# Which data protection, AI governance and cyber security providers publish a price?

A published price lets you see a figure before you speak to a firm, and this list gives every one we found.

**The short answer.** The Assurance Desk checked 140 UK and US providers between 16 July 2026 and 13 October 2026, and 32 of them publish a price, on their own website or on a UK government G-Cloud listing ([The Assurance Desk provider data](https://theassurancedesk.com/advisers), checked 13 October 2026). Each row gives the figure, where it appears and the date it was checked.

## The list

Alphabetical inside each type.

| Provider | Type | What it publishes | Source | Checked |
| --- | --- | --- | --- | --- |
| [Actica Consulting Limited](https://theassurancedesk.com/advisers/actica-consulting-limited.md) | Advisory firm | A day rate of £300 to £1,430 on its G-Cloud listing | https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/279870356739657 | 19 September 2026 |
| [Ametros Group](https://theassurancedesk.com/advisers/ametros-group.md) | Advisory firm | Price ranges, for example £900 to £3,500 a month for an outsourced role | https://ametrosgroup.com/prices/ | 17 July 2026 |
| [AMSA InfoSec Ltd](https://theassurancedesk.com/advisers/amsa-infosec.md) | Advisory firm | A day rate of £850 to £1,450 for cloud security architecture, on G-Cloud | https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/108511484722071 | 19 September 2026 |
| [Arcanum Cyber Security (Arcanum Information Security Limited)](https://theassurancedesk.com/advisers/arcanum-cyber-security.md) | Advisory firm | Day rates of £800, £950 and £1,200, excluding VAT | https://assets.applytosupply.digitalmarketplace.service.gov.uk/g-cloud-14/documents/92656/514226994123838-pricing-document-2024-05-07-1215.pdf | 19 September 2026 |
| [Athlex](https://theassurancedesk.com/advisers/athlex.md) | Advisory firm | Outsourced DPO packages at £350, £650 and £950 a month, plus VAT | https://athlex.co.uk/outsourced-dpo/ | 16 July 2026 |
| [BABL AI Inc.](https://theassurancedesk.com/advisers/babl-ai.md) | Advisory firm | $2,500 for its AI audit training programme; no figure for audits | https://babl.ai/what-we-do/education-training/ | 29 September 2026 |
| [Bird & Bird LLP](https://theassurancedesk.com/advisers/bird-and-bird-llp-uk.md) | Advisory firm | Hourly rates of £275 to £815, for employment tribunal claims only | https://www.twobirds.com/en/more-information/price-transparency | 19 September 2026 |
| [Bright Defense, LLC](https://theassurancedesk.com/advisers/bright-defense.md) | Advisory firm | Compliance work from $1,000 a month | https://www.brightdefense.com/iso-42001/ | 20 September 2026 |
| [C3IA Solutions Limited](https://theassurancedesk.com/advisers/c3ia-solutions.md) | Advisory firm | A day-rate card of £497 to £1,720 on its G-Cloud listing | https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/342283242759804 | 19 September 2026 |
| [CBIZ Pivot Point Security](https://theassurancedesk.com/advisers/cbiz-pivot-point-security.md) | Advisory firm | A virtual CISO retainer of about $4,000 to $30,000 or more a month | https://www.pivotpointsecurity.com/services/virtual-ciso/ | 20 September 2026 |
| [Cyber Defense Group](https://theassurancedesk.com/advisers/cyber-defense-group.md) | Advisory firm | $15,000 to $25,000 a month for a 12-month managed security programme, on a page for its sales partners, last updated in September 2025 | https://www.cdg.io/partner-spifftactular/ | 5 October 2026 |
| [Data GRC Ltd](https://theassurancedesk.com/advisers/data-grc.md) | Advisory firm | A 30-minute advice call for £175 plus VAT; no figure for DPO work | https://www.datagrc.co.uk/ | 17 July 2026 |
| [IT Governance (now GRC Solutions)](https://theassurancedesk.com/advisers/it-governance.md) | Advisory firm | Documentation toolkits from £195 to £495; no figure for its DPO service | https://uk.grcsolutions.io/category/documentation-toolkits | 16 July 2026 |
| [Kafico](https://theassurancedesk.com/advisers/kafico.md) | Advisory firm | ISO 27001 work from a £199 mini audit to about £10,000 for full support | https://www.kafico.co.uk/iso27001 | 16 July 2026 |
| [Logiq Consulting Ltd](https://theassurancedesk.com/advisers/logiq-consulting.md) | Advisory firm | A day rate of £690 to £1,500 for audit and review, on G-Cloud | https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/119947575607604 | 19 September 2026 |
| [Mishcon de Reya LLP](https://theassurancedesk.com/advisers/mishcon-de-reya-llp.md) | Advisory firm | An outsourced DPO service from £500 a month plus VAT | https://www.mishcon.com/products/mishcon-dpo | 19 September 2026 |
| [Pembroke Privacy](https://theassurancedesk.com/advisers/pembroke-privacy.md) | Advisory firm | CIPP/E training at €1,349; no figure for its DPO service | https://pembrokeprivacy.com/iapp-certified-cippe-training/ | 16 July 2026 |
| [Rocket-Hire LLC](https://theassurancedesk.com/advisers/rocket-hire.md) | Advisory firm | AI bias audits from $25,000 | https://rocket-hire.com/ai-bias-audits/ | 20 September 2026 |
