How Much Does a SaaS Vendor Security Review Cost?
A SaaSDossier™ Licensed Edition is US$1,500 per vendor — one flat price, no packs or tiers. The OpenAI Public Edition is free. Each dossier records what a vendor publishes about security across 55 fields, marked Documented or with a question surfaced. It is an evidence record, not an audit, certification, rating, legal opinion, or vendor approval.
Two states. No third. No judgment.
Documented
The field was found in the vendor's published sources, quoted and cited in the vendor's own words.
Question surfaced
Not identified in the vendor-published sources reviewed. This does not establish absence of the control.
Cost · One price, one free edition
Licensed Edition
US$1,500 per dossier — Stripe, HubSpot, Anthropic, and further vendors on request.
Public Edition
Free — the OpenAI dossier, complete, as proof of the format.
What the license permits
Internal review use within your organization — vendor-risk, procurement, GRC, or security review.
Frequently asked
How should my team use a Licensed Edition?
Use it as an internal evidence record before vendor calls, procurement review, GRC/security review, renewal decisions, or consultant client work. It helps your team see what the vendor publishes, what questions to ask next, and where the source record sits. It is not an audit, certification, rating, legal opinion, or vendor approval.
Can I see the format before I buy?
Yes. The OpenAI Public Edition is free and complete — the same 55-field framework, evidence ledger, source register, and integrity record as every Licensed Edition. The clearest way to inspect the format before licensing a vendor dossier.
Where does the evidence come from?
Only from the vendor's own published pages — trust and security centers, privacy and legal pages, data-processing terms, status pages, and subprocessor lists. Every line traces to a source, and each dossier carries a SHA-256 integrity record. No third-party articles or opinions are used as evidence.
What do “Documented” and “Question surfaced” mean?
Those are the only two states. Documented means the field was found in the vendor's published sources, quoted and cited. Question surfaced means: “Not identified in the vendor-published sources reviewed. This does not establish absence of the control.” It is a prompt for your own follow-up, never a judgment.
Disclaimer. SaaSDossier is independent documentation research. It is not an audit, certification, rating, legal opinion, vendor approval, or substitute for professional vendor-risk, legal, procurement, GRC, vCISO, or security review.