Pricing

Pricing that scales with your evidence requirements

We publish what every public tier includes — scope, reports, retention, support, implementation, and standard add-on pricing where standardised. Most vendors do not. Every tier includes the applicable evidence model for its contracted scope, report verification where enabled, and the production residency and deployment posture agreed for that scope. Every deployment is scoped with a specialist; most Standard and Professional quotes can be issued the same day where scope is clear.

Standard Assurance Suite

FromA$999/ month

Excluding GST. Annual prepay −15%: A$10,190/year. Implementation from A$3,500.

Both platforms for small organisations that need one selected assurance outcome — insurer-review-ready and procurement-review-ready evidence without starting with a large consulting engagement.

Included:

  • Attest Standard + Trace Standard on one contract and one invoice
  • One Attest compliance outcome pack, chosen at scoping
  • Example outcome packs: Cyber Insurance Evidence, Essential Eight Readiness, Law Firm Privacy & Cyber Pack, Healthcare Practice Evidence Pack, and more
  • Automated evidence collection for the selected scope
  • Immutable, hash-chained evidence ledger
  • Report verification by QR and endpoint where enabled
  • 8 compliance reports + 4 AI governance reports per contract year
  • AI use monitoring and browser policy enforcement for 10 protected users
  • Microsoft 365 or Google Workspace connectors per pack scope
  • 12-month evidence retention view
  • 3 admin / reviewer accounts
  • Assisted onboarding with an APEXLyn specialist
  • Standard support
Request a guided quote

Professional Assurance Suite

FromA$3,999/ month

Excluding GST. Annual prepay −15%: A$40,790/year. Implementation from A$12,500.

Both platforms for growing regulated organisations that need multiple evidence outcomes, stronger governance workflows, expanded connector scope, and AI governance across the workforce.

Everything in Standard, plus:

  • Up to 3 Attest compliance outcome packs
  • Example outcome packs: ISO / NIST / CIS Assurance, APRA CPS 234 Evidence, Privacy Act Pack, Healthcare Pack, Government / ASD ISM Supplier, and more
  • 12 compliance reports + 6 AI governance reports per contract year
  • Hosted gateway AI enforcement
  • Response inspection, image inspection, and file inspection
  • 50 protected users included
  • Additional protected users at From A$45/user/month
  • Cloud posture connectors including AWS, Azure, and GCP per pack scope
  • Governance workflows: attestation, risk acceptance, and reviews
  • Read-only forensic views
  • One SIEM / webhook destination
  • Premium evidence packs available from the add-ons section
  • 24-month compliance retention
  • 36-month AI evidence retention
  • 10 admin users including the Approver role
  • Assisted onboarding
  • Priority support
Request a guided quote

Enterprise Assurance Suite

FromA$14,500/ month

Excluding GST. Annual prepay −15%: A$147,900/year. Implementation from A$45,000.

Advanced evidence authority for complex organisations — expanded evidence scope, legal hold where contracted, legal-review and eDiscovery evidence packs where entitled, regulator submission support packs where entitled, and dedicated support.

Everything in Professional, plus:

  • All contracted outcome packs, including ASD ISM March 2026 framework support where scoped
  • 24 compliance reports + 12 AI governance reports per contract year
  • Additional reports by overage or contract
  • Legal hold capability and chain-of-custody export where contracted
  • Full forensic workspace
  • Case management
  • Endpoint agent
  • AI output inspection
  • Legal-review, eDiscovery, and regulator submission support packs available where entitled
  • API / export integration
  • SAML / SCIM
  • 100 protected users included
  • Additional protected users at From A$75/user/month
  • 7-year compliance evidence retention where contracted
  • 84-month AI retention pack available where contracted
  • Named account manager
  • Enterprise onboarding
  • Dedicated support
Contact sales

Sovereign Assurance Suite

Contact sales

Annual contract. Regulated private-sector, critical infrastructure, major healthcare, and high-assurance enterprise environments.

A contracted high-assurance dual-platform program with extended scope, customer-managed keys where scoped, Australian sovereign deployment posture where contracted, and a dedicated support model.

