Pricing

Find it now.
Or explain it later.

The preliminary scan is free. The full diagnostic costs less than one hour of the privacy legal fees you will spend if a regulator finds it first.

Growth
$299
Under 50 employees
You are moving fast. This is the fastest way to know whether your site is a liability before it becomes one.
  • Full four diagnostic vectors report
  • Observed evidence for every finding
  • Developer-ready remediation guidance
  • Statutory citations with direct legislation links
  • 60-day full refund window
  • Partner referral on request
  • Executive briefing call
Request Audit
Enterprise
$4,999
500+ employees
Your board will ask. Your auditors will ask. Your cyber insurer will ask. Have an answer that is not "we assumed we were compliant."
  • Full four diagnostic vectors report
  • Observed evidence for every finding
  • Developer-ready remediation guidance
  • Statutory citations with direct legislation links
  • 60-day full refund window
  • Partner referral included
  • Executive briefing call
  • Same business day turnaround
Request Audit

Compliance is not a one-time event.

Your developer ships a new feature. A third-party script updates silently. Your consent banner stops firing correctly after a platform update. None of these send an alert.

The annual re-audit runs automatically against your domain. An updated dossier is delivered. You know what changed before anyone else does.

Growth Annual

Full re-audit plus updated dossier

$149 /yr

Mid-Market Annual

Full re-audit plus updated dossier

$499 /yr

Enterprise Annual

Full re-audit plus executive briefing call

$1,499 /yr

Read it.
Act on it.
Or get your money back.

Purchase your dossier. Review the complete findings, every vector, every citable violation. If you decide not to act within 60 days, we will refund you in full.

No paperwork. No explanation required.

60-Day Full Refund. No Conditions. No Questions.

Questions

What's in the free preliminary scan?

An executive summary disclosing the first two diagnostic vectors with observed evidence from your live domain. Risk classification assigned. Preliminary findings if available. No payment, no account required.

How is the scan different from a standard cookie audit?

Most cookie audits detect which scripts are present. Verimont tests whether your site honors a rejection. A live browser clicks Reject All and then watches whether tracking scripts continue transmitting data. If they do, that is a finding with timestamped network evidence, not an inference. No passive scanner does this.

How do you determine my tier?

By publicly available employee count. If you think we have misclassified you, tell us before you pay. We will fix it.

Is this legal advice?

No. Verimont produces technical threat assessments, not legal opinions. We identify what is broken and document it with observed evidence. For legal advice, speak to a qualified privacy lawyer. We can connect you with one.

How do I claim the refund?

Email us your reference number within 60 days of purchase. We do not ask why. Refunded within 5 business days.

What happens after I receive the report?

The full dossier is available immediately on your report page and can be downloaded as a PDF. If your findings require legal or engineering expertise to remediate, we connect you to certified Canadian privacy counsel who work directly from your report.

What if you find nothing?

94% of scans surface at least one citable violation. If the preliminary scan finds nothing material, we tell you, and there is nothing to purchase.