Pricing

Compliance management software pricing

One licence, three onboarding packages

Keep every policy, SOP and controlled document current in Microsoft 365, and prove it whenever you're asked. You pay an annual licence based on the people who need access, plus a fixed-price onboarding package in year one. From year two, it's licence only.

How much does compliance management software cost?

Enterprise GRC suites charge for risk, audit and vendor modules most organisations never use. Plain SharePoint looks free - until your team spends every audit chasing reviews and assembling evidence by hand. Xoralia gives you the compliance capability without either cost. LifeArc went live in three days ahead of an ISO 27001 audit.

Annual licence

One licence, the full platform

Priced by the people who need access, from under 50 to enterprise scale.

  • Unlimited policies, SOPs and controlled documents
  • The full platform - no modules to add or unlock
  • Your documents stay in your own Microsoft 365
  • Staff read and attest, while owners and admins run reviews, approvals and reporting
  • Support, customer success and updates included

Policies you publish to your public website don't need a licence to read. AI search is set up through the Intelligent package.

How most customers buy

Lock in your price for three years

One agreement, three annual payments that fit your budget cycle - and your cost drops after year one.

  • No price increase during the term
  • Onboarding paid once, in year one
  • Years two and three are licence only

12-month agreements and upfront payment are also available. Not-for-profit discounts available - just ask.

Ways to get started

Not ready to commit? Three low-risk ways to start

  • See it in under 3 minutes

    A quick overview of how Xoralia handles reviews, attestation and audit evidence - watch it whenever suits you.

  • Try it free for two weeks

    Get hands-on with Xoralia before you commit.

  • Or sign with a 90-day cooling-off period

    Available on 12 and 36-month agreements. If Xoralia is not right for you within the first 90 days, you can exit and pay only for onboarding and those three months of licence.

Return on investment

Is compliance management software worth the cost?

Yes, for most regulated organisations it pays for itself in time saved before you count the risk it removes. Manual compliance is not free - it is paid for in hours spent chasing, searching and assembling evidence, and in the exposure when something is missed. A single compliance failure - a fine, a legal claim or reputational damage - can cost far more than three years of Xoralia.

  • Reduce risk

    Close the gaps before an auditor or regulator finds them.

    A missed review or an out-of-date SOP can mean fines, failed audits and lost certifications.

    • The right people read the current version, reviews are flagged before they lapse and old documents are retired
    • Regulation changes are published and tracked to completion in days, not months
  • Save time

    Stop chasing, start running compliance.

    Compliance teams lose hours every week to reminders, spreadsheets and manual reports.

    • Assignment, reminders, escalation and reporting run automatically
    • Staff find the current version in Teams or SharePoint in seconds
    • New starters get the right documents on day one
  • Prove control

    Show the evidence, not just the intention.

    Whoever is accountable for compliance needs to prove it's under control - to everyone who asks.

    • Your board and risk committee see live compliance status, not a report pulled together the week before
    • Auditors and regulators get the evidence in minutes, not days
    • Clients and prospects get fast, confident answers to due diligence, supplier questionnaires and tenders
    • HR and legal can show a policy was read when it matters

As your organisation adopts Copilot and other AI tools, approved and attested documents become the trusted source they should answer from - not an old copy in someone's OneDrive.

The cost of getting it wrong

  • Health and social care

    CQC has cited policies with no creation or review date as a good governance breach, and governance breaches can lead to warning notices, an inadequate rating and special measures.

    Source: CQC, Regulation 17 good governance

  • ISO certification

    Out-of-date documentation is one of the most common audit findings, and a major nonconformity can delay certification by weeks or months.

    Source: GLOCERT International

G2 Best Estimated ROI - Mid-market
Rated highly for ROI on G2
4 months
Average payback period
0
Would recommend
3 days
LifeArc went live

Which onboarding package is right for you?

Every package gets you live on the same full platform. The difference is how much support you want along the way, and whether you want Xoralia's AI and advanced features set up from the start.

“Every organisation comes to us at a different starting point. Some already have SharePoint in good shape and just need a product to run the lifecycle and attestations. Others are leaving a platform that never quite worked, or still managing policies from Excel and email, and want us alongside them. We built the packages around those differences - so you buy the help you need, and no more.”

