Pay for each Report on Compliance (ROC) your firm runs with AI, and for the seats it uses. Without AI is included.
Launch prices from general availability in December 2026. Prices will change after launch.
$2,000per Report on Compliance
Per Report on Compliance run with AI. Without AI is included.
$2,000per QSA seat a year
Per seat per year, on an annual plan
Talk to us
For larger firms, talk to us
One ROC with AI, Auto or Assisted. Enpasse prepares, drafts, answers and checks. The lead decides every result.
All evidence is in, not yet said
0 suggested0 waiting on Scope0 gaps0 Not Applicable, suggested
8.3.6Suggestion 2
Result suggested Shown
Waiting for Maria Reyes
All files in: a first pass across Assess. Each sub-requirement gets results with passages cited, or a gap where no file supports it. Nothing counts until the lead accepts.
Assess signed off by Maria Reyes
0 of 291 pages drafted12 AOC parts alongside
8.3.6Reporting details
Admin console passwords must be at least 12 characters and hold both letters and numbers. EV-031 v2, p. 4
The setting covers every admin account in the system inventory. EV-012, row 14
The IT lead described the same setting at interview. Interview 3, lines 31 to 34
Waiting for Maria Reyes
Assess signed off: the report drafted in order. Foundation, Findings, Summary. Every sentence cited; never a finding, a date or a Section 6 number.
Ask Enpasse, on 8.3.6
This assessment and the PCI DSS text only
Where are the admin console's password settings?
In the settings export, page 4, and in the system inventory, row 14. PCI DSS 8.3.6 asks for at least 12 characters with letters and numbers.
EV-031 v2, p. 4EV-012, row 14PCI DSS 8.3.6
Open 8.3.6Open EV-031 v2
Is 8.3.8 met?
That call is yours. Gap G23 is still open on 8.3.8.
Open G23
Ask from any page; every claim opens its source. It never says whether a requirement is met, and each answer ends at the place the lead acts.
Checks across the report
Shown on the page where the problem is
ROC approved by Maria Reyes. Ana Lee's QA review opens.
Rule checks in every mode; with AI, three that read the text. A check never fixes anything. The lead fixes it or keeps it with a reason QA sees.
The lead re-cites a newer version. The call is hers.
The on-call analyst works from v8, approved last month. Maria Reyes cites v8 instead.
Corrections and new versions stay in the same assessment. Without AI stays $0.
Change a credential and the seat follows. Going over never stops work.
Press a report to switch how it runs. Without AI adds nothing.
A year, in US dollars
$25,000
An estimate at launch prices, which will change after launch. Your firm's order form sets what it buys.
Seats open every step. With AI adds suggestions; Without AI makes zero model calls.
| Feature | With AIAuto or Assisted | Without AIIncluded |
|---|---|---|
| Evidence | ||
| One list of every file, searchable by name, file ID and the words inside | Y | Y |
| Cite a passage, a page, rows or a region | Y | Y |
| Where each file fits, suggested with the passage cited | Y | N |
| Replacing a file first shows what relies on it | Y | Y |
| Assess | ||
| Every sub-requirement on one list, with a findings tally | Y | Y |
| Suggested results, each claim cited to its passage | Y | N |
| A first pass once all files are in | Auto | N |
| Scope, interviews, gaps, scan reports and sample sets | Y | Y |
| Sign off Assess by the lead | Y | Y |
| Write | ||
| Drafting in three steps, in the report's order | Drafted | From your records |
| Section 6 numbers given once, never changed | Y | Y |
| Checks across the report by rule | Y | Y |
| QA review by the named reviewer | Y | Y |
| Approved versions never change; a change starts the next | Y | Y |
| Export | ||
| The Attestation of Compliance with its Report on Compliance | Y | Y |
| Finalize ROC and AOC, by the lead | Y | Y |
| Final files with a short hash that proves which file went out | Y | Y |
| The files and workpapers download | Y | Y |
| AI and Ask Enpasse | ||
| Suggestions your lead accepts, edits or rejects | Y | N |
| Ask Enpasse, where every claim opens its source | Y | N |
| Zero model calls, by test | N | Y |
| Your own assistant | ||
| Connect Claude or ChatGPT to one assessment | Y | N |
| Off by default; the lead turns it on after telling the client | Y | N |
| History lists what was sent, for whom and when | Y | N |
| Security and records | ||
| Client files never train models | Y | Y |
| Every decision carries a named person | Y | Y |
| Recorded credentials decide who may lead or review | Y | Y |
| Retention answered once for the firm | Y | Y |
No. These are launch prices from general availability in December 2026, and prices will change after launch. Your firm's order form sets what it buys.
Enpasse is in private preview now. Apply for early access to join it; access widens at general availability in December 2026.
Each assessment run with AI, in Auto or Assisted, counts as one Report on Compliance, and its Attestation of Compliance comes with it. Corrections and new versions stay in the same assessment. Delete it or switch it to Without AI before any AI work starts, and it no longer counts.
A Report on Compliance run Without AI has no per-report charge and no limit. Every step works with zero model calls; your firm pays only for its seats.
Work never stops. Admins see it on the Plan page, and Enpasse follows up; no count stops an invitation, a credential change or work in progress.
The credential your admins record decides it: a member with a QSA or Associate QSA credential takes a QSA seat, and other members take a non-QSA seat. People an assessment is shared with add no seat.
Not yet. SAQs are coming soon; today Enpasse covers the Report on Compliance and the Attestation of Compliance for merchants and service providers.
Your firm buys its plan on an order form, outside the product. Enpasse takes no payment and asks for no card in the app; admins see the plan, its term and the seats in use on the Plan page.
Yes, for larger firms. Write to hello@enpasse.ai or apply for early access, and we will talk it through.