Legal
Plans, Billing and Your Data
Effective date: September 20, 2026
This page covers what you are buying, what it costs, how to stop paying for it, and what happens to your data if you do. It is written to be read rather than skimmed past. If anything here is unclear, ask us before you buy — we would rather answer the question than have you find out later.
1. Plans
What the tiers are
Sprala is sold in three plans. Entry ($499/month) covers SOC 2. Growth ($999/month) adds ISO/IEC 27001, HIPAA, PCI DSS 4.0 and NIST CSF 2.0. Regulated ($2,499/month) adds CMMC 2.0 Level 2 and FedRAMP Moderate.
Plans differ by framework, not by feature
Every plan includes all 13 integrations, every automated check available to your frameworks, every Ora AI feature, unlimited users in your workspace, the evidence vault, policy management, the auditor portal and PDF export. We do not hold capability back to force an upgrade.
Founding members
The first 20 customers receive 50% off any plan for their first 24 months, on monthly or annual billing. After that the plan renews at the then-current published price. We will tell you before that happens.
2. Billing, cancellation and refunds
Monthly
No contract. You are billed each month and can cancel at any time from your workspace settings. Cancellation takes effect at the end of the billing period you have already paid for; we do not pro-rate a partial month.
Annual
Annual billing is a 12-month commitment, charged up front, and is discounted to the equivalent of ten months. It does not auto-cancel; it renews annually unless you tell us otherwise before the renewal date.
The 30-day refund
If you pay annually and decide within 30 days of your payment that Sprala is not right for you, tell us and we will refund the payment in full. Not pro-rated, not a credit — the money goes back. After 30 days the annual term runs to its end. Where a founding discount applied, the refund is of the amount you actually paid.
No hidden charges
There is no setup fee, no onboarding fee, no per-seat charge, and no minimum seat count. The price on the pricing page is the price.
3. Your data if you downgrade or leave
We do not paywall work you have already done
If you move to a plan that no longer includes a framework you were using, that framework becomes read-only. You keep access to everything you created in it: your attestations, your uploaded evidence, your policies, and an export of the report as it stood. You can still download your own files.
What stops
We stop updating that framework, so its results, its compliance score, and any derived artifact (including the ISO Statement of Applicability and the CMMC SPRS estimate) freeze at the point of the change rather than continuing to update. Anything that has frozen is labelled with the date it froze. You cannot add new attestations or evidence to a read-only framework until you upgrade again, at which point it simply resumes.
Cancelling entirely
Cancelling does not delete your data. Your workspace and its contents stay available to you, read-only, for at least 12 months after your subscription ends, and you can export or download what is yours at any point in that window. We will not remove anything without telling you first: if we ever intend to close a dormant workspace, you get at least 30 days’ notice by email and a working export link. Resubscribe at any time and it all comes back.
Deleting on purpose
If you want your data permanently erased sooner, ask us and we will delete it. That is irreversible, and it is always your call to make rather than ours.
A refund does not erase your work
If you take the 30-day refund, your data is treated exactly as above. We do not delete a customer’s compliance work because they asked for their money back.
4. What Sprala does and does not do
We are not your auditor
Sprala automates compliance readiness: monitoring, evidence collection, control mapping and reporting. We are not a CPA firm, a 3PAO, or a certification body, and using Sprala does not constitute an audit, a certification, or an attestation by us. Your audit is conducted by an independent assessor.
Readiness is not a guarantee
A high readiness score means our automated checks and your attestations line up with the controls in a framework. It is not a promise that you will pass an audit. Auditors exercise judgement, scopes differ, and some controls cannot be verified by software at all.
Ora
Ora, our AI assistant, drafts and suggests. It does not decide. Everything it produces is yours to review and edit, and you remain responsible for what you submit to an auditor or a customer.
5. Changes to this page
If we change any of this in a way that affects what you pay or what you get, we will email you before the change takes effect, and it will not apply to a term you have already paid for. Your price does not change mid-term. For how we handle your data day to day, see our Privacy Policy and our security page, or get in touch.