{
  "license": "Free to cite with attribution to GRC Migrate (grcmigrate.com)",
  "canonical": "https://grcmigrate.com/data/grc-pricing-benchmarks.json",
  "description": "Independently collected GRC platform pricing benchmarks — no vendor funding. Figures are publicly reported ranges and procurement transaction data (Vendr and aggregators citing it), audited July 2026 (contract-terms entries re-verified July 5, 2026). Vendors publish no list prices; treat these as reported bands, not official prices.",
  "independence": "GRC Migrate is paid flat referral fees by vetted service firms only when an introduction is accepted — never by software vendors.",
  "as_of": "2026-07",
  "records": [
    {
      "vendor": "Vanta",
      "metric": "entry_annual_price",
      "value_low": 10000,
      "value_high": 12000,
      "unit": "USD/year",
      "basis": "publicly reported",
      "population": "single framework, sub-50 employees",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Vanta",
      "metric": "entry_annual_price_low_reports",
      "value_low": 7500,
      "value_high": 7500,
      "unit": "USD/year",
      "basis": "publicly reported (low-end reports)",
      "population": "single framework, sub-50 employees",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Vanta",
      "metric": "median_annual_spend",
      "value_low": 20000,
      "value_high": 20000,
      "unit": "USD/year",
      "basis": "Vendr transaction data (320 purchases)",
      "population": "all buyers",
      "as_of": "2026-07",
      "confidence": "transaction_median"
    },
    {
      "vendor": "Vanta",
      "metric": "midmarket_annual_price",
      "value_low": 30000,
      "value_high": 70000,
      "unit": "USD/year",
      "basis": "Vendr transaction data",
      "population": "2–3 frameworks, 50–200 employees",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Vanta",
      "metric": "large_org_annual_price",
      "value_low": 60000,
      "value_high": 120000,
      "unit": "USD/year",
      "basis": "Vendr transaction data",
      "population": "3–5 frameworks, larger organizations",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Vanta",
      "metric": "addon_vendor_risk_management",
      "value_low": 11200,
      "value_high": 11200,
      "unit": "USD/year",
      "basis": "procurement reports",
      "population": "add-on module",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Vanta",
      "metric": "addon_trust_center",
      "value_low": 6000,
      "value_high": 6000,
      "unit": "USD/year",
      "basis": "procurement reports",
      "population": "add-on module",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Vanta",
      "metric": "addon_additional_framework",
      "value_low": 5000,
      "value_high": 5000,
      "unit": "USD/year",
      "basis": "procurement reports",
      "population": "per additional framework",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Vanta",
      "metric": "renewal_year2_increase",
      "value_low": 20,
      "value_high": 50,
      "unit": "percent",
      "basis": "publicly reported customer reports",
      "population": "observed year-two TOTAL vs year one — combines contract escalator, first-year discount roll-off, and scope additions; some customers report 30–40% YoY",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Vanta",
      "metric": "auto_renewal_notice_days",
      "value_low": 30,
      "value_high": 30,
      "unit": "days written notice",
      "basis": "Vanta Master Subscription Agreement (vanta.com/legal/terms)",
      "population": "subscriptions auto-renew for successive one-year periods unless written notice is given 30+ days before the period ends",
      "as_of": "2026-07",
      "confidence": "vendor_terms"
    },
    {
      "vendor": "Vanta",
      "metric": "renewal_uplift_standard_contract_terms",
      "value_low": 10,
      "value_high": 10,
      "unit": "percent (up to)",
      "basis": "Vendr buyer transaction reports",
      "population": "standard contract language commonly includes up-to-10% annual price-increase/renewal-uplift terms — contract-language pattern, not a vendor-stated policy",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Vanta",
      "metric": "renewal_uplift_negotiated",
      "value_low": 3,
      "value_high": 7,
      "unit": "percent",
      "basis": "Vendr buyer transaction reports",
      "population": "buyers report negotiating the uplift term to 3–7% (5% is a common landing point in those reports)",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Vanta",
      "metric": "renewal_quote_increase_absent_renegotiation",
      "value_low": 10,
      "value_high": 20,
      "unit": "percent",
      "basis": "Vendr buyer transaction reports",
      "population": "renewal quotes commonly arrive 10–20% higher absent proactive renegotiation — distinct from observed year-two totals",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Drata",
      "metric": "foundation_tier_annual_price",
      "value_low": 7500,
      "value_high": 15000,
      "unit": "USD/year",
      "basis": "publicly reported",
      "population": "Foundation tier — one framework, up to ~50 employees",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Drata",
      "metric": "advanced_tier_annual_price",
      "value_low": 15000,
      "value_high": 25000,
      "unit": "USD/year",
      "basis": "publicly reported",
      "population": "Advanced tier — 2–3 frameworks; reported up to ~$50,000 at scale",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Drata",
      "metric": "enterprise_tier_annual_price",
      "value_low": 25000,
      "value_high": 100000,
      "unit": "USD/year",
      "basis": "publicly reported",
      "population": "Enterprise tier — open-ended above the high value",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Drata",
      "metric": "median_annual_spend",
      "value_low": 25000,
      "value_high": 25000,
      "unit": "USD/year",
      "basis": "Vendr transaction data",
      "population": "all buyers; average contract ~$34,000",
      "as_of": "2026-07",
      "confidence": "transaction_median"
    },
    {
      "vendor": "Drata",
      "metric": "typical_buyer_range",
      "value_low": 10000,
      "value_high": 45000,
      "unit": "USD/year",
      "basis": "Vendr transaction data (reported deals $10,250–42,750)",
      "population": "most buyers",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Drata",
      "metric": "addon_additional_framework",
      "value_low": 1500,
      "value_high": 7500,
      "unit": "USD/year",
      "basis": "publicly reported",
      "population": "per additional framework; reports up to $10,000 at enterprise scope",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Drata",
      "metric": "implementation_onboarding",
      "value_low": 5000,
      "value_high": 25000,
      "unit": "USD one-time",
      "basis": "publicly reported",
      "population": "billed separately from subscription; often not disclosed upfront",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Drata",
      "metric": "renewal_baseline_escalator",
      "value_low": 5,
      "value_high": 20,
      "unit": "percent",
      "basis": "publicly reported customer reports",
      "population": "baseline annual escalator",
      "as_of": "2026-07",
      "confidence": "reported_range"
    },
    {
      "vendor": "Drata",
      "metric": "renewal_year2_jump_scope_expansion",
      "value_low": 30,
      "value_high": 50,
      "unit": "percent",
      "basis": "publicly reported customer reports",
      "population": "year-two jumps when scope expanded mid-contract",
      "as_of": "2026-07",
      "confidence": "reported_range"
    }
  ],
  "positioning": [
    {
      "vendor": "Sprinto",
      "note": "commonly positioned as a lower-cost entry point in the category, generally quoting below Vanta and Drata on price — quotes are custom and no verified dollar benchmark has been collected. Qualitative context only, not a sourced figure.",
      "basis": "GRC Migrate independent alternatives analysis (reviewed), grcmigrate.com/sprinto-alternatives/",
      "as_of": "2026-07"
    },
    {
      "vendor": "Secureframe",
      "note": "commonly positioned as a challenger to Vanta and Drata competing on a meaningfully lower price — quotes are custom and no verified dollar benchmark has been collected. Qualitative context only, not a sourced figure.",
      "basis": "GRC Migrate independent alternatives analysis (reviewed), grcmigrate.com/secureframe-alternatives/",
      "as_of": "2026-07"
    }
  ]
}