Pricing
Use the platform yourself. Or bring in the team behind it.
Self-Serve gives your team the platform and workflows. Managed combines the platform with specialist delivery. Not sure which? Start with a Readiness Assessment and decide with the facts in front of you.
Three routes
Three routes in, and who each one is for.
Self-Serve is for organisations that have someone who will do the work. You get the platform and the method, and your team runs the programme.
The Readiness Assessment is for organisations that want a specialist to assess one high-consequence system against evidence. It gives you a picture you can act on, and it is where a managed engagement gets scoped if you decide you want one.
Managed delivery is for organisations that want Norivo to run the programme. It is scoped from the assessment, not from a price list.
Self-serve
Self-Serve Platform
Starter
£3,000/year£250/month billed annually- Up to 3 AI systems
- 1 user
- EU AI Act module
- Registry and classification
- Risk and impact assessment
- Model cards
- Continuous monitoring
- 4,000 Nora credits
- 3 integrations
Essentials
£6,000/year£500/month billed annually- Up to 10 AI systems
- 25 users
- All three external frameworks plus VALID mapping
- 10 integrations
- 10,000 Nora credits
- Assessments
- Model cards
- Continuous monitoring
Professional
£15,000/year£1,250/month billed annually- Up to 25 AI systems
- Unlimited users
- All three external frameworks plus VALID
- Unlimited integrations
- Unlimited Nora credits
- API access
- Advanced reporting
Enterprise
from £25,000/year- Unlimited AI systems
- Professional features
- Trust centre
- SSO
- Custom framework builder
- Dedicated customer success
- On-premise subject to scope
Annual billing.
Readiness Assessment
Start here: AI Governance Readiness Assessment
£4,500. Five to ten business days. Fixed scope.
One AI system assessed in depth, plus estate-level discovery: an inventory of what exists, not depth on every system. Additional systems are quoted separately.
For anyone considering managed delivery, this is the recommended first step. Every managed engagement is scoped from it.
If you agree a managed implementation within 30 days of the final readout, the full £4,500 is credited against it. The credit applies to managed delivery only.
What is delivered
- Estate discovery and inventory
- In-depth assessment of one AI system
- Risk classification
- VALID maturity score against evidence
- EU AI Act applicability
- ISO/IEC 42001 and NIST AI RMF gaps
- Prioritised risk register
- 90-day roadmap
Managed
Managed Governance
A managed engagement is a fractional AI governance function: Norivo specialists build and operate the programme on the platform, you review and approve, and you own everything produced.
Foundation
Who it suits
Organisations with a small AI estate, establishing governance for the first time.
Scope
Up to 5 AI systems.
What it includes
Inventory, classification, risk and impact assessments, core policies, VALID baseline and control mapping, evidence repository, dashboard, audit-readiness package, platform access, quarterly governance review.
Scale
Who it suits
Organisations with a growing estate, an active remediation programme, or an audit or customer assurance deadline in view.
Scope
Up to 20 AI systems.
What it includes
Foundation plus deeper implementation, remediation programme, workshops, vendor assessments, reporting, integrations, continuous regulatory mapping, audit support, monthly governance review.
Enterprise Managed
Who it suits
Complex or multi-business-unit estates, agentic systems, and organisations under continuous regulatory scrutiny.
Scope
Custom scoped.
What it includes
Custom integrations, advanced Agentic Defence, bespoke controls, executive reporting, dedicated governance lead, continuous assurance, audit and regulatory support, priority SLA.
Every managed engagement is scoped from a Readiness Assessment.
Scoping
What sets the price
Managed engagements are scoped on what actually drives the work, not on which frameworks you pick. VALID cross-maps controls across the EU AI Act, ISO/IEC 42001 and NIST AI RMF, so framework choice changes evidence and management-system effort rather than creating an entirely separate programme.
Cost drivers
- Number of AI systems
- System complexity
- Exposure and consequence level
- Current evidence maturity
- Integrations required
- Remediation scope
- Degree of Norivo involvement
- Framework scope
We put the scope and the price in writing before you commit.
Renewal
What happens at renewal
Year one is the implementation. From year two you either move to platform-only at the matching self-serve tier and run the programme yourself, or Norivo continues to operate it under a scope agreed with you.
Timelines
Audit-ready from 30 days
Managed timelines depend on the size of the AI estate, data availability, framework scope, stakeholder access and remediation requirements. Straightforward engagements can reach an audit-ready evidence position from 30 days; complex programmes take longer, and we say so on the scoping call.
What audit-ready means
Applicable controls, policies, assessments, documentation and evidence have been organised, mapped and prepared for independent review. Certification and regulatory determinations remain with the relevant auditor, certification body or authority.
How this relates to VALID maturity
The published VALID pathway is broader than the first evidence position. "From 30 days" describes the initial organised evidence baseline; managed delivery continues through the dependency pathway across the 12-month term.
Add-ons
Add-ons and packaged services
| AI Governance Policy Pack | From £3,500 |
|---|---|
| AI Vendor Assurance | £2,500 per vendor or five for £10,000 |
| On-site audit support | £2,000/day plus travel |
| Staff training | £3,000/day on-site or £1,000 per 2-hour virtual session |
| GRC / ISMS integration | £5,000 to £15,000, scoped |
How managed delivery compares to hiring or to a consultancy.
| Internal hire | Consultancy | Norivo managed delivery | |
|---|---|---|---|
| Time to first evidence | 6 to 18 months, including hiring | 3 to 12 months | From 30 days, subject to scope |
| Framework basis | Whatever the hire brings | The firm's own methodology | VALID, published and cross-mapped |
| Ownership at the end | Yours | Set by the engagement terms | Yours, programme and data |
| Continuity when people leave | Depends on succession planning | Ends with the engagement | Held in the platform, not in a person |
| Platform included | No, licensed separately | Not usually | Yes |
| After year one | Internal capability, if the person stays | A report and a document set | A running programme and a live evidence base |
The internal hire and consultancy columns describe common patterns, not any particular firm or role.
Ownership
You own everything. We mean the whole programme.
Traditional consulting engagements often end with static deliverables that still need someone inside the organisation to maintain them. Norivo leaves you with the operating system as well as the outputs. Your inventory, assessments, evidence and governance history remain structured in the platform and can be exported whenever you need them.
- Your inventory, assessments and evidence export in standard formats.
- Managed customers can move to self-serve at renewal and keep running the same programme.
- There is no proprietary lock on your governance record.
- If you leave Norivo, you export the lot.
Questions