Kirsty Dale
Kirsty Dale
Managing director, Content Formula

Fixed-price and paid once, in year one alongside your licence.

You know SharePoint and want to lead the setup

Launch

You lead, we guide

Your team sets Xoralia up at its own pace, with our experts on hand at the key moments. We make sure your SharePoint is ready for policies, then give you the training and check-ins to get live with confidence.

  • Expert calls to plan your setup and optimise your SharePoint
  • Step-by-step on-demand video training to work through at your own pace
  • Customer success calls to answer questions and keep you on track
Most popular

You're moving from another platform, new to SharePoint, or want more support

Guided

We work through it with you

Our consultants work alongside your team in live sessions, taking on key steps with you so nothing stalls. By go-live, the people running Xoralia are confident doing it themselves.

  • Everything in Launch, plus:
  • Live working sessions with our consultants, from kick-off to go-live
  • Permissions, targeting and workflows set up with you
  • Your admins and key stakeholders confident running Xoralia day to day

You want AI and advanced features working from day one

Intelligent

We make Xoralia work smarter for you

We set up Xoralia's advanced capabilities for your organisation, so staff get instant answers, your documents are structured around your regulations, and AI tools draw on your approved content.

  • Everything in Guided, plus:
  • AI search set up so staff get instant answers to policy questions
  • Xoralia structured and tagged to your regulations and standards
  • Copilot guidance and public website publishing, where applicable

AI search runs on Azure in your own Microsoft environment, with an ongoing Azure cost. Copilot drafting needs a Copilot for Microsoft 365 licence.

Need something different?

Large-scale migration from a legacy platform, multi-entity or multi-language rollouts, ongoing SharePoint support or a fully led programme - talk to the Content Formula consultants who build and maintain Xoralia, Microsoft 365 specialists since 2005.

What's included with every Xoralia licence

Whichever package you choose, the product is the same. Every licence includes the full compliance management platform below. AI search is the only capability that needs the Intelligent package, because it is configured for your environment.

  • Control

    Only the current, approved version is ever in use.

    • Controlled document lifecycleDraft, approve, publish, review and retire, with multi-stage and parallel approvals built around your governance.
    • Version control and accessEvery version kept with its approval history. Evergreen links always open the current version, and you decide what can be downloaded.
  • Evidence

    Proof for your auditor, board or regulator, ready when they ask.

    • Compliance dashboardA live, organisation-wide view of attestation and review status by team, site or region, with orphaned documents flagged.
    • Timestamped audit trailEvery approval, version change and attestation recorded by employee, version and date, and exported for your auditor in minutes.
    • API and webhooksSend attestation records to your HR system, LMS or reporting tools, so the evidence sits where you need it.
  • Competency

    Proof people understood it, not just opened it.

    • Mandatory reads and attestationAssign documents to the people who must follow them, with automated reminders and escalation until everyone has completed.
    • Competency checksAI-generated questions with a pass mark, approved by the policy owner before use. Results feed your compliance record. Opt-in.
    • Declarations of interestConflicts of interest and other declarations recorded alongside the policies they relate to, in the same audit record.
  • Distribution

    The right documents reach the right people, wherever they work.

    • Entra ID targetingDocuments assigned automatically by group, role or location, so new starters get the right set on day one. Global policies with local variants mean people only see what applies to them.
    • Teams app and 20+ web partsStaff read, search and attest in Microsoft Teams, your intranet and department hubs. No separate portal and nothing custom to build.

Underneath these

Built for Microsoft 365. Your policy content and version history stay in your own SharePoint, under your security and retention controls. Attestation and audit records are held by Xoralia in the region you choose - UK, US, Canada, Middle East or Australasia.

Rated 4.6 out of 5 on G2

Badges are awarded each season from verified customer reviews, not paid placement - so they reflect what customers say about buying, implementing and using Xoralia.

