Start with AI Governance. Add what you need.
Every plan is built on the AI Governance module. Your tier sets the depth, and you switch on the management modules — Risk, IT, Data — as you need them. Flat pricing per tier, never per seat.
Instant access · 15 days free · no credit card · nothing to cancel
AI Governance plus one management module — a real program in place.
- ✓ NIST AI RMF + ISO 42001 crosswalks
- ✓ Every U.S. state AI law, added as they pass — Colorado ADMT Act (SB 26-189), Colorado Chatbot Safety (HB 26-1263), Connecticut SB 5 (PA 26-15), Texas TRAIGA, California ADMT Regulations, Hawaii AI Acts (247 / 248)
- ✓ Plus specific statutes from 27 states via the U.S. state law landscape
- ✓ United States — federal law & state landscape (U.S. National)
- ✓ Risk register, impact assessments, incident log
- ✓ Cost tracking with 60-day renewal alerts
- ✓ Board report, governance badge, Trust Page
- ✓ Unlimited staff participants and attestations
- ✓ 10 admin seats
Growing programs with privacy obligations.
- ✓ Everything in Starter, plus ISO/IEC 42005 · CCPA · Canada · AI frameworks, standards & healthcare guidelines
- ✓ NIST SP 800-53 Rev. 5 / CSF 2.0 crosswalk
- ✓ Risk heat map
- ✓ Assessments auto-populate the risk register
- ✓ AI Strategic Plan, CAIO and Privacy Policy wizards
- ✓ Branded document exports
- ✓ Pay by card or ACH bank transfer
- ✓ 15 admin seats
Public agencies and regulated organizations. Buy the plan online, or get a written quote for a custom setup.
- ✓ Everything in Pro, plus the EU AI Act framework
- ✓ HIPAA and GDPR data-privacy frameworks
- ✓ Europe — EU regulation, UK, Switzerland, Norway
- ✓ Global — Americas, Middle East, Asia-Pacific & international (16 further countries + the international instruments)
- ✓ OMB M-25-21 / M-25-22 compliance pack
- ✓ Zero-trust agent checklist and scoring
- ✓ White-labeled Trust Page & badge, and Enterprise SSO
- ✓ Priority support and an advisory session
- ✓ Pay by card or ACH bank transfer
- ✓ 20 admin seats
Every plan includes AI Governance, multi-tenant security and an append-only audit log. Nonprofits save 20% on every plan, applied at checkout once status is confirmed. Not legal advice.
Want someone alongside you? GOVERNBOX.ai Advisory Services → publishes a fee for every engagement — working sessions, half-day module training, a guided program launch — so you never need a call to learn a number.
The more you add, the more you save
Every configuration includes AI Governance. Add Enterprise Risk, IT Inventory, and Data Management on top — each with its own scorecard, wizards, board-report chapter, and unlimited-signer attestations.
Monthly from $339/mo. The 15-day free trial is the way in.
Five programs, one shared graph
AI Governance runs through all four management programs, which is why it is in every plan rather than sold beside them.
Privacy
HIPAA, GDPR and CCPA — the duties AI stretched.
Included from ProEnterprise Risk
One register, six plain categories, named owners.
IT Inventory & Management
Every tool, asset and admin account, with a renewal date.
Data Management
What you hold, where it flows, how long you keep it.
AI runs through all four — so it’s the foundation, not a fifth box.
AI runs through all four below — it’s the foundation, not a fifth box.
Privacy
HIPAA, GDPR and CCPA — the duties AI stretched.
Included from ProEnterprise Risk
One register, six plain categories, named owners.
IT Inventory & Management
Every tool, asset and admin account, with a renewal date.
Data Management
What you hold, where it flows, how long you keep it.
