Solutions The best route to security compliance
Platform A powerful suite of ISMS features
Resources Everything you need to know
Knowledge Base Learn more about infosec
Company Security and customers first
Back to Knowledge & Insights

Which Hicomply plan is best for your business?

Running a business is like running a marathon: you’re constantly on the move. With a seemingly never-ending to-do list, it’s all too easy for less urgent tasks to fall by the wayside. And for many businesses, this unfortunately includes cybersecurity.

But effective data protection is essential for today’s businesses, helping you avoid disaster, save on long-term costs, and improve your reputation with clients and customers alike. Accreditation is one of the clearest ways to showcase your business’s commitment to cybersecurity, and it seems businesses are finally beginning to prioritise its importance (the number of ISO 27001 certifications rose more than 22% between 2018 and 2022).

Hicomply: certification made easy

Despite these stats, the road to accreditation can still be a daunting one. This is where Hicomply comes in. Our leading ISMS software allows you to obtain, maintain, and manage all your information security certifications with ease, using a platform that does 90% of the work for you.

As well as providing a fast, simple route to certification, we also offer a range of plans and packages to suit businesses across all sizes and industries. Whether you’re just starting out on your cybersecurity journey, or you’re looking for the most stringent tools out there, we’ve got you covered.

Let’s take a closer look at the different Hicomply plans available, giving you the information you need to decide which is best for your business.


Our Starter plan is perfect for businesses at the beginning of their information security journey, helping to get started with many key certifications, including:

  • ISO/IEC 27001 2013 or 2022
  • SOC 2
  • UK NHS Data Security Protection Toolkit - DSPT
  • QMS & ESG ISO Pack: ISO 9001, ISO 14001, ISO 45001
  • Hicomply Privacy™ (GDPR)

The benefits and features of the Starter plan include:

  • Essential policy, procedure, and record bundle
  • An automated scoping tool
  • A controls matrix
  • Asset, task, and risk management
  • Record management
  • Staff compliance and training tracking
  • A customisable project library
  • HRIS system integrations
  • Helpdesk and ticketing integrations
  • Task and project management integrations
  • Mailbox integrations
  • Key automations

With the Starter plan, you can have up to two admin/contribution users and up to 20 viewer users. You’ll also benefit from external auditor access, auditor matching via our partner network, and online digital onboarding and training. With UK customer support, 24/7 access to the Hicomply platform, and the Hicomply Compliance Guide, you’ll be in a safe pair of hands.


For businesses who already have some level of cybersecurity in place, but would like to scale up their efforts and operations, the Professional plan is for you. You’ll have support with all the same key certifications as the Starter pack, as well as NIST SP 800-53, 800-37, 800-171, NIST CSF, and custom standards.

You’ll also enjoy all the features of the Starter pack, plus:

  • Both internal and external audit workflows
  • Multiple standard control mapping
  • Hicomply Asset Engine™ - an intelligent asset library
  • Hicomply Risk Engine™ - a dynamic risk library
  • Our ISO statement of applicability (SOA) builder and report
  • Comprehensive vendor risk assessment
  • A security training module

With the Professional plan, you can have 3+ admin/contributor users and 20+ viewing users. You’ll enjoy all the support of the Starter plan, plus UK dedicated one-to-one CSM onboarding and training, and UK ISO-certified Lead Implementor support.


Finally, we have our Enterprise plan, which offers the best of the best for businesses who want comprehensive support across the full suite of certification.

You’ll receive accreditation support for all standards under the Professional plan, as well as:

  • UK Gambling Commission
  • FedRAMP
  • DORA
  • UK NCSC Standards
  • ISO 27701, 27017, 27018
  • More custom standards

You’ll also receive all the features of the Professional plan, plus:

  • A full GRC feature set
  • Our Continuous Controls Monitor
  • Hicomply Trust Centre access
  • Organisation-wide compliance, including parent-child setup
  • A full language customisation pack
  • White labelling and company branding
  • Advanced risk management features
  • Advanced automations
  • File and document management integrations, such as Dropbox, Google Docs, and SharePoint

Your admin/contributor and viewer users will all be specific to your plan, and you’ll receive all the benefits of the Professional plan and more. Wherever your business finds itself on its information security journey, Hicomply is on hand to give you the support you need, on a scale that suits your budget.

Not currently using Hicomply? Ready to find out more about what the platform can do for you? Book a demo.

More Insights

Helping organisations stay strong and drive…
Choosing the right certification standard for…
Transferable compliance: going for further…