Editorial standards

Who we are

Cost of Compliance is an independent team researching the real costs businesses face when they take on security compliance work. We have no vendor sponsorships, we take no referral fees, and we never resell reader details as sales leads.

How we build estimates

Our figures come from published pricing, vendor list prices, public procurement data and figures reported by practitioners who have bought or delivered the work. We model these as ranges, not quotes, because real prices move with scope, region and timing. The full formulas are on the methodology page.

How often we update

Every page is reviewed at least once a quarter. Each calculator, guide and comparison shows the month it was last reviewed directly below its title.

Corrections

If you spot an outdated or wrong figure, tell us through the contact page. We review every report and update the page within 14 days when the evidence supports a change.

Independence

The site is funded by clearly labelled display advertising. No advertiser influences any estimate, ranking or comparison, and advertisers never see our content before it is published.