# Sprinto Plans and Feature Comparison

Sprinto offers four subscription plans tailored to the compliance maturity and needs of different teams. Each plan unlocks a set of capabilities designed to help organisations automate compliance workflows, scale governance programs, and maintain continuous readiness for audits.

Whether you are just beginning your compliance journey or managing multiple GRC frameworks across business units, Sprinto provides the right mix of automation, visibility, and control.

***

### **Available Plans**

<table><thead><tr><th width="120.4296875">Plan</th><th>Best Suited For</th><th>Key Highlights</th></tr></thead><tbody><tr><td><strong>Starter</strong></td><td>Small founder-led teams starting their compliance journey.</td><td>Includes a standard control framework, core integrations, guided setup, standard policy and audit management, and email-based support.</td></tr><tr><td><strong>Professional</strong></td><td>Technology teams that want to do more with less and manage multiple compliance programs.</td><td>Adds automation, advanced SLAs, vendor management, and enhanced task and risk handling.</td></tr><tr><td><strong>Advanced</strong></td><td>CISO-led teams building a mature GRC practice within their organisation.</td><td>Introduces SAML/SSO, bring-your-own-framework capability, advanced reporting, role-based access, risk management enhancements, and security questionnaires.</td></tr><tr><td><strong>Enterprise</strong></td><td>Large CISO-led teams running multiple GRC programs across departments.</td><td>Includes everything from Advanced plus “Zones” for multi-entity management and tailored compliance environments.</td></tr></tbody></table>

***

### **Feature Comparison Table**

The table below outlines feature availability across the four Sprinto plans.

<table><thead><tr><th width="143.890625">Category</th><th width="181.8125">Feature</th><th width="102.73828125">Starter</th><th width="133.2109375">Professional</th><th width="114.4453125">Advanced</th><th>Enterprise</th></tr></thead><tbody><tr><td><strong>Login &#x26; Access</strong></td><td>Standard login</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>SSO via WorkOS</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td><strong>People</strong></td><td>Manually add/edit staff</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Import from HRMS or ID provider</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Automatic classification of staff</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Employee offboarding workflow</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Create org chart in Sprinto</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Upload org chart</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Create org roles and responsibilities</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Add custom roles and responsibilities</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Import roles from HRMS</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Upload background verification</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Integrate with background verification providers</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Upload hiring evaluation</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Advanced staff classification</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td><strong>Policies</strong></td><td>Ready-to-use policy templates</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Policy approval workflows</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Policy version history</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Enable/disable policies</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Document approval workflows</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Custom policy acknowledgements</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Delegated policy ownership</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Policy campaigns by employee group</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Custom policy creation and editor</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Custom document builder</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Upload policy and procedure documents</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Sync policies from external providers</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td><strong>Trainings</strong></td><td>Ready-to-use trainings and tests</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Integration with training providers</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Training campaigns by employee groups</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Upload custom training content</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td><strong>Risks</strong></td><td>Upload custom risk assessment</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Ready-to-use risk register</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>ISO 27005-compliant risk management</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Risk-control mapping</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Periodic risk assessment</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Delegate risk ownership</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Create tasks for risk treatment</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Continuous risk monitoring</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Asset-based risk assessment</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Risk approval workflow</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Customisable risk scale</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Risk custom visualisation</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td><strong>Vendors</strong></td><td>Add/manage vendors</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Periodic vendor assessment</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Automated vendor discovery</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Delegate vendor admin</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Customise vendor risk scoring</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Breach monitoring</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Vendor security questionnaire</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Custom fields</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td><strong>Access</strong></td><td>Add/manage critical systems</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Smart recommendations</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Role-based access validation</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Login protection monitoring</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Access revocation for offboarding</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Critical system access review</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Ticket-based access validation</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Access via IAM tools (Okta)</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td><strong>Vulnerabilities</strong></td><td>Integrate with detection systems</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>SLA monitoring</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Pen test tracking</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Delegate vulnerability ownership</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td><strong>Infrastructure</strong></td><td>Infrastructure monitoring</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Capacity monitoring</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Create CloudWatch alarms</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Delegate Infra system owner</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td><strong>Staff Devices</strong></td><td>Automated device reporting</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Integration with MDM tools</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Configure MDM per staff type</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td><strong>Audits</strong></td><td>End-to-end audit management</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Audit access management</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Internal audit management</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Control-level auditor collaboration</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Automated evidence collection</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Bring your own auditor</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Shareable audit report</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Request evidence for ERL audits</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td><strong>Trust Center</strong></td><td>Public and private profiles</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Domain-hosted profiles</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Real-time monitoring</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>CRM-Salesforce integration</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td></td><td>DocuSign NDA</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Multiple trust profiles</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td><strong>Support</strong></td><td>24/5 email support</td><td>✓</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>In-app chat support</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Slack-based support</td><td>✗</td><td>✗</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Dedicated CSM</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td></td><td>Priority email support</td><td>✗</td><td>✓</td><td>✓</td><td>✓</td></tr><tr><td><strong>Zones</strong></td><td>Multi-zone management</td><td>✗</td><td>✗</td><td>✗</td><td>✓</td></tr></tbody></table>

***

### **How to View or Change Your Plan**

1. Log in to Sprinto with your admin credentials.
2. From the left navigation menu, select **Settings → Plans**.
3. Your current plan will be highlighted under the **Plans** tab.
4. To upgrade, contact your Customer Success Manager or click **Upgrade Plan**.
5. Changes are reflected immediately upon confirmation from the Sprinto team.

***

### **FAQs**

**1. Can I upgrade my plan at any time?**\
Yes. You can upgrade at any time. Feature access changes take effect once the new plan is activated.

**2. Will my data remain intact after upgrading?**\
Yes. All configurations, integrations, and data remain intact during plan transitions.

**3. Are plans billed monthly or annually?**\
Sprinto offers both billing options. Contact your account representative to switch cycles.

**4. Can I customise features in my plan?**\
Customisations can be discussed with your CSM based on organisational requirements.

**5. Does the Enterprise plan support multiple compliance frameworks?**\
Yes. The Enterprise plan includes Zones and multi-framework management.

***

### **Glossary**

<table><thead><tr><th width="106.0390625">Term</th><th>Description</th></tr></thead><tbody><tr><td><strong>Zone</strong></td><td>A segregated environment to manage compliance programs across business units.</td></tr><tr><td><strong>CSM</strong></td><td>Customer Success Manager, your point of contact for plan and account management.</td></tr><tr><td><strong>SLA</strong></td><td>Service Level Agreement defining response and resolution times.</td></tr><tr><td><strong>ERL Audit</strong></td><td>Evidence Requirement List audit — a structured evidence-based review process.</td></tr><tr><td><strong>MDM</strong></td><td>Mobile Device Management — software to manage and secure staff devices.</td></tr></tbody></table>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.sprinto.com/settings/billing/sprinto-plans-and-feature-comparison.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.