Everything in Enterprise, plus:

  • Contracted assurance program scoped to regulatory, operational, and evidence requirements
  • Customer-managed encryption keys where scoped
  • Extended, contract-defined retention profiles
  • Stricter isolation and support-access controls
  • Regulated-industry reporting support program
  • Named success owner with priority response where contracted
  • Controlled implementation with security review
Contact sales

Government / Bank Assurance Suite

Contact sales

Procurement-led. Federal, state and local government, banks, major agencies, and institutional buyers.

Procurement-led assurance programs with controlled deployment patterns, ASD ISM March 2026 framework support where contracted, milestone billing, and implementation-led delivery.

Included:

  • Isolated or controlled high-assurance deployment where scoped
  • ASD ISM March 2026 framework scope and government-readiness evidence support where contracted
  • Essential Eight evidence aligned to scoped maturity expectations
  • Legal hold where entitled and contracted
  • Enhanced retention and export controls where contracted
  • PO-referenced and milestone billing
  • Dedicated delivery lead where contracted
  • Documentation pack for evaluators
Request documentation

Partner

Contact sales

Partner commercial terms under agreement. MSPs, MSSPs, insurers, brokers, and portfolio operators.

Managed assurance as your service. White-label or co-branded workflows where contracted, portfolio oversight across managed clients, and consolidated billing where scoped.

Included:

  • White-label or co-branded portal and reports where contracted
  • Portfolio dashboard across managed clients
  • Partner commercial terms with volume bands
  • Managed Trace tenants with contract-defined enforcement scope
  • Consolidated monthly invoice where scoped
  • Partner onboarding and bulk policy propagation
  • Insurer and broker programs: underwriting context feeds, claims evidence context where scoped, and portfolio dashboards where contracted
Talk to a partner specialist
Annual prepay saves 15%

Standard and Professional are billed monthly or annually. Annual plans are invoiced upfront with a 15% discount.
Enterprise and above are annual contracts. All payment is by invoice and direct bank transfer.
APEXLyn does not take card details on the website and does not provide an instant online purchase flow.
All prices are in Australian dollars excluding GST.

Compare platform tiers

A detailed comparison of what each tier includes. This table shows Assurance Suite, toggle to see comparative features for other options.

Feature CapabilityStandardProfessionalEnterpriseSovereignGov / Bank
Allowances & Entitlements
Outcome packs included1 selectedUp to 3All contractedContract-definedContract-defined
Compliance reports per contract year81224Contract-definedContract-defined
AI governance reports per contract year4612Contract-definedContract-defined
Protected users included1050100Contract-definedContract-defined
RetentionTier-definedTier-definedContract-definedContract-definedContract-defined
Governance workflowsIncludedContract-definedContract-definedContract-defined
Legal holdAvailable where contractedContract-definedContract-defined
Chain-of-custody exportAvailable where contractedContract-definedContract-defined
Legal-review and eDiscovery packsAvailable where entitledContract-definedContract-defined
API / export and SAML / SCIMIncludedContract-definedContract-defined
Customer-managed encryption keyAvailable where contractedContract-definedContract-defined
Isolated deploymentContract-definedContract-defined
OnboardingAssistedAssistedEnterpriseControlledImplementation-led
SupportStandardPriorityDedicatedContract-definedContract-defined
Implementation from-priceBy selected viewBy selected viewBy selected viewContact salesContact sales

Add-ons, evidence packs, and services

Everything beyond your included tier scope is quoted clearly on your order form. Outcome packs included in your tier are part of your subscription and are not re-sold inside the same agreed scope. The items below are expansions beyond included scope, capacity increases, premium deliverables, or professional services produced on demand.

Group 1 — Premium evidence packs

Premium evidence packs are on-demand deliverables and do not draw from scheduled report allowances.

