Name: FEHA Compliance Automation & Audit Pass Packages
Brand: FEHA

Question 1

Can I try before buying?

Accepted Answer

Yes. You can use our live GRC simulation, with no sign up required, to explore the platform before any commitment.

Question 2

Can the scope change after we start?

Accepted Answer

Yes. Adding a framework, a new region, or a new entity is common as companies grow. We reprice only the additional scope, and everything you have already implemented carries over.

Question 3

Do you offer discounts for NGOs or early stage startups?

Accepted Answer

Yes. Contact us and we'll work with you to find an arrangement that fits your budget. We believe every company should be able to operate securely and compliantly.

Question 4

Does adding a second or third framework double the cost?

Accepted Answer

No. Frameworks share controls, so the second one costs far less than the first. An ISO 27001 control set already satisfies a large share of SOC 2, and evidence you collect once is reused everywhere. That overlap is why running frameworks together is cheaper than running them one after another.

Question 5

How does company size change the price?

Accepted Answer

Headcount is a proxy for scope. More people means more access reviews, more devices, more onboarding and offboarding evidence, and usually more systems and third-party vendors to assess. A 30-person team and a 600-person team can pursue the same certification and still need very different amounts of work.

Question 6

How long does certification typically take?

Accepted Answer

Most clients certify for ISO 27001 within 3 to 5 months. Programs covering multiple frameworks typically take 4 to 6 months. Larger organisations are scoped to their own timeline.

Question 7

Is the compliance expert always included, or is it an add on?

Accepted Answer

It depends on the package you choose. Expert-included packages come with a named compliance professional from day one. If you prefer to run the program yourself, you can start with the platform only and bring our experts in whenever you need them.

Question 8

What does the Audit Pass Guarantee mean?

Accepted Answer

If you follow the FEHA program and complete your implementation, we guarantee you will pass your first certification audit. If for any reason you don't, we continue working with you at no additional charge until you do. Terms apply.

Question 9

What happens after I'm certified?

Accepted Answer

Compliance doesn't end at certification. FEHA continues to monitor your controls, alert you to regulation changes, and support your annual audit cycles.

Question 10

Which regions and frameworks do you cover?

Accepted Answer

FEHA covers frameworks across Singapore (PDPA, MAS TRM, CSA CCoP), UAE (DIFC, UAE IA), Saudi Arabia (NCA ECC, PDPL), Indonesia (POJK, PDP Law), Australia (Privacy Act, ISM), the EU (GDPR, NIS2, DORA), and all major international standards (ISO 27001, SOC 2, ISO 42001, PCI DSS, HIPAA).

Question 11

Why is FEHA pricing custom instead of fixed tiers?

Accepted Answer

Because no two compliance programs cost the same to run. Three things drive your price: your industry and its regulatory load, the frameworks you need and how much they overlap, and the size of your organisation, which determines how many people, systems, and vendors fall in scope. A fixed price list would either overcharge a 20-person startup or under-serve a regulated enterprise, so we scope each program and quote it properly.

Flexible compliance operations
for every team.

Answer three things. See a ballpark.

How our pricing works

Additional operational services

Internal Audit

vCISO

Penetration Testing

Ready to simplify compliance operations?

Flexible compliance operations for every team.