SaaSDossier™

How Much Does a SaaS Vendor Security Review Cost?

A SaaSDossier Licensed Edition is US$1,500 per vendor — one flat price, no packs or tiers — and the OpenAI Public Edition is free. Each dossier records what a vendor publishes about security across 55 fields, each either Documented or with a question surfaced — never a judgment.

Price answers a budget question; the work it removes is the one that decides the timeline. Before a vendor security questionnaire or DDQ, SaaSDossier organises the vendor's published security evidence into a finished, source-linked record, so a team can see what is Documented, what becomes a Question surfaced, and what still needs follow-up before procurement, onboarding or deeper review. It supports the buyer's work; it does not complete the questionnaire, score the vendor or make the approval decision.

A SaaSDossier™ Licensed Edition is US$1,500 per vendor — one flat price, no packs or tiers. The OpenAI Public Edition is free. Each dossier records what a vendor publishes about security across 55 fields, marked Documented or with a question surfaced. It is an evidence record, not an audit, certification, rating, legal opinion, or vendor approval.

Pricing and licence See the free OpenAI edition Methodology

Two states. No third. No judgment.

Documented

The field was found in the vendor's published sources, quoted and cited in the vendor's own words.

Question surfaced

Reviewed vendor-published sources did not establish the field for the evidence date. This does not establish absence of the control.

Cost · One price, one free edition

Licensed Edition
US$1,500 per dossier — Stripe, HubSpot, Anthropic, and further vendors on request.
Public Edition
Free — the OpenAI dossier, complete, as proof of the format.
What the license permits
Internal review use within your organization — vendor-risk, procurement, GRC, or security review.

Pricing and licence →

Frequently asked

How should my team use a Licensed Edition?
Use it as an internal evidence record before vendor calls, procurement review, GRC/security review, renewal decisions, or consultant client work. It helps your team see what the vendor publishes, what questions to ask next, and where the source record sits. It is not an audit, certification, rating, legal opinion, or vendor approval.
Can I see the format before I buy?
Yes. The OpenAI Public Edition is free and complete — the same 55-field framework, evidence ledger, source register, and integrity record as every Licensed Edition. The clearest way to inspect the format before licensing a vendor dossier.
Where does the evidence come from?
Only from the vendor's own published pages — trust and security centers, privacy and legal pages, data-processing terms, status pages, and subprocessor lists. Every line traces to a source. Each dossier includes a SHA-256 identifier tied to the reviewed evidence record used for that release. No third-party articles or opinions are used as evidence.
What do “Documented” and “Question surfaced” mean?
Those are the only two states. Documented means the field was found in the vendor's published sources, quoted and cited. Question surfaced means: “Reviewed vendor-published sources did not establish the field for the evidence date. This does not establish absence of the control.” It is a prompt for your own follow-up, never a judgment.
Disclaimer. SaaSDossier is independent documentation research and is not affiliated with, endorsed by, or certified by any vendor reviewed. Built from vendor-published sources reviewed at the time of preparation. SaaSDossier is a compiled evidence record — not an audit, certification, rating, legal opinion, vendor approval, or substitute for professional vendor-risk, legal, procurement, GRC, vCISO, or security review.

Related references

See the free OpenAI ledger Methodology Whop store