PackAvailabilityPrice ex GST
AI incident evidence pack (Trace)Professional and aboveFrom A$2,500 per pack
Audit-support framework pack (Trace)Professional and aboveFrom A$3,500 per pack
Regulator submission support pack (Trace)Enterprise and aboveFrom A$7,500 per pack
Legal-review evidence pack (Trace)Enterprise and aboveFrom A$10,000 per pack
eDiscovery / evidence review pack (Trace)Enterprise and aboveFrom A$15,000 per matter
Urgent Cyber Insurance Evidence Pack (Attest)Any Attest tierFrom A$10,000

Group 2 — Capacity and retention

ItemPrice ex GST
Additional Attest compliance report beyond allowanceFrom A$500 per report
Additional Trace governance report beyond allowanceFrom A$750 per report
Additional protected usersAt your tier’s per-user rate
84-month retention pack (Trace, Enterprise and above)20% subscription uplift, minimum A$10,000/year

Group 3 — Integration and control add-ons for Trace

These are add-ons beyond included scope.

ItemPrice ex GST
Additional SIEM / webhook destinationFrom A$500/month
Additional industry policy pack beyond included scopeFrom A$250/month
Additional Trace framework packFrom A$750/month
API Interceptor pack (Enterprise)From A$2,500/month
ICAP integration pack (Enterprise)From A$3,500/month
Internal / private LLM protection (Enterprise)From A$5,000/month
Customer-managed encryption keyFrom A$25,000/year

Group 4 — Legal hold and professional services

ItemPrice ex GST
Legal hold capabilityAvailable at Enterprise and above
Legal hold matter activationFrom A$5,000 per matter
Active matter preservationFrom A$750/month per matter
Essential Eight uplift: Level 1 → 2From A$25,000
Essential Eight uplift: Level 2 → 3From A$50,000
ISO 27001 implementation supportFrom A$75,000 – A$150,000
Audit support retainer, 6-month minimumFrom A$5,000/month
Custom framework developmentFrom A$100,000
Custom connector assessment / buildFrom A$15,000 / from A$50,000
Custom report templateFrom A$10,000
AI incident response evidence supportFrom A$10,000 per incident

Legal hold capability is entitlement-controlled. Matter activation and active preservation are service components that apply only when a matter is opened and scoped.

How buying APEXLyn works

Every APEXLyn deployment is scoped with a specialist. There is no anonymous purchase flow because evidence infrastructure deserves a precise fit, not a guess.

The process is:
30-minute scoping conversation → written quote, usually the same day for Standard and Professional where scope is clear → e-signed order form → tax invoice paid by bank transfer → assisted onboarding begins.

Small-organisation deployments can begin collecting evidence within days where scope, access, and onboarding are complete.

Billing & FAQ

Billing details

Standard and Professional plans are available with monthly or annual billing. Annual plans are billed upfront and include a 15% discount off the monthly rate. Enterprise and Sovereign plans are contract-based with custom billing schedules, including annual prepay, quarterly, and custom invoice arrangements. Government contracts support PO-referenced billing.
The primary billable unit is one protected named human user equals one billable seat. Service accounts, shared mailboxes, break-glass admin identities, dormant identities not assigned to the protection scope, and excluded non-human identities are not billable by default. Each plan includes a base number of seats. Additional seats beyond the included allocation are billed at the seat overage rate for that plan. Mid-term seat increases are prorated. Seat decreases are applied at the next renewal boundary.
Attest pricing is scoped to your organisation, including identities, systems, evidence sources, outcome packs, and reporting posture. Capabilities included in your tier or outcome pack do not cost extra within the agreed written scope. Your quote and order form state the agreed scope in writing.
Report allowances run per contract year, not financial year, and reset at each renewal. Additional Attest compliance reports are From A$500 per report. Additional Trace governance reports are From A$750 per report. Premium evidence packs are separate on-demand deliverables. They do not draw from scheduled report allowances and are priced per pack as listed in the add-ons section.
Plan upgrades are applied immediately. When you upgrade mid-term, the new plan takes effect right away and billing is prorated for the remainder of the current period. Plan downgrades are applied at the next term boundary. You retain access to your current plan features until the end of the current billing period, then transition to the new plan at renewal. Evidence collected under the higher plan remains in your tenant, downgrading does not delete historical evidence.
All prices displayed on this page are in Australian dollars (AUD) excluding GST. GST is applied as a separate line item on invoices for Australian customers. APEXLyn Pty Ltd is registered for GST. ABN: 58695750380.
Enterprise, Sovereign, and Government / Bank plans for Attest and Trace are contract-based. Contract terms include: annual contract value (ACV), included seat and protected user allocation, additional seat and protected user pricing, implementation fee where applicable, contract-specific entitlements, retention profile assignment, support profile assignment, invoice schedule, PO reference support, and renewal tracking. Contact our sales team to discuss contract terms.
Cancellation follows a structured offboarding process. After cancellation, your tenant enters a defined lifecycle: active through end of term, then read-only exit period for data export, then retained-only state where evidence is preserved according to your retention profile. Evidence is not deleted on cancellation, it is retained per your retention policy and any applicable legal hold. Offboarding does not destroy historical evidence, governance proof, or report verification continuity. Your historical reports remain verifiable through the verification endpoint even after your subscription ends, subject to retention policy. At contract end, customers receive one final standard-format evidence export per platform at no charge and 12 months of read-only access to historical reports.

