Priced per covered employee. Nothing else to count.
Two self-serve plans and an Enterprise plan. Every plan includes the browser extension, the desktop agent, discovery, licence utilisation and the AI usage report. Start with a 14-day trial of everything in Govern.
Monitor
See which AI tools your company uses.
- AI usage monitoring (browser extension and desktop agent)
- Sanction, warn on or block AI tools
- Shadow AI discovery (Google Workspace, Microsoft 365, Okta, GitHub, sensors, log import)
- AI system inventory
- Slack, Teams and webhook alerts
- Pseudonymous and anonymous identity modes
- AI licence utilisation and savings
- AI agent and MCP server discovery
- Employee AI hub: approved tools, requests, policy acknowledgement
- Up to 5 admin users
Govern
Most teams start hereMonitoring plus the assessments and documents auditors ask for.
- Framework assessments (EU AI Act, NIST AI RMF, ISO/IEC 42001, SOC 2, NYC LL144, Colorado SB 26-189)
- Regulation tracker with applicability to your systems
- Live regulatory intelligence feed
- Document generation with review and approval
- Jira remediation tickets
- Audit log export
- Single sign-on (OpenID Connect) and SCIM user provisioning
- Custom frameworks and controls
- Log export to SIEM (webhook, Splunk, Datadog)
- Security questionnaire answers, drafted from your records
- Public AI trust center
- AI incident register
- AI literacy course and completion tracking
- Up to 25 admin users
Enterprise
For large or regulated organizations.
- Self-hosted deployment
- Priority support and onboarding
- Unlimited admin users
Prices in US dollars, excluding tax. Single sign-on uses OpenID Connect (Okta, Microsoft Entra ID, Google Workspace and other compatible providers); SAML is not supported. Govern includes up to three custom frameworks. The desktop agent deploys by script; its installers are not yet code-signed.
AI Governance Starter: $1,500, one-off.
Thirty days of monitoring run by our team, a written AI usage report, an AI acceptable use policy and an employee monitoring notice, with a kickoff call and a findings call. It is not legal advice or a certification. At the end you choose Monitor or Govern, or stop.
What is in each plan
| Feature | Monitor | Govern | Enterprise |
|---|---|---|---|
| AI usage monitoring (browser extension and desktop agent) | Included | Included | Included |
| Sanction, warn on or block AI tools | Included | Included | Included |
| Shadow AI discovery (Google Workspace, Microsoft 365, Okta, GitHub, sensors, log import) | Included | Included | Included |
| AI system inventory | Included | Included | Included |
| Slack, Teams and webhook alerts | Included | Included | Included |
| Pseudonymous and anonymous identity modes | Included | Included | Included |
| AI licence utilisation and savings | Included | Included | Included |
| AI agent and MCP server discovery | Included | Included | Included |
| Framework assessments (EU AI Act, NIST AI RMF, ISO/IEC 42001, SOC 2, NYC LL144, Colorado SB 26-189) | Not included | Included | Included |
| Regulation tracker with applicability to your systems | Not included | Included | Included |
| Live regulatory intelligence feed | Not included | Included | Included |
| Document generation with review and approval | Not included | Included | Included |
| AI incident register | Not included | Included | Included |
| Jira remediation tickets | Not included | Included | Included |
| Audit log export | Not included | Included | Included |
| Single sign-on (OpenID Connect) and SCIM user provisioning | Not included | Included | Included |
| Custom frameworks and controls | Not included | Included | Included |
| Log export to SIEM (webhook, Splunk, Datadog) | Not included | Included | Included |
| Employee AI hub: approved tools, requests, policy acknowledgement | Included | Included | Included |
| AI literacy course and completion tracking | Not included | Included | Included |
| Public AI trust center | Not included | Included | Included |
| Security questionnaire answers, drafted from your records | Not included | Included | Included |
| Self-hosted deployment | Not included | Not included | Included |
| Priority support and onboarding | Not included | Not included | Included |
| Assessments per month | Not included | Unlimited | Unlimited |
| Generated documents per month | Not included | Unlimited | Unlimited |
| Admin users | 5 | 25 | Unlimited |
| Employees | 50 to 1,000 | 50 to 1,000 | 1,000+ |
- Covered employee
- A person reported by a sensor in the last 30 days, or your purchased seat count, whichever is higher. Devices and browsers are not counted separately.
