Plans for every stage and size.
The tier reflects what you need Aicura to support, from a free AI register through to enterprise-wide governance. The size reflects how many AI systems your organisation is governing.
For organisations building their AI register and discovering what they run.
Get startedIncludes
- ✓Dashboard, News, Support
- ✓AI Register
- ✓Shadow AI Discovery
- ✓Prefill AI catalogue
- ✓Reports, Library
For organisations meeting the December 2026 ADM transparency deadline.
Sign upIncludes
- Everything in Register
- ✓Privacy Policy scan and fix
- ✓ADM (Privacy Act) framework
For organisations starting their AI governance program.
Sign upIncludes
- Everything in Privacy
- ✓Model Card and Decision Disclosure
- ✓Risk assessments
- ✓Risks and Controls
- ✓Governance Policies
- ✓Guardrail authoring
- ✓AI6, NSW AIAF, AI Ethics Principles and DTA frameworks
For organisations running a mature AI governance program.
Contact usIncludes
- Everything in Essentials
- ✓Impact assessments and incidents
- ✓GRC and data provenance syncing
- ✓Monitoring and runtime enforcement
- ✓Evidence Vault, Trust Centre, Boards and Committees
- ✓ISO 42001, NIST AI RMF and NDB frameworks
For enterprises with complex governance and dedicated support needs.
Contact usIncludes
- Everything in Pro
- ✓SSO with SAML, multi-entity
- ✓Dedicated CSM, 99.9% SLA, audit rights
- ✓On-prem / private cloud
- ✓EU, UK, Singapore and US frameworks
- ✓Custom integrations & content (on request)
Need a purchase order or invoice? Contact us.
What each tier reaches.
Every tier includes everything below it, so a tick carries all the way up the ladder.
| Feature | Register | Privacy | Essentials | Pro | Enterprise |
|---|---|---|---|---|---|
| AI Register | |||||
| AI Register | ✓ | ✓ | ✓ | ✓ | ✓ |
| Helper PDF intake | ✓ | ✓ | ✓ | ✓ | ✓ |
| AI system prefill catalogue | ✓ | ✓ | ✓ | ✓ | ✓ |
| Agent prefill catalogue | ✓ | ✓ | ✓ | ✓ | ✓ |
| Model Card | Not included | Not included | ✓ | ✓ | ✓ |
| Decision Disclosure | Not included | Not included | ✓ | ✓ | ✓ |
| Agent tools | Not included | Not included | Not included | ✓ | ✓ |
| Agent runtime identities | Not included | Not included | Not included | ✓ | ✓ |
| Agent decision logs | Not included | Not included | Not included | ✓ | ✓ |
| Use-Case Intake | Not included | Not included | Not included | ✓ | ✓ |
| Discovery | |||||
| Discovery scans | ✓ | ✓ | ✓ | ✓ | ✓ |
| Discovery queue and history | ✓ | ✓ | ✓ | ✓ | ✓ |
| Discovery suggestions | ✓ | ✓ | ✓ | ✓ | ✓ |
| Discovery decisions | ✓ | ✓ | ✓ | ✓ | ✓ |
| Discovery connectors | |||||
| ServiceNow CMDB | ✓ | ✓ | ✓ | ✓ | ✓ |
| Okta | ✓ | ✓ | ✓ | ✓ | ✓ |
| Microsoft Entra ID | ✓ | ✓ | ✓ | ✓ | ✓ |
| Google Workspace | ✓ | ✓ | ✓ | ✓ | ✓ |
| AWS Config | ✓ | ✓ | ✓ | ✓ | ✓ |
| Azure Resource Graph | ✓ | ✓ | ✓ | ✓ | ✓ |
| GCP Asset Inventory | ✓ | ✓ | ✓ | ✓ | ✓ |
| Freshservice | ✓ | ✓ | ✓ | ✓ | ✓ |
| Slack | ✓ | ✓ | ✓ | ✓ | ✓ |
| Chrome Enterprise | ✓ | ✓ | ✓ | ✓ | ✓ |
| Microsoft Intune | ✓ | ✓ | ✓ | ✓ | ✓ |
| Jamf Pro | ✓ | ✓ | ✓ | ✓ | ✓ |
| Fleet (osquery) | ✓ | ✓ | ✓ | ✓ | ✓ |
| GitHub | ✓ | ✓ | ✓ | ✓ | ✓ |
| Xero | Not included | Not included | Not included | Not included | ✓ |
| QuickBooks Online | Not included | Not included | Not included | Not included | ✓ |
| MYOB | Not included | Not included | Not included | Not included | ✓ |
| Network egress logs | Not included | Not included | Not included | Not included | ✓ |
| AI Wizard | Not included | Not included | Not included | Not included | ✓ |
| Policy | |||||
| Privacy policy ADM review | Not included | ✓ | ✓ | ✓ | ✓ |
| AI Acceptable Use Policy generation and review | Not included | Not included | ✓ | ✓ | ✓ |
| AI Risk Assessment Policy generation and review | Not included | Not included | ✓ | ✓ | ✓ |
| AI Ethics and Human Rights Policy generation and review | Not included | Not included | ✓ | ✓ | ✓ |
| AI Data Governance Policy generation and review | Not included | Not included | ✓ | ✓ | ✓ |
| AI Incident Response Plan generation and review | Not included | Not included | ✓ | ✓ | ✓ |
| AI Transparency Statement generation and review | Not included | Not included | ✓ | ✓ | ✓ |
| AI Vendor Due Diligence Checklist generation | Not included | Not included | ✓ | ✓ | ✓ |
| Frameworks | |||||
| ADM Privacy Act | Not included | ✓ | ✓ | ✓ | ✓ |
