A baseline posture scan on day one, then your compliance paperwork kept current month-to-month. We draft your nine §314.4 documents from real shop info, store them in your dashboard, and run the breach-notification workflow if you ever need it. No AV bundle, no annual commitment.
| Feature | Included$129 / mo |
|---|---|
| Program & documentation | |
| Written WISP §314.3Information security program tailored to your shop. | ● |
| Risk assessment §314.4(b)Documented inventory of where customer data lives. | ● |
| Service provider inventory §314.4(f)Vendor list with addendum status, periodic review. | ● |
| Data disposal policy §314.4(c)(6)Written schedule for paper, drives, retired PCs. | ● |
| Personnel training roster §314.4(e)15-min training, dated, employee-by-employee. | ● |
| Incident response plan §314.4(h)Written runbook with phone tree and timelines. | ● |
| Annual QI report §314.4(i)Board-ready summary of program status and changes. | ● |
| Dashboard & ongoing tools | |
| Document review agentUpload your existing docs (WISP, IRP, etc.); we flag what's missing. | ● |
| Breach response toolNC §75-65 consumer letters, AG notification, 30-day timeline. | ● |
| Annual re-attestation workflowReminder, guided checklist, signed sign-off. | ● |
| Audit logEvery edit, attestation, and event timestamped. Exportable. | ● |
| Periodic on-site posture re-scanSame scanner used in your $299.99 baseline visit. | ● |
| What's not bundled | |
| Endpoint AVBring your own. We audit your setup as part of the scan and call out gaps; we do not sell or install AV. | — |
| Legal adviceWe are not a law firm. Our docs are templates; bring your attorney into anything regulator-facing. | — |