Pricing
Pay for readiness, not for seats
Every plan starts with the full ECC self-assessment. Pay only when you want AI analysis, expert validation, or a remediation plan.
All prices are in Saudi Riyals and exclude 15% VAT, added at invoicing.
Free
- Full ECC control library — 200 controls, 176 scored units
- Guided assessment workspace
- Provisional maturity results
- Downloadable provisional report (PDF)
- 1 assessment
- Up to 3 users
- Evidence upload not included
- 12 months
SAR 1,000
per assessment
- Everything in Self-Assessment
- Evidence upload with malware scanning and tenant-isolated storage
- AI evidence analysis and completeness checks
- Detailed maturity scoring by domain and subdomain
- Executive report (PDF) and statement of applicability
- AI assistant for questions and document drafting
- 1 assessment
- Up to 10 users
- 5 GB evidence
- 5 assisted documents
- 12 months
SAR 15,000
per assessment
- Everything in AI-Reviewed Readiness
- An assigned BazGrid expert reviews your answers and evidence
- Clarification loop with your team
- Expert-reviewed, quality-assured validated report
- Priority support
- 1 assessment
- Up to 25 users
- 20 GB evidence
- Unlimited assisted documents
- 12 months
SAR 5,000
per assessment
SAR 3,500 when added to Expert-Validated
- Remediation register generated from your results
- Owners and target dates
- Closure-evidence tracking
- 30/60/90-day roadmap
- Tied to the assessment it was generated from
Custom
Compare plans
| Compare plans | Self-Assessment | AI-Reviewed | Expert-Validated | Remediation |
|---|---|---|---|---|
| Full assessment (200 controls) | Included | Included | Included | Not included |
| Provisional results | Included | Included | Included | Not included |
| Report download | Provisional PDF | Remediation plan | ||
| Evidence upload | — | Closure evidence | ||
| AI evidence analysis | Not included | Included | Included | Not included |
| Maturity by domain / subdomain | Not included | Included | Included | Not included |
| Human expert validation | Not included | Not included | Included | Not included |
| Assisted documents | — | — | ||
| Users | 3 | 10 | 25 | — |
What "AI-reviewed" means
AI accelerates analysis; it never decides. Applicability and scoring are deterministic and versioned, and every result traces back to the control, answer and evidence that produced it. A human decision is required before any expert-validated report is issued.
Frequently asked questions
What counts as one assessment?
One ECC assessment for one organisation, with the users, storage and document limits of your tier.
Is this a certification?
No. BazGrid produces a readiness assessment. It is not an NCA, CST or other regulatory certification, audit or legal opinion.
What can I do for free?
Complete the full assessment for your organisation, see provisional results, and download a provisional report — up to 3 users, 1 assessment, 12 months. Evidence upload starts with AI-Reviewed.
How does payment work?
We issue an invoice; prices exclude 15% VAT, shown separately. Payment is by bank transfer within 14 days unless agreed otherwise. We never store card details on the platform.
When will I receive my report?
The AI-reviewed report is generated once your assessment is submitted and your evidence is analysed. For Expert-Validated, an expert is assigned within 2 business days and validation completes within 10 business days.
Can I upgrade later?
Yes — pay the difference within 30 days of purchase.
Where is my data?
Hosted in the Kingdom of Saudi Arabia on OCI Riyadh. AI inference runs in-Kingdom. Uploaded evidence is destroyed 30 days after your assessment is validated, unless the law requires longer retention.
What language is the assessment in?
The BazGrid interface is available in Arabic and English. ECC assessment content is in English.
Refunds?
See the refund policy for the windows that apply to each tier.
Do you work with government entities?
Public-sector organisations: contact us to confirm eligibility and contracting requirements.