- Trial
- 14 days with everything in Govern. A getting-started checklist takes you from connecting a discovery source and enrolling a device to generating documents and a first report, before you choose a plan.
- Enterprise
- For more than 1,000 employees, self-hosted deployment, or a procurement and security review. Talk to us.
Pricing questions
- What is a covered employee?
A person reported by a sensor in the last 30 days, or the seat count you purchased, whichever is higher. You are not charged per device: someone with a laptop and two browsers is one covered employee.
- How does the 14-day trial work?
You create a workspace and get every Govern feature for 14 days. No card is needed to start. A getting-started checklist on the dashboard walks you through the first steps, from connecting Google Workspace or Microsoft 365 and deploying the extension to one device, to downloading your first AI usage report, and ticks each one off as it detects it. When the trial ends you choose Monitor or Govern; until you do, the workspace is read-only.
- What is the difference between Monitor and Govern?
Monitor answers "which AI tools are in use, and are we paying for seats nobody uses": sensors, discovery through Google Workspace, Microsoft 365 and more, the inventory, tool policy and nudges, licence utilisation, AI agent and MCP server discovery, alerts, the AI usage report and the employee AI hub with tool requests and policy acknowledgement. Govern adds what you need to act on it and evidence it: framework assessments, custom frameworks, the regulation tracker and feed, document generation, drafted answers to security questionnaires, a public AI trust center, the AI incident register, the AI literacy course in the employee hub, Jira tickets, audit log export, single sign-on with SCIM user provisioning, and log export to your SIEM.
- How does annual billing work?
Annual billing is paid up front for twelve months and costs 20% less than paying monthly. The prices shown with the annual toggle are the monthly equivalent.
- What if our headcount changes?
You choose a seat count when you subscribe and can change it. If sensors report more people than you have seats for, we tell you before the additional seats are billed from the next billing date.
- Is there a minimum?
Self-serve plans start at 50 employees and go up to 1,000. Above that, or if you need self-hosting or procurement paperwork, the Enterprise plan is arranged with us directly.
- Can we host it ourselves?
Yes, on the Enterprise plan. The GhostAudit server runs as a container with a Postgres database on your infrastructure, and sensors report to your server only.
- Is there a way to start without a subscription?
Yes. The AI Governance Starter is a fixed-price engagement, $1,500 once: we run 30 days of monitoring and deliver a written AI usage report, an AI acceptable use policy and an employee monitoring notice, with a kickoff call and a findings call. At the end you choose a plan or stop.
- Do you support SAML single sign-on?
No. Single sign-on is part of Govern and Enterprise and uses OpenID Connect, which Okta, Microsoft Entra ID, Google Workspace and most other identity providers support. SAML is not available.
- Is SCIM provisioning included?
Yes, with single sign-on on Govern and Enterprise. SCIM 2.0 creates, updates and deactivates users from your identity provider, and a deactivated user is signed out immediately. It covers users only, not groups, and is set up as a custom SCIM application; see the security page.
- Do you work with managed service providers and consultants?
Yes. Providers who deliver AI governance to their clients get a partner console for all their client workspaces and earn a recurring margin on client subscriptions. Each client workspace is billed on the plans on this page. See partners.
- Do you offer pilots?
Yes. The trial is a pilot you can start yourself. For a larger evaluation with security review or a works-council process, talk to us and we will agree a pilot scope and period.
- SecurityHow the product handles data, for your security review.
- Privacy by designWhat the sensors collect, to share with employees.
- AI usage monitoringWhat every plan includes.
- Licence utilisationThe feature that can pay for the subscription.
- AI Governance StarterA fixed-price first month, delivered by our team.
- PartnersFor managed service providers and virtual CISOs.
Try everything in Govern for 14 days.
Start a 14-day trial with every Govern feature, connect one discovery source and enroll a handful of devices. No card is needed to start, and nobody is asked to change how they work.