How does the free plan work?

Sign up and start using PrivaBase immediately. No credit card required. The Starter plan includes 1 compliance framework, 5 checks per month, policy generator, website scanner, and access to the compliance feed.

What compliance frameworks do you support?

We support 132 frameworks including GDPR, CCPA/CPRA, HIPAA, SOC 2 Type II, SOC 1, ISO 27001, PCI DSS, NIST, DORA, NIS2, 18 US state privacy laws, and international frameworks. You can also build custom frameworks.

How many integrations do you support?

Over 214 integrations across 12 categories including cloud infrastructure (AWS, GCP, Azure), identity (Okta, Google Workspace), DevOps (GitHub, GitLab), MDM (Jamf, Intune, Kandji), HR (Gusto, Rippling, BambooHR), and more.

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Evidence is stored in Supabase Storage with framework-level access controls. We never share your data with third parties.

Do you offer annual billing?

Yes, save 20% with annual billing on all paid plans.

Terms of Service

Last updated: February 12, 2026

1. Acceptance of Terms

By accessing or using PrivaBase ("Service"), operated by Spoon Seller LLC ("Company", "we"), you agree to these Terms. If you do not agree, do not use the Service.

2. Description of Service

PrivaBase provides automated privacy compliance tools including compliance checking, document generation, data subject request management, cloud security scanning, risk management, and related services.

3. Account Registration

You must provide accurate, complete information when creating an account. You are responsible for maintaining the confidentiality of your credentials and for all activities under your account. Notify us immediately of any unauthorized use.

4. Acceptable Use

You agree not to: (a) use the Service for unlawful purposes; (b) attempt to gain unauthorized access to any systems; (c) interfere with the Service's operation; (d) reverse engineer, decompile, or disassemble any part of the Service; (e) resell or redistribute the Service without authorization.

5. Subscription & Billing

Paid plans are billed monthly or annually. Prices are listed at privabase.com/pricing. You may upgrade, downgrade, or cancel at any time. Cancellations take effect at the end of the current billing period. Refunds are provided at our discretion.

6. Data & Privacy

Your use of the Service is also governed by our Privacy Policy. You retain ownership of all data you upload. We process your data only to provide the Service. We do not sell your data to third parties.

7. Intellectual Property

The Service, including all content, features, and functionality, is owned by Spoon Seller LLC and protected by copyright, trademark, and other intellectual property laws. Your subscription grants a limited, non-exclusive license to use the Service.

8. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE COMPANY SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF THE SERVICE. OUR TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT PAID BY YOU IN THE 12 MONTHS PRECEDING THE CLAIM.

9. Disclaimer

The Service provides compliance tools and guidance but does not constitute legal advice. You are responsible for ensuring your own compliance with applicable laws and regulations. We recommend consulting with qualified legal counsel.

10. Termination

We may suspend or terminate your access for violation of these Terms. Upon termination, your right to use the Service ceases immediately. You may export your data within 30 days of termination.

11. Changes to Terms

We may update these Terms. Material changes will be communicated via email or in-app notice. Continued use after changes constitutes acceptance.

12. Governing Law

These Terms are governed by the laws of the State of Delaware, without regard to conflict of law provisions.

13. International Jurisdictions

PrivaBase serves customers worldwide. While these Terms are governed by Delaware law, we acknowledge that users in certain jurisdictions may have additional rights that cannot be waived by contract:

United Kingdom: Nothing in these Terms affects your rights under the UK GDPR, the Data Protection Act 2018, or the Consumer Rights Act 2015. UK users may bring claims in UK courts.
European Economic Area: EU consumers may bring claims in the courts of their country of residence. Mandatory consumer protection laws of your member state apply where they provide greater protection.
Australia: Our services come with guarantees that cannot be excluded under the Australian Consumer Law. Nothing in these Terms restricts or modifies any guarantee, right, or remedy you may have under the Competition and Consumer Act 2010 (Cth).
Canada: These Terms are subject to applicable federal and provincial consumer protection legislation, including PIPEDA. Where provincial privacy legislation applies (e.g., in Alberta, British Columbia, or Quebec), we comply with such legislation.
Brazil: Brazilian users are entitled to protections under the Código de Defesa do Consumidor (CDC) and the Lei Geral de Proteção de Dados (LGPD). Mandatory consumer and data protection rights under Brazilian law are not affected by these Terms.
South Africa: These Terms are subject to the Consumer Protection Act, 2008, the Electronic Communications and Transactions Act, 2002, and the Protection of Personal Information Act, 2013 (POPIA). Nothing in these Terms limits rights that cannot be waived under South African law.

For jurisdiction-specific privacy rights, please see our Privacy Policy, which contains detailed information for each region.

14. Contact

Questions? Email legal@privabase.com or visit our contact page.