Common questions

Attest and Trace are independent platforms. You can use either one alone or both together. Many organisations start with Attest for compliance evidence and add Trace later when AI governance becomes a priority. The platforms share the same tier structure and the same evidence architecture, so adding the second platform is straightforward. The Assurance Suite prices both platforms together at less than the two purchased separately.
Evidence collected under a higher plan remains in your tenant. Downgrading does not delete historical evidence or break your evidence chain. You retain read-only access to historical evidence and reports. Framework assessments that require features from the higher plan will show as not assessed on the lower plan, but the underlying evidence remains.
No. APEXLyn does not offer a free trial because evidence infrastructure must be assessed in a real operating environment, with real systems, real evidence sources, controlled access, and a defined scope. Instead, APEXLyn offers two pathways: • Baseline evidence-readiness intake — a short scoping review based on the information you submit, used to identify the most suitable next step. • Paid Proof of Capability — a scoped technical program for organisations that need live evidence collection, connector testing, technical validation, and deployment-fit assessment. The baseline intake does not include system scanning, connector deployment, live evidence collection, technical validation, or an audit-ready evidence report.
Because evidence is our product. Most vendors hide what a tier contains and what add-ons cost until deep in a sales cycle. APEXLyn makes the evaluation process clearer by publishing public tier inclusions, standard report allowances, implementation starting points, and standardised add-on pricing. Your order form confirms the exact scope, inclusions, add-ons, and commercial terms agreed for your deployment.
Every organisation’s assurance scope is different, and a mis-scoped deployment produces weak evidence. A 30-minute scoping conversation usually produces a same-day written quote for Standard and Professional where scope is clear. You always pay by invoice after scoping, not by instant card payment on the website.
Included reports are scheduled compliance and AI governance reports refreshed through the year according to your tier allowance. Premium evidence packs are one-time evidence deliverables prepared for a specific moment — an incident, an audit submission, a regulator-review request, or a legal matter. They are prepared with additional evidence handling, review, and export controls, priced per pack, and do not consume scheduled report allowance.
MSP Partners receive a single consolidated bill for all their managed client tenants. Billing is structured at the partner level with per-client accounting. Partner discounts and minimum-commit arrangements are available based on your total client count and growth plan. Your clients do not receive APEXLyn invoices, billing flows through you. APEXLyn does not publish or control partner retail pricing. Partner commercial terms are provided under agreement.
Yes. Government and bank programs are dedicated procurement-led pathways with implementation-led delivery, isolated or controlled deployment patterns where scoped, ASD ISM March 2026 framework support where contracted and PO-referenced or milestone billing. Regulated private-sector organisations are served under the Sovereign tier. Request documentation to begin.

Find the right plan for your organisation

Not sure which tier fits? A 30-minute scoping conversation usually answers it — and for Standard and Professional, your written quote can usually be issued the same day where scope is clear.