows.
→ Bespoke contentEN (light) · PR (full)
Practitioner involvementWhite-glove delivery
Service
One Lite: Self-service · platform-led.
Standard: Self-service · platform-led with AI Advisor support.
Enterprise: Self-service plus implementation support.
Premium: White-glove delivery by Effective Risk Management practitioners - the same people who built the platform.
→ Practitioner consultingEN (support) · PR (delivery)
04Choose your tier

Where you start. Not where you finish.

Most organisations start with One Lite for the cross-domain baseline, then upgrade. The right starting tier depends on your scope, depth and customisation needs - not your size.
Start with→
SME · cross-domain baselineOne Lite
Focused on 3 disciplinesStandard
Need full platform accessEnterprise
Need bespoke + practitionersPremium
→
- Pricing
→Upgrade when
Specific discipline becomes a focus→ Standard
Regulator scrutiny across domains→ Enterprise
Sector or scope is highly specialised→ Premium
Annual refresh of any tier↻ Re-run
Common path. SME runs One Lite, scores reveal cyber and third-party as focus areas. The board commissions Standard tier with three disciplines (Cyber + Third Party + AI Governance). The One Lite scores carry forward as the baseline - no re-work. Eighteen months later, the organisation has grown and commissions Enterprise tier covering all twelve specialist disciplines.
05Frequently asked

The questions buyers actually ask.

Plain answers to the questions buyers ask before getting on a call. If your question isn't here, the walkthrough is the right place to ask - practitioner-level answers, no sales pressure.
Pricing & commercialsFAQ · 1-4

Why no published list price?

Maturity assessment scope varies meaningfully by organisation - number of business units, business lines, regulatory scope, evidence depth, customisation. We price each engagement to the actual scope, not to a tier label. The first conversation establishes scope; the second establishes price.

Annual or one-time?

All tiers are annual subscriptions. Maturity isn't a one-time exercise - it's a continuous discipline. Annual pricing reflects that and includes refresh assessments, evolving content, and platform updates.

What about sector or jurisdictional pricing?

Pricing is consistent globally and across sectors. Where regulatory add-ons are sector-specific (e.g. APRA CPS 230, EU AI Act), they're included in the relevant tier rather than charged separately.

Discounts for advisors and partners?

Yes - partner economics are tailored to channel type. Mid-tier advisor channel partners (Channel A) and consulting firm embedded partners (Channel B) have different commercial structures. Talk to us about partner onboarding.

Platform & deliveryFAQ · 5-8

How quickly can we start?

One Lite is typically live within a week of contract sign-off. Standard and Enterprise depend on scope but typically 2-4 weeks to first assessment. Premium engagements are scoped to your timeline.

Where is the data hosted?

All MaturityOne data is hosted on Google Cloud Platform in Australia with full data sovereignty. ISO 27001 certification in progress (Q4 2026); SOC 2 planned (Q3 2026). See the trust page for details.

What if we outgrow our tier?

Upgrades are seamless. Your assessment data, scores and history carry forward. No re-work. The scoring engine, regulatory mappings and dashboards just expand to cover the additional scope you've unlocked.

Can we trial One Lite first?

Yes. Please contact us and discuss a free trial.

06Get pricing

Scope first. Then pricing.

A pricing conversation isn't a sales call. It's a practitioner walking through your scope - disciplines that matter, business units in scope, regulatory obligations to evidence, customisation needed - and pricing the engagement to match. If we're not the right fit, we'll tell you. Most pricing conversations land in 30 minutes.
Get pricing →Or start with One Lite