◆ Compliance at a fraction of Big-4 cost

Know your risks.
Before the auditor does.

Q: What payment methods do you accept?

All major credit cards via Stripe. Scale and Plus tiers support PO + NET 30 invoicing. Annual Pro plans can be invoiced on request.

Q: What is your refund policy?

Pro plan: cancel any time, access continues through billing period, no partial refunds. Pilot: full refund within 7 days of purchase if no agent runs have been executed.

Q: Is a BAA available?

Yes. Business Associate Agreements (BAA) are available on Pilot and Enterprise tiers. Contact hello@sturna.ai.

Q: Where is my data stored?

All data is stored in the US (AWS us-east-1). EU residency is available on Enterprise. Documents are encrypted at rest with AES-256-GCM.

Q: Who owns the compliance findings PDFs?

You own all findings PDFs and reports generated for your organization. Sturna retains no rights to your compliance data.

Q: How long are audit logs retained?

Free: 30 days. Pro: 1 year. Pilot: 2 years. Enterprise: configurable, up to indefinite retention.

Q: Can we cancel at any time?

Pro plan cancels instantly from your billing portal. Pilot is a one-time 90-day engagement with no recurring charges.

Q: What happens after the pilot ends?

Your workspace and findings are preserved for 90 days post-pilot. You can export all data, continue on Pro, or upgrade to Enterprise.

Q: What is MARCH adversarial check?

MARCH (Manipulation, Adversarial Robustness, Circumvention, Hallucination) is Sturna's proprietary adversarial stress-test for AI systems. It probes your AI agents for jailbreaking, prompt injection, and factual drift — issues that standard compliance frameworks don't cover yet.

SOC 2, HIPAA, EU AI Act, and Financial compliance scanning. From a free scan to a full 90-day pilot — no Big-4 invoice required.

Free

$0 /mo

Start scanning for free. No credit card needed.

✓5 document scans /mo
✓1 compliance vertical
✓Public scanner reports
✓Transparency Card
✓Audit log 30-day retention
—No PDF export
—No weekly digest

Start free →

Pro

$49 /mo

Unlimited scanning across all verticals. Export-ready for your compliance team.

✓Unlimited scans
✓All 4 verticals
✓Signed PDF exports
✓Weekly compliance digest
✓Transparency Card
✓Audit log 1-year retention
—No pilot workspace

Get Pro →

Price it against the fine it prevents

One SEC examination finding costs more than 8 years of Scale. One HIPAA breach costs more than 15 years.

SEC Examination

$50K–$500K

per violation — SEC enforcement 2024–2026

vs. Scale: $2,000/mo

HIPAA Breach (per record)

$50–$350

HHS OCR 2024 adjustment — max $1.5M/violation type

10K records = $500K–$3.5M

EU AI Act (Art. 71)

Up to $35M

or 7% of global annual turnover — whichever is higher

Plus tier: $5,000/mo

Sources: SEC Enforcement Division 2024 Annual Report; HHS Breach Portal + 45 CFR §164.404; EU AI Act (Regulation (EU) 2024/1689) Art. 71 penalties. See how Sturna mitigates these →

Feature comparison

Everything, side by side

No marketing asterisks. Every row is literal.

	Free	Pro	Pilot	Scale	Plus
Scanning
Document scans / month	5	Unlimited	Unlimited	Unlimited	Unlimited
Max file size	10 MB	100 MB	100 MB	Custom	Custom
Compliance verticals	1	4	4	4 + custom	4 + custom
Agent runs / month	5	Unlimited	Unlimited	Unlimited	Unlimited
Reports & Exports
Transparency Card	✓	✓	✓	✓	✓
PDF exports	—	✓	✓ Signed	✓	✓
Weekly compliance digest	—	✓	✓	✓	✓
Compliance findings PDF HMAC-signed	—	—	✓	✓	✓
Pilot Workspace
Dedicated pilot workspace	—	—	✓ 90 days	✓ persistent	✓ persistent
Team seats	1	1	Up to 5	5	Unlimited
Founder access slot	—	—	✓	—	—
MARCH adversarial check AI-specific	—	—	✓	✓	✓
Compliance & Enterprise
Audit log retention	30 days	1 year	2 years	5 years	Indefinite
BAA available	—	—	✓	✓	✓
Dedicated tenant / data isolation	—	—	—	✓	✓
SSO / SAML	—	—	—	✓	✓
Custom compliance verticals	—	—	—	—	✓
VPC / on-prem deployment	—	—	—	—	✓
API access + rate limits	—	—	—	✓	✓
Full RBAC + admin controls	—	—	—	✓	✓
Dedicated CSM + support	—	—	—	—	✓
Custom SLA (99.99%)	—	—	—	✓ 99.9%	✓ 99.99%

ROI Calculator

What does compliance actually cost you?

Conservative estimates. Every number is citable. See the math.

Your situation

Company size

Primary compliance vertical

Current annual compliance spend

$50,000 / yr

$0$200k

External audits / assessments per year

Estimated savings

Typical Big-4 audit cost

$110,000

2 × $55k median SOC 2 Type II

Internal hours saved / year

320 hrs

at $85/hr loaded = $27,200

Sturna Pilot cost (90 days)

$2,500

vs. your status quo above

Payback period

0.3 months

Total first-year savings: $134,700

Send this calculation to your inbox — we'll include a PDF with sourced benchmarks.

