No quote needed
Prices, in public
Two steps and the tool you run afterwards. The way in is free, every price is published, nothing is monthly, and whatever you pay first comes off the total.
Updated 7 September 2026
Two steps, and the watching you do yourself
Most of the firms we work with have two dates to worry about and nobody whose job it is to worry about them. So there are two pieces of work, one for each date, and a one-off set-up that leaves your own people watching your own product.
You can buy the first without the second. Whatever you pay for the first comes off the second, in full. Nothing here is a monthly plan and nothing renews by itself.
Start here
Get ready to report now
Reporting Ready
€3,500per unit
The duty to tell an authority about a vulnerability that is being used against your product has already started. This makes you able to do it.
- a published way for outsiders to report a problem to you, and a person who answers
- a written plan keyed to the legal clocks, practised once with your team
- a list of everything inside your product, produced by your own build
- the paperwork folder started, holding the evidence you have just made
Be ready for the market later
Market Ready
from €14,900per unit
The rest of the law lands later, and it is the bigger job: the requirements met, the file written, the declaration ready for you to sign as the manufacturer.
- every essential requirement checked against your product, and a plan for the gaps in the order they matter
- how you build and how you ship updates, written down and running
- the technical file in the structure the law asks for
- a declaration of conformity drafted for you to complete and sign
Set up the watching and own it
Monitoring set-up, in your own account
€1,500per unit
New weaknesses turn up in other people's code every week, and some of them will be in yours. Somebody has to be looking, and under this law that somebody is you. We make sure you can.
- a tool chosen with you, and why, written down as your decision
- set up in an account you own, against your own component list
- the alerts routed to your own people, not to us
- one page telling them what to do when an alert arrives, and the keys
Prices exclude VAT. French customers pay French VAT. EU business customers outside France account for VAT under the reverse charge. No EU VAT applies outside the EU.
Start without committing to anything
Nothing at the front of this costs much, and nothing at the front of this is wasted.
Check whether the law covers you
Automated scope check
Free
Five minutes on this site. Whether the law reaches your product, which group it falls into, and which dates apply to you. No account, no call, nothing to sign, and the answer is yours to keep.
Know where you stand
Scoping and classification memo
€900credited in full
The same job done properly, in writing, with an engineer's name on it: what we found, why, the dates that apply to you and the three things to do first. Half of what people buy this for is having something to show a customer who has started asking.
Everything you pay comes off the total
There is one price for being ready for the market, and one rule about how you get there. Whatever you have already paid us comes off it in full: not a percentage of it, not a voucher for it, the whole of it.
So the list below is not four prices. It is one price and one subtraction — and it is the reason the small step at the front is a sensible thing to buy first.
Everything you have already paid us comes off the next step in full, within 60 days. Buying the small step first costs you nothing.
- Scoping and classification memo€900 paid on the way in€14,000left to pay for Market Ready
- Reporting Ready€3,500 paid on the way in€11,400left to pay for Market Ready
- Scoping and classification memo and Reporting Ready€4,400 paid on the way in€10,500left to pay for Market Ready
- Engineer-led gap review€4,900 paid on the way in€10,000left to pay for Market Ready
You can also take that last step as two invoices in two budget periods: €5,900 then €5,500. Same total, two signatures, and nothing extra for splitting it.
You watch your own product
There is no monitoring plan on this page, and that is on purpose.
Under this law the manufacturer watches the product, and the manufacturer is you. Nobody can hold that duty for you, so the useful thing we can do is make it easy: pick the tool with you, set it up in an account with your name on the bill, point it at your own component list, send the alerts to the people who would act on them, and write the page they follow when one arrives. Then we hand over the keys and step back.
That is cheaper for you than any watch a consultancy could sell you. Somebody else's engineers reading your alerts is people's time on a retainer, month after month, and it costs what people's time costs. A tool you own costs a fraction of it, does the same looking, and carries on doing it whether or not you ever hear from us again. It is one fee, once, and then it is yours.
We do not watch your product, we are not sent your alerts, and nobody here is on call. We take no referral fee, commission or partner status from any tool we recommend, so what we suggest is what suits you and nothing else. We say so in writing each time, and the choice goes in your decision log as yours.
Monitoring set-up, in your own account
€1,500per unit
We help you choose a monitoring tool, set it up in an account you own against your own component list, route the alerts to your own people, show you how to use it and hand over the keys. You own the tool and the account and you watch your own product, because you are the manufacturer. We do not watch it for you and we are not sent your alerts.
Where this one stops
One technical-documentation unit, one component list, one tool, one set of alert routes, in an account you own and pay for. The tool's own subscription is yours and is not included. We hold your credentials only while we are setting it up and give them back at hand-over. Anything else is quoted separately.
The second and later units of a set-up cost 40% of the price, because by then it is the same tool and the same alert routes with a different component list.
There is no monthly plan behind it and nothing renews by itself: one fee, once, and then the tool and the account are yours.
What one price is for
We price per technical-documentation unit: one product family, one codebase, one release train. Products built from the same codebase and released together are one unit. A product with its own codebase or its own release train is a separate unit.
Three variants of the same controller, built from one repository and released together, are one unit and are quoted once.
That matters more than it sounds. If you sell the same controller in three housings, built from one repository and released together, that is one unit and one price. If you sell three genuinely different products, built by different people from different code, that is three. We ask two questions to tell them apart — is it one codebase, and does it ship on one release train — and if the answer is yes twice, you do not pay three times.
The law asks you to draw up technical documentation for the product. The manufacturer draws up the technical documentation with the content set out in Annex VII before placing the product on the market and keeps it up to date during the support period.[Art. 31; Annex VII] Our unit is the file we build with you. Whether one file can properly cover several of your products is a question about your products, and it is one of the things the scoping memorandum answers.