| AI6 | Not included | Not included | ✓ | ✓ | ✓ |
| NSW AIAF | Not included | Not included | ✓ | ✓ | ✓ |
| Australia's 8 AI Ethics Principles | Not included | Not included | ✓ | ✓ | ✓ |
| DTA Australian Government AI guidance | Not included | Not included | ✓ | ✓ | ✓ |
| ISO/IEC 42001:2023 | Not included | Not included | Not included | ✓ | ✓ |
| Notifiable Data Breach Scheme | Not included | Not included | Not included | ✓ | ✓ |
| NIST AI RMF 1.0 | Not included | Not included | Not included | ✓ | ✓ |
| EU AI Act | Not included | Not included | Not included | Not included | ✓ |
| United Kingdom | Not included | Not included | Not included | Not included | ✓ |
| Singapore | Not included | Not included | Not included | Not included | ✓ |
| US state AI laws | Not included | Not included | Not included | Not included | ✓ |
| Assessments | |||||
| Risk assessments | Not included | Not included | ✓ | ✓ | ✓ |
| Impact assessments | Not included | Not included | Not included | ✓ | ✓ |
| Risks and Controls | |||||
| Risks and Controls | Not included | Not included | ✓ | ✓ | ✓ |
| Control evidence | Not included | Not included | ✓ | ✓ | ✓ |
| Actions | Not included | Not included | ✓ | ✓ | ✓ |
| GRC Connect | Not included | Not included | Not included | ✓ | ✓ |
| Bring your own risk taxonomy | Not included | Not included | Not included | Not included | ✓ |
| Bring your own control inventory | Not included | Not included | Not included | Not included | ✓ |
| Incidents | |||||
| Incident lifecycle | Not included | Not included | Not included | ✓ | ✓ |
| OAIC Notifiable Data Breach | Not included | Not included | Not included | ✓ | ✓ |
| APRA CPS 230 material incident | Not included | Not included | Not included | ✓ | ✓ |
| GDPR Article 33 personal data breach | Not included | Not included | Not included | Not included | ✓ |
| EU AI Act Article 73 serious incident | Not included | Not included | Not included | Not included | ✓ |
| Guardrails and runtime enforcement | |||||
| Guardrail sets | Not included | Not included | ✓ | ✓ | ✓ |
| Guardrail rules | Not included | Not included | ✓ | ✓ | ✓ |
| Guardrail compiler | Not included | Not included | ✓ | ✓ | ✓ |
| Signed guardrail bundles | Not included | Not included | ✓ | ✓ | ✓ |
| Suggested guardrails | Not included | Not included | ✓ | ✓ | ✓ |
| Guardrail deployment | Not included | Not included | Not included | ✓ | ✓ |
| Aicura AI gateway | Not included | Not included | Not included | ✓ | ✓ |
| Bring your own gateway | Not included | Not included | Not included | ✓ | ✓ |
| Agent runtime constraints | Not included | Not included | Not included | ✓ | ✓ |
| Agent suspension and re-scoping | Not included | Not included | Not included | ✓ | ✓ |
| Enforcement events | Not included | Not included | Not included | ✓ | ✓ |
| Preflight decision point | Not included | Not included | Not included | ✓ | ✓ |
| Scanners | |||||
| Australian PII detection | Not included | Not included | Not included | ✓ | ✓ |
| LLM Guard | Not included | Not included | Not included | ✓ | ✓ |
| Local classifier serving | Not included | Not included | Not included | ✓ | ✓ |
| Bring your own scanner | Not included | Not included | Not included | ✓ | ✓ |
| Presidio | Not included | Not included | Not included | Not included | ✓ |
| Bedrock Guardrails | Not included | Not included | Not included | Not included | ✓ |
| Granite Guardian | Not included | Not included | Not included | Not included | ✓ |
| Security testing | |||||
| Red-team testing | Not included | Not included | Not included | ✓ | ✓ |
| Vulnerability scanning | Not included | Not included | Not included | ✓ | ✓ |
| Evaluations | Not included | Not included | Not included | ✓ | ✓ |
| Agent evaluations | Not included | Not included | Not included | ✓ | ✓ |
| Bring your own testing engine | Not included | Not included | Not included | ✓ | ✓ |
| Monitoring | |||||
| Dynamic risk scoring | Not included | Not included | Not included | ✓ | ✓ |
| Drift and quality signals | Not included | Not included | Not included | ✓ | ✓ |
| Thresholds and alerting | Not included | Not included | Not included | ✓ | ✓ |
| Vendor model change signals | Not included | Not included | Not included | ✓ | ✓ |
| Telemetry ingestion | Not included | Not included | Not included | ✓ | ✓ |
