Download one offline HTML file. Run structured gap assessments with dual-role verification. Export auditor-ready reports — no manual formatting, no spreadsheet chaos. 100% offline, zero data leaks.
RegVanta is not a GRC platform. It is the structured assessment layer — designed to work before, alongside or instead of your existing compliance infrastructure.
Not a GRC platform. Not a checklist. A structured assessment workbench — designed to work before, alongside or instead of your existing compliance infrastructure.
Beta — built on standard regulatory obligations. Adapt with a qualified assessor.
Each tool is targeted — choose the one that matches your regulatory obligation.
No setup. No training. Open the file and start assessing.
All editions include the full question set, weighted scoring, and compliance report. The difference is access control and audit depth.
| Feature | Free | Complete | Pro |
|---|---|---|---|
| Access & roles | |||
| Role-based access (Provider / Assessor / Admin) | — In-tool view only |
✓ | ✓ |
| Password protection with recovery keys | — | ✓ | ✓ |
| Admin panel & user management | — | ✓ | ✓ |
| GxP-specific features | |||
| Audit-standard finding taxonomy (Compliant / Observation / Major NC / Critical NC) | — DORA & EUAI-NIS2 only |
✓ GxP editions | ✓ |
| Smart defaults by GxP classification (GMP/GCP/GLP/GDP/GVP) | ✓ GxP Light | ✓ GxP Complete | ✓ |
| Assessment & scoring | |||
| Full question set (all sections) | ✓ | ✓ | ✓ |
| Weighted compliance scoring | ✓ | ✓ | ✓ |
| Provider vs Assessor delta scoring | ✓ | ✓ | ✓ |
| Action register with owner & due date | ✓ | ✓ | ✓ |
| Audit & export | |||
| Audit trail | Activity log Not role-attributed |
✓ Tamper-evident Role + timestamp on every change |
✓ Tamper-evident |
| Save & reload (JSON) | ✓ | ✓ | ✓ |
| Exportable compliance report | ✓ | ✓ | ✓ |
| Licence & deployment | |||
| Organisations covered | 1 organisation | 1 organisation | Unlimited Deploy to all clients |
| Free tier is the trial — no expiry | ✓ Free | ✓ | ✓ |
| Priority support | — | — | ✓ |
| RegVanta EUAI-NIS2 | €0 no signup required |
€1,299 per organisation / year |
€3,499 flat / year |
| RegVanta DORA | €499 per organisation / year |
€1,299 per organisation / year |
€3,999 flat / year |
| RegVanta GxP BETA | €99 BETA per organisation / year Post-beta: €299/yr |
€499 BETA per organisation / year Post-beta: €999/yr |
€999 BETA flat / year Post-beta: €2,999/yr |
Every product has a free tier — no signup, no expiry. Upgrade to Complete when you need to export.
DORA, EU AI Act, NIS2 and GxP computer system validation obligations all require structured, documented assessments. RegVanta covers all four in a single offline workbench family.
This comparison is scoped to EU regulatory gap assessment specifically — not general GRC. RegVanta is not a replacement for enterprise GRC platforms; it is the structured assessment layer that works before or alongside them.
| Capability | RegVanta | Enterprise GRC e.g. large platform vendors |
SaaS GRC Tools e.g. mid-market platforms |
Spreadsheet DIY templates |
|---|---|---|---|---|
| Time to first assessment | Minutes | Avg. 3–6 months | Avg. 4–8 weeks | Hours–days |
| Data stays in your network | ✓ 100% offline | Cloud hosted | Cloud hosted | Local only |
| Dual-role verification (Provider + Assessor) | ✓ Built-in | Custom build needed | Rarely native | Manual only |
| DORA + EU AI Act + NIS2 + GxP pre-built | ✓ Ready to use | Framework build required | Partial coverage | Manual mapping |
| Tamper-evident audit trail | ✓ Complete edition | ✓ Yes | ✓ Yes | ✗ None |
| Board-ready compliance report | ✓ Instant export | Custom build | Dashboard / export | Manual formatting |
| Indicative cost — EU / GxP gap assessment | Free tier + from €499/yr | Avg. €60k–€200k impl. | Avg. €15k–€50k/yr | Tool-free, but high effort cost |
| No IT procurement required | ✓ Download & go | Full procurement cycle | Contract + onboarding | ✓ None needed |
Cost and timeline estimates are indicative averages for EU regulatory gap assessment implementation only, based on publicly available market data. Enterprise GRC and SaaS GRC platforms have broader capabilities beyond gap assessment — RegVanta is not a replacement for them. It is the structured assessment layer that works before, alongside, or instead of them.
