What is in each package, and what is not
The two you can buy today, side by side and in full. The exclusions and what we need from you sit here rather than in a contract you read after paying.
Work we do, but not through this checkout yet
These run as scoped engagements rather than fixed-fee purchases. Same team and the same way of working; the difference is that we write the scope with you first.
OneTrust Assessment Automation
A repeatable assessment process and a first data inventory, using the platform’s standard questionnaires.
OneTrust Third-Party Risk Management
Vendor intake with standard risk tiers and one review workflow, so security questionnaires stop holding up procurement.
Already running OneTrust?
Not published yet
An audit of an existing tenant is work we do. Its scope, its duration and its price are not published here yet, because they are not stood up as a standard offering in our statement of work, and we do not publish a scope we cannot hold ourselves to.
In the meantime the free extension will tell you a great deal about your consent configuration, at no cost and without us seeing anything. Check your banner. If you want the full picture, talk to us and we will scope it.
Getting live is the easy part. Then the questions start.
You will have questions the week after, and the month after, and when someone adds a tag nobody told you about. FLLR Care is where we stay on and answer them.
- Ongoing monitoring and re-testing of the domains we set up
- Questions answered by the practitioners who did the build
- Configuration changes handled before they turn into findings
- Runs alongside your platform agreement and ends when it does, so there is nothing new to sign off
Priced as an uplift on the implementation, co-termed with your platform agreement. Nine in ten clients keep it.
Terms still with counsel
Care is a recurring charge accepted at checkout, so four things belong here and none of them should be written before it is settled:
- The cancellation right, and the notice period
- Whether the rate can move at renewal
- The opening term, which is partial when it co-terms to an agreement already in flight
- What happens to monitoring when the platform agreement ends
Buying before they are published? Ask us and we will answer in writing first.
Great engagement, so much knowledge, and a great job of teaching.
The money questions
What the fee covers, how you buy it, and what happens if your setup is not standard.
One price for a published scope, agreed before anything starts.
Every package is a fixed fee against a scope that is written down before you pay. Nothing moves unless you ask for something outside it, and if your setup turns out not to be standard, what you paid is credited toward the custom engagement instead.
What does fixed fee cover?
One price for a published scope, agreed before anything starts. Nothing moves unless you ask for something outside that scope.
How do I buy it?
On this site, by card or ACH. You pick your services, the price is shown at checkout before you enter any payment details, you accept our standard terms there, and we start. There is no quote to wait for and no procurement cycle to sit in.
Do I need a OneTrust license first?
Yes, for the module being set up. You buy that from OneTrust directly and it sits outside our fee. If you are still evaluating, the implementation page tells you what the work involves and how long it takes, so you can plan around it.
Can we redline the contract?
No, and that is deliberate. The standard price and the short timeline exist because the agreement is standard too. If you need changed terms we will scope a custom engagement instead, and credit what you have already paid toward it.
What if our setup is more complicated than standard?
Then we convert to a custom engagement and credit what you paid against it. It is written into the statement of work, so finding out mid-design costs you nothing.
Does this make us compliant?
No. Anyone promising you that is overselling. We do the technical work and hand you evidence of what changed and what we tested. The compliance call belongs to your counsel.
- Your OneTrust license is separate and bought directly from OneTrust.
- If your setup turns out to be non-standard, we credit what you paid toward the custom engagement.
Scope on this page is stamped against statement of work v2026.1. If what you read here and what you read in the statement of work ever differ, the statement of work is the one you signed and it governs. Tell us and we will fix the page.