✓ Report sent — check your inbox.

Benchmark sources: [1] SOC 2 Type II audit cost $40k–$80k median: AICPA 2024 Audit Quality Report & Gartner GRC Benchmark 2024. [2] HIPAA risk assessment cost $25k–$60k: HHS HIPAA Security Rule Guidance & Ponemon Institute 2024 Cost of Healthcare Compliance. [3] EU AI Act compliance consulting $30k–$75k: EU Digital Strategy Impact Assessment 2024. [4] Financial compliance consulting $50k–$150k: Deloitte Global Risk Advisory 2024 annual survey. [5] Internal FTE compliance hours: $85/hr loaded cost per Radford Global Compensation survey 2024; 160–400 hrs/yr range per company size; conservative midpoint used. All estimates use midpoints. Actual savings may be higher.

Competitive comparison

Sturna vs. the alternatives

Vanta, Drata, and Big-4 consultants compared across 6 dimensions that actually matter.

	Sturna	Vanta	Drata	Big-4 Consultant
Annual cost	✓ $588 Pro / $2,500 Pilot / $24k Scale	$6,000–$20,000 / yr	$10,000–$25,000 / yr	$40,000–$150,000 / engagement
Time to first findings	✓ Under 30 seconds	Days–weeks (onboarding)	Days–weeks (onboarding)	4–12 weeks
AI-specific coverage	✓ MARCH + EU AI Act Art. 9–15	None (generic GRC)	None (generic GRC)	Depends on team expertise
Audit log depth	✓ HMAC-signed, per-agent, per-claim	Evidence collection only	Evidence collection only	PDF reports, no live trail
Regulatory exceedance catches what standard doesn't	✓ HHS OCR Dec 2024, EU AI Act Nov 2025	Lags by quarters	Lags by quarters	Partner-dependent
Agent-architecture transparency	✓ Transparency Card: 16 fields per run	Black-box checks	Black-box checks	N/A
SSO + RBAC	✓ Scale + tiers	Basic SSO	Basic SSO	Manual / extra cost
VPC / on-prem deployment	✓ Plus tier	Cloud only	Cloud only	Custom engagement

Frequently asked

Common questions

What payment methods do you accept? +

All major credit cards via Stripe. Annual Pro plans can be invoiced on request — email hello@sturna.ai. Scale and Plus tiers support PO + NET 30 invoicing.

What is your refund policy? +

Pro plan: cancel any time from the billing portal; access continues through the paid period with no partial refunds.

Pilot: full refund within 7 days of purchase if no agent runs have been executed against your workspace.

Is a BAA available for HIPAA? +

Yes. Business Associate Agreements (BAA) are available on Pilot and Enterprise tiers. Contact hello@sturna.ai and we'll have one countersigned within 1 business day.

Where is my data stored? Is EU residency available? +

All data is stored in the US (AWS us-east-1). Documents are encrypted at rest with AES-256-GCM and in transit via TLS 1.3.

EU residency (AWS eu-west-1 or eu-central-1) is available on Enterprise. On-prem deployment eliminates data egress entirely.

Who owns the compliance findings PDFs? +

You own all findings PDFs and compliance reports generated for your organization. Sturna retains no rights to your compliance data. PDFs are HMAC-SHA256 signed for tamper-evidence and verifiable at /trust.

How long are audit logs retained? +

Free: 30 days. Pro: 1 year. Pilot: 2 years. Scale: 5 years. Plus: indefinite retention with your own data export.

All logs are append-only and HMAC-signed — no back-dating, no deletion.

Can we cancel at any time? +

Pro plan: cancel instantly from the billing portal at your dashboard. No penalty, no notice period.

Pilot: one-time 90-day engagement. No recurring charges. Nothing to cancel after purchase.

What happens after the pilot ends? +

Your workspace, findings, and audit trail are preserved for 90 days post-pilot. You can export all data at any time. At end-of-life you can:
• Continue on Pro ($49/mo) with full history
• Upgrade to Enterprise for persistent workspace + SSO
• Export and close — no hostage data

Does Sturna replace a Big-4 auditor? +

Sturna surfaces the gaps Big-4 auditors bill $40–80k to find — faster and at a fraction of the cost.

For formal certification (e.g., SOC 2 Type II attestation letter, ISO 27001 certificate), you still need a licensed auditor. But Sturna gets you there readier, cheaper, and with better documentation — turning a 10-week audit into a 2-week one.

What is MARCH adversarial check? +

MARCH stands for: Manipulation, Adversarial Robustness, Circumvention, Hallucination. It's Sturna's proprietary stress-test for AI systems — probing for jailbreaking, prompt injection, factual drift, and model circumvention.

Standard compliance frameworks (SOC 2, HIPAA, ISO 27001) don't cover AI-specific attack vectors yet. MARCH fills that gap. Available on Pilot and Enterprise.

Start scanning in 30 seconds

Free tier needs no credit card. Upload a document, pick your vertical, get your first findings.

Start free → Start pilot — $2,500 Scale — $2K/mo

Know your risks.Before the auditor does.