These are illustrative use cases based on the typical compliance challenges RegVanta is designed to address.
For licence enquiries, bundle pricing, or questions about regulatory coverage — reach out directly.
Applies to all RegVanta products — EUAI-NIS2, DORA and GxP editions
RegVanta tools are licensed, not sold, on an annual per-organisation basis. Upon purchase, the licence holder receives the right to download and use the purchased HTML file within their organisation for internal compliance assessment purposes, on any number of devices within the licenced organisation.
The licence does not permit redistribution, resale or transfer to any third party without a separate Pro/Consultancy licence. Sublicensing to clients or partner organisations requires a Consultancy licence. Reverse engineering or modification of the tool for commercial purposes is not permitted. Copyright notices and disclaimers within the tool must not be removed or altered.
Compliance consultancies wishing to deploy RegVanta tools across multiple client organisations should enquire about our Pro/Consultancy licence: [email protected]
All content within RegVanta tools — including the regulatory question sets, scoring methodology, assessment structure and user interface — is the original intellectual property of Subrat Panda and is protected by copyright. The tools are protected by BOIP i-DEPOT filing (March 2026). All rights reserved.
RegVanta tools are provided for informational and gap assessment purposes only. They do not constitute legal, regulatory or professional compliance advice. Completing an assessment does not guarantee compliance with any regulation. Organisations should engage qualified legal counsel, accredited auditors and where applicable notified bodies for formal compliance activities.
Each licence is valid for 12 months from the date of purchase and does not auto-renew. The free tier requires no licence and has no expiry.
To the maximum extent permitted by applicable law, Subrat Panda (trading as RegVanta) shall not be liable for indirect, incidental or consequential damages arising from use of RegVanta tools. Total liability shall not exceed the amount paid for the relevant licence in the 12 months preceding any claim.
[email protected] · regvanta-ai.com · Amsterdam, Netherlands
RegVanta tools are designed with privacy by default. All assessment data entered into a RegVanta tool is stored exclusively on your own device in your browser's local session memory. Data is saved to your local device as a JSON file when you use the Save function — this file never leaves your device unless you choose to share it. We do not operate any server, database or cloud infrastructure that receives data from the tools. The tools function entirely offline after download.
The regvanta-ai.com website may use basic privacy-respecting analytics (Cloudflare Web Analytics) to understand aggregate traffic volumes. No personally identifiable information is collected and no tracking cookies are set.
When you purchase a RegVanta product, your payment information is processed by Lemon Squeezy LLC, our Merchant of Record. We receive only the information necessary to fulfil your order (name, email, product purchased). We do not store payment card information. We do not share your contact details with third parties.
If you are located in the EU/EEA you have rights under GDPR including the right to access, correct or delete personal data we hold. Given the minimal data we collect, requests can typically be fulfilled by simple email. Contact: [email protected]
RegVanta products are digital goods delivered instantly by download. Because the product is delivered immediately upon purchase, all sales are generally final.
If a RegVanta tool does not function as described, or if you encounter a material technical issue we are unable to resolve within a reasonable timeframe, you may request a full refund within 7 days of purchase by contacting [email protected] with your order number and a description of the issue. Refunds are processed via Lemon Squeezy and typically appear within 5–10 business days.
Refunds are not available where the product has been used to conduct and export assessments, or where the issue is caused by the customer's browser or device configuration rather than a defect in the product.
EU-based customers may have additional rights under applicable consumer protection law. Nothing in this policy limits any statutory rights you may have.
For refund requests: [email protected] · Please include your order number and description of the issue.