Pricing
Fixed-scope packages. Async-first delivery (email-first, no calls). Prices are net + VAT where applicable.
Foundation (DIY)
€790–€1,290
One-time • 10–50 employees • 1 entity
- • Policy & Process Kit (approved channels, callback protocol, vendor change, 4/6-eyes matrix)
- • Checklists + registers (templates)
- • Step-by-step implementation guide
- • Evidence Pack templates (to fill)
Best when your finance team can implement independently.
Guided
Most popular
€1,990–€3,490
One-time • 30–200 employees
- • Everything in Foundation
- • 2 async review rounds (sanitized screenshots / written notes)
- • Training (20–30 min) + quiz
- • Evidence Pack — final (organized, complete, ready)
Complete (Insurer/Audit-ready)
€3,990–€7,990
One-time • 100–500 employees
- • Everything in Guided
- • Tabletop scenario (deepfake/CEO fraud) + report + action plan
- • Threshold variants & exceptions (by payment type / department)
- • Management Summary (1–2 pages)
Enterprise / Multi-entity
€9,000–€25,000+ (custom)
For 2+ entities, multiple countries, complex approvals, ERP workflow alignment, or large-scale training.
Ongoing Shield (retainer)
Makes it a “real business”: maintains evidence readiness, refreshes protocols, onboards new staff.
Ongoing Shield
€199–€790/mo
- • Quarterly refresh of procedures (thresholds, exceptions, callback directory)
- • Onboarding new employees (training + quiz + logs)
- • 1 scenario test per quarter (light) or per 6 months (full)
- • Evidence Pack maintained “always ready”
Add-ons:
• Additional entity: +€99–€249/mo
• Additional language (PL/NL/EN) for policies: +€250–€600 one-time
• Additional language (PL/NL/EN) for policies: +€250–€600 one-time
Pricing rationale (how clients justify it)
The anchor is not “hours”. The anchor is the cost of one mistake: a single unauthorized transfer is often tens of thousands (or more). DirectiveLock implements process controls that make CEO-fraud non-executable without verification.
“This is payment control implementation for CEO-fraud + evidence for management/insurer/audit.
Not motivational awareness training.”
Ask for the right package
Not legal advice. Risk reduction, not a guarantee of incident prevention.