How does the free plan work?

Sign up and start using PrivaBase immediately. No credit card required. The Starter plan includes 1 compliance framework, 5 checks per month, policy generator, website scanner, and access to the compliance feed.

What compliance frameworks do you support?

We support 132 frameworks including GDPR, CCPA/CPRA, HIPAA, SOC 2 Type II, SOC 1, ISO 27001, PCI DSS, NIST, DORA, NIS2, 18 US state privacy laws, and international frameworks. You can also build custom frameworks.

How many integrations do you support?

Over 214 integrations across 12 categories including cloud infrastructure (AWS, GCP, Azure), identity (Okta, Google Workspace), DevOps (GitHub, GitLab), MDM (Jamf, Intune, Kandji), HR (Gusto, Rippling, BambooHR), and more.

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Evidence is stored in Supabase Storage with framework-level access controls. We never share your data with third parties.

Do you offer annual billing?

Yes, save 20% with annual billing on all paid plans.

Can I import from Vanta or Drata?

Yes. PrivaBase supports direct migration from Vanta, Drata, Secureframe, Sprinto, Thoropass, OneTrust, Hyperproof, Tugboat Logic, TrustCloud, Laika, Scytale, and any generic CSV or JSON export. Visit /migrate, select your platform, follow the step-by-step export instructions, and upload your file — auto-format detection handles the rest.

How long does migration take?

Most teams complete migration in under an hour. Export your data from your current provider, drag and drop the file into PrivaBase, review the AI-suggested control mappings with confidence scores, and click import. For OneTrust (which has a more complex data model), allow 2-4 hours. No professional services required.

Will I lose any data when migrating?

No. PrivaBase imports your evidence files, control mappings, policy documents, and compliance history. Every item is logged in the migration history audit trail so you can review exactly what was imported before finalizing. You can also roll back if anything looks off.

What is the control mapping confidence score?

When our AI maps your existing controls to PrivaBase's framework, it assigns each mapping a confidence score from 0–100%. High-confidence mappings (90%+) can be bulk approved in one click. Lower-confidence ones are flagged for manual review — ensuring accuracy without slowing the process down.

Can I run both platforms during the transition?

Absolutely. PrivaBase's free tier means there is no cost to run both simultaneously. We recommend a 1–2 week parallel period: import your data, validate the results, then cancel your old contract when you are ready.

Is migration really free?

Yes. The migration tool is included on every plan — including the free Starter plan. There are no professional services fees or migration add-ons. Enterprise customers get white-glove migration assistance with a dedicated migration engineer.

What file formats does the migration tool accept?

PrivaBase accepts CSV, JSON, ZIP archives, PDF policy documents, and Excel files. Auto-format detection identifies the source platform and file structure automatically — no manual column mapping required.

What compliance frameworks do you support?

PrivaBase supports 132 frameworks including GDPR, CCPA/CPRA, HIPAA, SOC 2 Type II, SOC 1, ISO 27001, PCI DSS, NIST, DORA, NIS2, 18 US state privacy laws, and international frameworks. You can also build fully custom frameworks on Scale and Enterprise plans.

Can I build a custom compliance framework?

Yes. The Custom Framework Builder (Scale and Enterprise plans) lets you create frameworks from scratch, clone and modify existing ones, or import/export framework definitions. Full support for custom controls, evidence mapping, and scoring weights.

How does the compliance score work?

PrivaBase calculates a real-time compliance score from 0–100 for each active framework. The score reflects your control completion, evidence health, and open findings. You can drill down by control area and track trends over time.

How many integrations do you support?

Over 214 integrations across 12 categories: cloud infrastructure (AWS, GCP, Azure), identity (Okta, Google Workspace), DevOps (GitHub, GitLab), MDM (Jamf, Intune, Kandji), HR (Gusto, Rippling, BambooHR), security monitoring (Datadog, CrowdStrike), and more.

What happens if my integration is not listed?

PrivaBase supports generic CSV and JSON imports for any system not in our direct integration catalog. You can also use our API to push data from custom sources. Email support@privabase.com to request a specific integration.

How does the AI compliance chat work?

Powered by Anthropic, our AI assistant understands all 132 frameworks and your specific compliance posture. It provides cited, framework-aware answers to regulatory questions. Available from the Developer plan and above.

What is AI vendor risk assessment?

Our AI automatically discovers vendors in your environment, monitors them for breaches, and assigns dynamic risk scores. It identifies shadow IT, flags high-risk third parties, and maintains a living vendor inventory — no manual spreadsheets required.

How does the free plan work?

Sign up and start using PrivaBase immediately — no credit card required. The Starter plan includes 1 compliance framework, 5 checks per month, policy generator, website scanner, compliance feed, and the full migration import tool.

Can I switch plans at any time?

Yes. Upgrade or downgrade at any time. Changes take effect immediately and billing is prorated.

Do you offer annual billing?

Yes, save 20% with annual billing on all paid plans.

How does PrivaBase compare to Vanta and Drata on price?

PrivaBase starts free (vs $7.5K–$10K/yr for Vanta and Drata). Our paid plans start at $99/mo. We offer more frameworks (132 vs ~20–30), more integrations (214 vs ~75–150), and include features like AI compliance chat, FAIR risk quantification, and the full migration tool at no extra cost.

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Evidence is stored in Supabase Storage with framework-level access controls. We never share your data with third parties.

Frequently Asked Questions

Everything you need to know about PrivaBase.

Platform Migration Compliance Frameworks Integrations AI Features Pricing & Plans

Platform Migration

Compliance Frameworks

Integrations

AI Features

Pricing & Plans

Ready to switch platforms?

Import from Vanta, Drata, Secureframe, and 9 other platforms in under an hour. Free on every plan — no professional services needed.

See Migration Guides Start Free