| Value and KPI tracking | Not included | Not included | Not included | ✓ | ✓ |
| Spend tracking | Not included | Not included | Not included | ✓ | ✓ |
| MLOps evidence ingestion | Not included | Not included | Not included | ✓ | ✓ |
| Guardian autonomy oversight | Not included | Not included | Not included | ✓ | ✓ |
| Data governance connectors | |||||
| Microsoft Purview | Not included | Not included | Not included | ✓ | ✓ |
| Databricks Unity Catalog | Not included | Not included | Not included | ✓ | ✓ |
| Unity Catalog (open source) | Not included | Not included | Not included | ✓ | ✓ |
| Snowflake Horizon | Not included | Not included | Not included | ✓ | ✓ |
| Atlan | Not included | Not included | Not included | ✓ | ✓ |
| Alation | Not included | Not included | Not included | ✓ | ✓ |
| Collibra | Not included | Not included | Not included | ✓ | ✓ |
| BigID | Not included | Not included | Not included | ✓ | ✓ |
| Evidence, verifiability and audit | |||||
| Evidence Vault | Not included | Not included | Not included | ✓ | ✓ |
| Evidence Packs | Not included | Not included | Not included | ✓ | ✓ |
| Attestations | Not included | Not included | Not included | ✓ | ✓ |
| Post-quantum signing | Not included | Not included | Not included | ✓ | ✓ |
| Independent verifier | Not included | Not included | Not included | ✓ | ✓ |
| Trust Centre | Not included | Not included | Not included | ✓ | ✓ |
| Evidence freshness | Not included | Not included | Not included | Not included | ✓ |
| Oversight and approvals | |||||
| Unified audit trail | ✓ | ✓ | ✓ | ✓ | ✓ |
| Governance committee | Not included | Not included | Not included | ✓ | ✓ |
| Ethics committee | Not included | Not included | Not included | ✓ | ✓ |
| Board reports | Not included | Not included | Not included | ✓ | ✓ |
| Governance review | Not included | Not included | Not included | Not included | ✓ |
| Training attestation ingestion | Not included | Not included | Not included | Not included | ✓ |
| Reporting | |||||
| AI System report | ✓ | ✓ | ✓ | ✓ | ✓ |
| Agent report | ✓ | ✓ | ✓ | ✓ | ✓ |
| Policy review report | Not included | ✓ | ✓ | ✓ | ✓ |
| Risk Assessment report | Not included | Not included | ✓ | ✓ | ✓ |
| Impact Assessment report | Not included | Not included | Not included | ✓ | ✓ |
| Incident report | Not included | Not included | Not included | ✓ | ✓ |
| Security testing report | Not included | Not included | Not included | ✓ | ✓ |
| Integrations | |||||
| Webhooks | Not included | Not included | Not included | ✓ | ✓ |
| SIEM export | Not included | Not included | Not included | ✓ | ✓ |
| Ticketing and messaging | Not included | Not included | Not included | ✓ | ✓ |
| Prudential process feeds | Not included | Not included | Not included | ✓ | ✓ |
| Register read API | Not included | Not included | Not included | Not included | ✓ |
| SAML and group-claim mapping | Not included | Not included | Not included | Not included | ✓ |
| Other | |||||
| Dashboard | ✓ | ✓ | ✓ | ✓ | ✓ |
| Library | ✓ | ✓ | ✓ | ✓ | ✓ |
| News | ✓ | ✓ | ✓ | ✓ | ✓ |
| Support | ✓ | ✓ | ✓ | ✓ | ✓ |
| User management | ✓ | ✓ | ✓ | ✓ | ✓ |
| Notifications | ✓ | ✓ | ✓ | ✓ | ✓ |
| Multi-entity tenancy | Not included | Not included | Not included | Not included | ✓ |
What's not in the price
Three things worth being explicit about.
Legal advice. Aicura is a governance support tool, not a law firm. If you need legal sign-off on your privacy policy or your governance program, that's a separate cost with a separate provider.
Implementation services. Aicura is self-serve. You can sign up and start the work from your first session. We don't run implementation engagements ourselves. If your organisation needs an implementation partner, contact us and we'll put you in touch with someone who can help, but the engagement is between you and them.
Certification. Aicura doesn't certify anything. Certification is done by accredited third parties. If you want ISO/IEC 42001 certification, you'll engage a certification body separately. Aicura can support the underlying work, but it doesn't do the audit.
The boring-but-important stuff.
Get started with Aicura.
Sign up and start the work. From your first session, you can catalogue your AI systems, run your privacy policy through Aicura's guidance and put your first risk assessments in place.