  • G2 High Performer - Policy management, Summer 2026

    High Performer - Policy management, Summer 2026

  • G2 High Performer - Governance, risk and compliance, Summer 2026

    High Performer - Governance, risk and compliance, Summer 2026

  • G2 Best Estimated ROI - Mid-market

    Best Estimated ROI - rated highly for return on investment, mid-market

  • G2 Fastest Implementation - Mid-market

    Fastest Implementation - rated highly for time to go live, mid-market

  • G2 Easiest To Use

    Easiest To Use - rated highly for ease of use by employees and admins

  • G2 Easiest To Do Business With

    Easiest To Do Business With - rated highly for quoting, contracting and onboarding

  • G2

    G2 review

    Improved efficiency and compliance with Xoralia

    “Xoralia has improved the way we handle, distribute, and track policies and procedures within our organisation. Not only does it allow us to save a lot of time, but it has helped us also to maintain and track compliance. Currently, we have a 99% attestation rate.”

    Boyum IT logo

    Nadja Boyum

    VP Marketing & HR · Boyum IT

  • G2

    G2 review

    Smooth rollout in achieving regulatory approval

    “Gama Aviation has implemented Xoralia in a number of areas in our business. It's one of the few systems we've adopted without any teething issues. Most recently Xoralia has been a key part of our regulatory process approved by the aviation authority in one of the countries where we operate.”

    Daniel Tee

    Chief Information Officer · Gama Aviation

  • G2

    G2 review

    Real value to our business in a short space of time

    “Working in a highly regulated financial services sector, we are required to ensure that our staff fully understand certain policies and Xoralia enables us to do that with an embedded quiz as part of the attestation.”

    Anonymous

    Financial services

How can I buy Xoralia?

Through whichever procurement route suits your organisation. Quoted in GBP, USD, EUR, CAD, AUD, NZD or CHF.

  • Microsoft Marketplace

    A private offer tailored to your user band and package, issued to your tenant. MACC eligible, so you can use your Azure committed spend.

Procurement pack: SAASA and DPA

Frequently asked questions about compliance management software pricing

Who counts as a user?
Anyone who needs access to Xoralia - to read, attest to, draft, approve or manage policies and controlled documents. That is usually your full employee count, plus any contractors or volunteers with an account in your Microsoft 365 tenant. External visitors reading policies on your public website are not counted. Your price is based on users, not on how many policies, documents or admins you have.
Can I try Xoralia before I commit?
Yes, in two ways. You can start a 2-week free trial for hands-on access. Or, if you would rather go straight to a proper rollout, sign a 12 or 36-month agreement with a 90-day cooling-off period - if Xoralia is not right for you within 90 days, you exit and pay only for onboarding and those three months of licence.
Do I have to take an onboarding package?
Yes - every new customer takes one, so Xoralia is installed and configured properly in your tenant. It is a one-time purchase in year one only. If you have a SharePoint admin comfortable with Entra ID groups and your policies are already organised, Launch is usually enough. If you are moving from another tool or your compliance team will own Xoralia day to day, choose Guided. If you want AI search, Copilot drafting or framework mapping from the first week, choose Intelligent. We are happy to recommend on a call.
Are there any costs beyond the Xoralia licence?
Only two, and both are on your Microsoft bill rather than ours. Xoralia AI search runs on Azure in your own environment, so once configured there is an ongoing Azure consumption cost. Drafting with Copilot needs a Copilot for Microsoft 365 licence for each person using it. AI Quiz Builder is included in the licence at no extra cost.
What contract lengths do you offer, and what happens at renewal?
Most customers take a 3-year agreement paid annually, with the licence price locked for the term. 12-month agreements and upfront payment are also available, and not-for-profit discounts are offered. From year two you pay the licence only, so renewals are lower than your first-year investment.
Where is my data held?
Your policy content and version history stay in your own Microsoft 365 tenant. Attestation and assignment records are held by Xoralia in the region you choose - UK, US, Canada, Middle East or Australasia. AI Quiz Builder is opt-in and processes content in our UK Azure environment. AI search runs entirely within your own environment and only returns results the user already has permission to see.
Can I upgrade my package or add services later?
Yes. If you start with Launch and later want AI search configured or a framework mapping exercise, we scope it as follow-on work. Additional training can be added at any time, and the same team can help more widely with your SharePoint estate, intranet or Microsoft 365 and AI adoption.

See it for yourself

Book a 30-minute demo. We will walk you through the product, confirm pricing for your user band and help you pick the right onboarding package. We respond within 1 working day.