| [SideChannel, Inc.](https://theassurancedesk.com/advisers/sidechannel.md) | Advisory firm | A virtual CISO retainer of $3,000 to $12,000 a month | https://www.sidechannel.com/services/cybersecurity-compliance | 20 September 2026 |
| [Winston Taylor UK LLP (formerly Taylor Wessing)](https://theassurancedesk.com/advisers/winston-taylor-uk.md) | Advisory firm | Hourly rates of £290 to £1,030 plus VAT, for regulated services only; none for data protection | https://www.winstontaylor.com/information-on-our-fees-and-pricing | 29 September 2026 |
| [Centre for Assessment](https://theassurancedesk.com/advisers/centre-for-assessment.md) | Certification body | Initial ISO 9001 audits from £1,125 plus VAT | https://www.centreforassessment.co.uk/iso-9001-certification/ | 13 October 2026 |
| [ISOQAR (formerly Alcumus ISOQAR)](https://theassurancedesk.com/advisers/isoqar.md) | Certification body | Training courses, for example £920 for an ISO 42001 auditor course; certification on request | https://isoqar.com/parent-courses/aims-iso-iec-42001-2023-internal-auditor-course/ | 29 September 2026 |
| [Linford & Company LLP](https://theassurancedesk.com/advisers/linford-and-company-llp.md) | Certification body | A SOC 2 audit range of $20,000 to $100,000 | https://linfordco.com/services/soc-2-audits/ | 20 September 2026 |
| [Responsible AI Institute (Responsible Artificial Intelligence Institute)](https://theassurancedesk.com/advisers/responsible-ai-institute.md) | Certification body | Membership from $10,000 a year to $100,000 or more | https://www.responsible.ai/join/ | 20 September 2026 |
| [Arthur AI](https://theassurancedesk.com/advisers/arthur-ai.md) | Software product | A free tier and a $60 a month tier; enterprise on request | https://www.arthur.ai/pricing | 20 September 2026 |
| [CookieYes](https://theassurancedesk.com/advisers/cookieyes.md) | Software product | A free plan and plans at $10, $25 and $55 a month per domain | https://www.cookieyes.com/pricing/ | 19 September 2026 |
| [Fiddler AI](https://theassurancedesk.com/advisers/fiddler-ai.md) | Software product | A free tier and $0.002 per trace; enterprise on request | https://www.fiddler.ai/pricing | 20 September 2026 |
| [Hicomply](https://theassurancedesk.com/advisers/hicomply.md) | Software product | Annual plans at £5,300 and £10,600; enterprise on request | https://www.hicomply.com/en-us/plans | 19 September 2026 |
| [IBM watsonx.governance](https://theassurancedesk.com/advisers/ibm-watsonx-governance.md) | Software product | Risk & Compliance Basic from US$3,500 a month, before taxes; prices vary by country | https://www.ibm.com/products/watsonx-governance/pricing | 13 October 2026 |
| [Microsoft Purview](https://theassurancedesk.com/advisers/microsoft-purview.md) | Software product | $12 per user a month, paid yearly, on top of a Microsoft 365 E3 licence | https://www.microsoft.com/en-us/security/business/purview-suite-pricing | 17 July 2026 |
| [Osano](https://theassurancedesk.com/advisers/osano.md) | Software product | A free tier and a $199 a month tier; other tiers on request | https://www.osano.com/plans/cookie-consent | 20 September 2026 |
| [Strike Graph](https://theassurancedesk.com/advisers/strike-graph.md) | Software product | A free tier, then plans from $10,000, $21,500 and $35,000 a year | https://www.strikegraph.com/pricing | 20 September 2026 |

## What counts

A provider is on this list if it puts a figure in public: a price, a day rate, a price range, a "from" price or a worked example, on its own website or its UK government G-Cloud listing. "Contact us for a quote" does not count. Nor does a fee that is only agreed in the engagement letter.

## Does it differ by kind of provider?

Yes. 8 of the 27 software products publish a price. For advisory firms it is 20 of 80, and for certification bodies 4 of 33. A software price is usually a plan with a monthly or yearly fee.

Several of the advisory firms on the list price something other than their main work, such as training, a toolkit or legal work outside data protection. The row says so where that is the case.

## Questions to ask about the fee

- Ask for the fee in writing.
- Ask what the fee covers, including help with a data breach.
- Ask how the fee changes if the work grows.
- Ask for the notice period, and whether leaving costs anything.

## Common questions

### Does publishing a price make a provider cheaper?

No. It means you can see a figure before you speak to the firm. A published price can still be high, and a firm that quotes for each job can still be good value.

### Can I filter all the providers on this site this way?

Yes. The [compare table](/compare) has a filter for providers that publish a price.

### What if a price has changed?

Each row shows the date the price was checked. Confirm the figure with the provider before you rely on it.

---

**Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here.