Every plan is built on AI Governance. You switch on the management modules — Risk, IT, Data — as you need them, and Privacy comes with Pro and above (CCPA from Pro; GDPR and HIPAA on Agency). Price your configuration →
Pick a tier, switch on the modules
Platform spine
Every tier · every module- ✓Its own readiness scorecard
- ✓Guided document wizards
- ✓A dedicated chapter in your quarterly Board Report
- ✓Unlimited-signer attestations
- ✓Admin Console, append-only audit log & MFA
- ✦NIST AI RMF · ISO/IEC 42001 · all 6 dedicated U.S. state AI laws, plus specific statutes from 27 states (Colorado ADMT Act (SB 26-189), Colorado Chatbot Safety (HB 26-1263), Connecticut SB 5 (PA 26-15), Texas TRAIGA, California ADMT Regulations, Hawaii AI Acts (247 / 248)) · U.S. National (federal law & state landscape)
- ✦Risk register, impact assessments, incident log
- ✦Full quarterly Board Report + Governance Badge
- ✦Word + PDF export
- ✦10 admin seats
- ✦Monthly payment option available
- ✓Free AI Readiness Scorecard + gap report
- ✓AI Use Case Log — inventory every AI tool, incl. shadow AI (EU AI Act prohibited-use screen on Agency)
- ✓Grounded document generation — 11 policy & plan types, every clause cited to a control
- ✓AI Risk Register + 7-section Impact Assessments
- ✓AI Incident Log — severity codes (EU AI Act Art. 73 flag on Agency)
- ✓AI Agents inventory — 12-item zero-trust checklist
- ✓AI Cost Tracking & Roll-Up — 60-day renewal alerts, board totals
- ✓Training Plan + Employee Attestations — unlimited signers
- ✓AI Project Management — Kanban + 7-phase lifecycle checklist
- ✓Compliance Crosswalks — NIST AI RMF · ISO/IEC 42001 · all 6 dedicated U.S. state AI laws, plus specific statutes from 27 states · U.S. National, on five shelves (Frameworks / United States / EU / Canada / Global); more by tier
- ✓Quarterly Board Report — maturity score + history
- ✓Governance Badge + public Trust Page
- ✓Regulatory “What’s Changing” feed
- ✓Org-wide risk register — 6 plain-language categories
- ✓Guided risk discovery — draft register in ~30 minutes
- ✓One-page risk appetite statement
- ✓Treatments & actions with named owners
- ✓Simple KRIs — green / amber / red
- ✓Quarterly board risk report chapter
- ✓Your AI risk register becomes the ‘technology & AI’ category
Would rather not build it alone? GOVERNBOX.ai Advisory Services → publishes a fixed fee for every engagement, from a single working session to a guided program launch. Advisory is additive — the platform is designed to be run without it.
What’s covered on each plan
Each plan keeps everything below it and adds the frameworks listed. Free previews NIST AI RMF only. Every framework here is backed by controls in the library and verified on one of the crosswalk shelves (Frameworks / United States / European Union & Europe / Canada / Global).
- NIST AI RMF
- ISO/IEC 42001
- U.S. state AI laws (6 today — added as they pass)Colorado ADMT Act (SB 26-189) · Colorado Chatbot Safety (HB 26-1263) · Connecticut SB 5 (PA 26-15) · Texas TRAIGA · California ADMT Regulations · Hawaii AI Acts (247 / 248). The U.S. state law landscape framework additionally cites specific statutes from 27 states.
- United States — federal law & state landscapeFederal legislation, executive orders and agency regulation, plus a cross-state view of AI disclosure and training-data laws. Per-state statutes are the U.S. State AI Laws jurisdiction above.
- ISO/IEC 42005
- CCPA
- CanadaPIPEDA and provincial privacy law, the Directive on Automated Decision-Making, and the Canadian Human Rights Act as they apply to AI.
- AI frameworks, standards & healthcare guidelinesNIST profiles, ISO/IEC standards, IEEE, OECD and the healthcare AI reporting/assurance frameworks (FDA, WHO, CHAI, CONSORT-AI…).
- EU AI Act
- HIPAA
- GDPR
- Europe — EU regulation, UK, Switzerland, NorwayEU regulation beyond the AI Act itself (GPAI code of practice, guidance), plus the UK, Swiss and Norwegian frameworks. The EU AI Act and GDPR are not part of this unit — select each on its own under Laws & regulations below.
- Global — Americas, Middle East, Asia-Pacific & internationalSixteen further countries' AI laws and guidance plus the international instruments (Council of Europe, OECD, UNESCO, UN).
Jurisdictions (U.S. State Laws, U.S. National, Canada, AI Standards, Europe, Global) are each enabled as one unit on the Organization Profile; the standalone frameworks are chosen individually. New state laws are added as they pass. Not legal advice.
Where the tiers differ
Colorado readiness, before the clock runs out
SB 26-189 and HB 26-1263 take effect January 1, 2027. Starter and up include a dedicated Colorado crosswalk, so the work is grounded well ahead of the deadline.
Not ready to pick a plan?
Test drive GOVERNBOX free for fifteen days, then choose your modules.