Products & Pricing
Products
Start with one category, assessed from the public record and priced at a flat $500. Move up to a verified assessment when you want your own evidence in the picture. No per-seat surprises. No hidden fees.
New to RuleboardAI? Read How It WorksEvery price on this page is a one-time fee. Nothing recurs, nothing auto-renews, and there is no subscription to cancel.
Profiles & engagements
Start with one category, verify it with your evidence, or run a portfolio
Start here
Preliminary Regulatory Risk Profile
A structured, evidence-cited assessment of one regulatory domain at your institution, built entirely from the public record and reviewed by a named person before it reaches you.
- Any one CompanyScope category
- Every confirmed claim cites a source you can open
- RCPS maturity scoring, with the derivation printed
- Findings ranked by severity, with remediation options
- A structured evidence request and a 60-minute findings call
- Ten business days. No documents or system access required.
Best for a team that wants one category assessed from the public record first.
Scoped engagement
Verified Assessment
The upgrade from the preliminary report. Your own evidence, your management responses, and verification of the items the public record could not confirm.
- Scope is the evidence request from your preliminary report
- Client-provided documents reviewed under a signed authorization
- Management responses recorded in the final report
- Confidence labels updated against verified evidence
- Requires a signed Letter of Authorization
Best once a preliminary profile has shown you what to verify.
Custom engagement
Custom Diligence
Portfolio-scale diligence for deal teams and lenders: multiple targets, multiple counterparties, scoped to your mandate and your timeline.
- Multi-entity AcquirerScope across a portfolio
- Turnarounds scoped to your deal timeline
- Counterparty and buyer-risk assessment
- Custom category and framework scope
- Named point of contact
Best for private equity deal teams, M&A advisors, and lenders running a portfolio.
Planned · Not available
Ongoing monitoring
We are not selling ongoing monitoring, and we are not taking money for it. It is on our roadmap and it is not built — so there is no price on this page and no way to subscribe. Every report we produce is a point-in-time assessment and says so on its face.
If watching your regulatory position over time is what you actually need, tell us. We would rather know what you want than sell you something we cannot yet deliver consistently.
Single decision · One-time
Need one answer, not a subscription
SecureScope
$500 one-time
A framework-cited, outside-in read on a U.S. financial institution's technology and security risk, from public evidence. Benchmarked to NIST CSF 2.0, ISO 27001, SOC 2 and DORA. 5 business days from confirmed intake and payment.
AcquirerScope
$500 / report
An outside-in read on the institution across the table — buyer, target, sponsor, or borrower — from public registration and enforcement records. You commission it; the counterparty is the subject and is never contacted.
Secure card checkout via Stripe. Prefer an invoice (certified funds, wire, or ACH)? Use the contact form. All fees are one-time. There is no subscription and nothing to cancel.
What you receive
What arrives, product by product
These are representative outputs — the artifact each product produces, shown on a public company from public sources. Illustrative; your report reflects your own entity.
SecureScope
$500For security & risk teams vetting a U.S. financial institution
Third-party platform concentration — Galileo processing dependency
- Evidence status
- Confirmed — 10-K risk factors; disclosed ~23% platform-account decline
- Affected obligation
- NIST CSF 2.0 (GV.SC) · Operational resilience
Recommended action
Map fourth-party dependencies, require SOC 2 Type II, and document an exit / failover plan.
Scope: Public-source technology & security risk, benchmarked to NIST CSF 2.0, ISO 27001, SOC 2 and DORA — no client documents required.
Explore SecureScopeAcquirerScope
$500For deal teams, lenders, and sellers vetting a counterparty
Counterparty — mid-market PE sponsor
Visible strengths
Public-source gaps
Verification questions
- Request audited fund financials and the latest LPAC materials.
- Confirm source and certainty of funds before the data room opens.
Scope: An outside-in read on a counterparty from public registration and enforcement records — strengths, gaps, and the questions to ask.
Explore AcquirerScopeMonitoring — planned, not available
Not availableFor teams that will eventually want a baseline kept current
Investment Adviser AML rule adds RIAs and ERAs to the Bank Secrecy Act — a written AML/CFT program, a designated compliance officer, and independent testing become mandatory.
- Affects your baseline
- Baseline workflow — AML Program Review
- Required review
- Confirm scope and stand up the program before the compliance date.
Source: FinCEN — Final rule postponing the Investment Adviser Rule effective date to 2028, 2025
Scope: NOT AVAILABLE. Monitoring is on our roadmap and is not built — there is no price and no way to subscribe. The card below shows what such an update would contain, as an illustration only.
What monitoring would beCompanyScope
$500For teams assessing regulatory risk one category at a time
Composite maturity
2.8 / 5.0
Defined
Illustrative target — not a promised outcome
3.9 / 5.0
What this number means
Each GRC category is scored from 1 to 5: Initial, Developing, Defined, Managed, Optimized. The composite is the average of the category scores, shown to one decimal.
The word beside it is the nearest whole level. A score of 2.8 is closest to 3, so it reads Defined.
Scores come from public sources only. A low score usually means the evidence is not visible from outside, not that a control is absent.
The target is the average of what each category could realistically reach for an institution of this size and stage. It is not a promise and not a benchmark. Full rule in the methodology.
Scored categories
- Internal Governance
- ESG & Non-Financial Reporting
- Operational Risk
- Third-Party / Supply Chain Risk
- Cybersecurity
- SOC 2 (Trust Services)
- Financial Regulation
- International Frameworks
- Privacy & Data Protection
- Ongoing / Scheduled
- HR & People Risk
Scope: A regulatory risk profile scored to RCPS maturity with preliminary findings and a data-gap register — one GRC category per report. $500, one-time.
Explore CompanyScope