What the price does not include
Saying this plainly is easier for both of us, and it is the reason the price can be a fixed number instead of a range.
We are engineers doing a defined piece of engineering. So we do not break into your systems to test them, we do not certify anything and we never sign your declaration. We do not rewrite your product or fix what the scanners find: we open the change, your engineers review it and merge it.
We do not watch your product for you, we are not sent your alerts, and nobody here is on call at any hour. We do not give legal advice or decide what your obligations are, and we send nothing to an authority for you in any circumstances. A monitoring tool's own subscription is yours and is not in our price. And nobody can promise that every weakness in a product will be found, so we do not promise it either.
You remain the manufacturer throughout. That is the law rather than our contract, and it is the right way round: the responsibility sits with the people who can act on it.
The whole list is on the services page.
Why it costs what it costs
Fixed prices, because the scope is fixed and the tools are ours. Your component list, your reporting policy, your handling procedure and your build changes are produced from your own repository by software we wrote. An engineer then reads every line and puts their name on it. The machine does the volume; a person does the judgement; you are paying for the judgement — which is why a company of fifteen people can buy the whole advisory rather than the part of it it could otherwise afford.
Someone else may pay part of this
Readiness work for smaller companies is co-funded in several places. National and regional schemes cover part of the cost of outside expertise, and the paperwork is usually short. European Digital Innovation Hubs do not hand out the money themselves, but they will tell you which scheme in your country does. More than 150 European Digital Innovation Hubs offer test-before-invest, training and funding-advice services to SMEs across the Union.[Network catalogue]
We check what is open where you are in every quote. Tell us the country and the headcount.
If your company is outside the EU
The law follows the product into the EU market, so it reaches you in the same way as a maker in Munich. One price list, in euros, for every country: the same number in Athens, Manchester and California.
Working out which role you are in — manufacturer or importer, and who carries which duty — is an extra hour of work for a seller based outside the EU, and we do not charge for it. Under this law an EU representative is optional, unlike some other regimes. A manufacturer may appoint an authorised representative in the Union by written mandate; the Regulation does not oblige non-EU manufacturers to appoint one.[Art. 18] We are not your representative and never act as one. If you decide you want one, we can introduce an established provider and tell you what that market charges.
The time difference costs you nothing, and that is not a courtesy: it is how the work is built. Almost all of it is written, so your team answers when it suits them and we work when it suits us. Calls are in European working hours, which is early morning on the American west coast and late evening in east Asia — so we keep them for the first conversation and the occasional judgement call, and nothing in the work waits for one.
Common questions
Who is responsible for compliance?
You are. You remain the manufacturer and we help you get there. We commit our effort and skill, not a result: we do not guarantee that an authority will find your product compliant, we do not sign declarations, we do not put the CE mark on anything, and we never send a report to an authority on your behalf in any circumstances.
Do you sell a monitoring plan?
No, and we would rather explain why than let you find out later. A watch run by a consultancy is people's time on a retainer, and it is expensive for as long as you keep paying for it. You can buy a monitoring tool for a small fraction of that and own it outright. So we do the set-up once — the tool chosen with you, configured in your account, pointed at your component list, alerting your people — and then it is yours. We are not sent your alerts, we owe you no response time, and nobody here is on call. The duty was always yours; this is the cheapest honest way to meet it.
Do we have to be on calls?
No, and that is by design. We are two engineers, and the way we keep a fixed price fixed is that the work runs in writing: one form you fill in when it suits you, a shared tracker, and written approvals you can give at nine in the evening. Written questions get an answer within one working day. Calls are available in European working hours and we are glad to have them — for deciding something, or because you would rather talk. Nothing in the work waits for one.
Do you discount?
Two rules, both published, and nothing else. Everything you pay us comes off the total, on the terms set out above. The second and later units of a monitoring set-up cost part of the price, because the work on them is mostly repetition — the exact rule is on the card above. If you already hold ISO 27001 the governance work goes faster and we will say so in the quote, but it is not a separate discount and a certificate for your organisation is not evidence for your product — see does ISO 27001 cover this?.
What happens if a deliverable is wrong?
Tell us inside the ten-business-day acceptance period and we correct it and deliver it again at no charge. For twelve months after delivery the same free correction covers a deliverable that falls short of the skill and care we owe — including one your own customer or a distributor turns down for a reason inside the agreed scope. That is Article 7.4 of the services agreement. What it never covers is the view a market surveillance authority takes of your file: nobody can warrant that, and Article 13.4 says we do not. The full wording is on the services page.
How far does your liability go?
Our total liability under a contract is capped at what you paid under it in the twelve months before the event. We do not accept liability for regulatory fines, recall costs, third-party claims or losses from a security incident affecting your products. The wording is in our general terms and in the agreement you sign.
Do you use AI on our code?
Yes, for parts of the work, on tools hosted in the EU. The facts — what is in your software, which weaknesses affect it, which group your product is in, which dates apply — come from published rules, never from a model. Every document is released by a named engineer, and your code is never used to train or test a model. How we use AI has the detail.
How does billing work?
Prices exclude VAT: French customers are invoiced with French VAT, other EU business customers under the reverse-charge mechanism, customers outside the EU without VAT. Every package is a one-off fee, so there is nothing recurring to invoice and nothing that renews by itself: a statement of work ends when you accept the last deliverable. Larger packages are half on signature and half on delivery, smaller ones once in full, and the threshold is written into your statement of work. Invoices are payable within 30 days by bank transfer.
Start with the free check
It takes about five minutes, it costs nothing, and it tells you whether any of this applies to you.