Frameworks
Map compliance work across 63+ frameworks so teams can manage requirements without rebuilding each program.
Free
•1 Framework
Essentials
•1 of 63+ Frameworks
Pro
✓Unlimited
Pricing
Built for MSPs turning compliance pressure into a recurring vCISO or CaaS motion.
Free
Best for MSPs opening compliance conversations and proving demand before launching a paid vCISO or CaaS motion.
$0/tenant
Prospect unlimited clients
Run baseline assessments, show clients where they stand, and create a low-friction path into paid compliance work.
- Assess prospect clients against a selected framework
- 10 policies, 10 risks, and 10 evidence items per client
- Professional progress report output
- ScalePad integrations available from day one
Essentials
Best for MSPs productizing Compliance as a Service and closing recurring compliance contracts.
$99/tenant
Single-framework depth
Turn compliance into a managed service with structured reviews, unlimited policy and risk management, and reporting clients can take seriously.
- Assess each client against any one framework from the 63+ library
- Unlimited policies, risks, and evidence items per client
- Board-ready compliance reporting
- Unlimited admin users and MSP-level integrations
*3 tenants minimum
Pro
Best for MSPs serving regulated clients or delivering mature, audit-ready vCISO programs.
$299/tenant
Multi-framework and audit-ready
Run the full ControlMap motion with automated evidence, trust reporting, vendor risk workflows, and the audit tooling needed for high-stakes compliance delivery.
- ControlMap Copilot AI-assistant
- Multi-framework management with crosswalks
- Automated evidence gathering and vendor risk workflows
- Trust Portal and advanced transparency reporting
- CMMC-specific SSP and SPRS tools plus audit support
ControlMap pricing is per-client, per month.
Compare plans
Choose the ControlMap plan that matches your compliance motion
Start free with core compliance workflows, move into Essentials when the service becomes repeatable, and use Pro for client-facing portals, audit readiness, and deeper compliance operations.
Core
Integrations
Connect compliance data across ScalePad, MSP systems, cloud apps, and client environments as the program grows.
Free
•ScalePad Integrations
Essentials
•+ MSP Integrations
Pro
✓+ Client Integrations
Asset management
Maintain the asset context needed to connect systems, vendors, controls, risks, and evidence.
Free
✓Included
Essentials
✓Included
Pro
✓Included
Admin users
Give compliance contributors the right access to manage programs without bottlenecking ownership.
Free
•2 Admins
Essentials
✓Unlimited
Pro
✓Unlimited
Assessment
Assessments
Evaluate compliance posture, surface gaps, and turn framework requirements into actionable remediation work.
Free
✓Included
Essentials
✓Included
Pro
✓+ Crosswalks
Policies and templates
Start faster with reusable policy and procedure templates that support consistent compliance operations.
Free
•10 Documents
Essentials
✓Unlimited
Pro
✓Unlimited
Management
Evidence management
Collect, organize, refresh, and link evidence to controls so audit readiness is easier to prove.
Free
•10 Evidence Items
Essentials
✓Unlimited
Pro
✓+ Bulk Refresh
Risk register
Track risks, owners, treatment plans, and status in the same system as your compliance program.
Free
•10 Risks
Essentials
✓Unlimited
Pro
✓+ Advanced Risk
Controls
Manage control requirements, mappings, ownership, and status across frameworks and compliance programs.
Free
-
Essentials
-
Pro
✓Included
CMMC/NIST tools
Support defense and security-focused programs with workflows aligned to CMMC and NIST expectations.
Free
-
Essentials
-
Pro
✓Included
Vendor management
Assess vendors, document risk, and keep third-party governance tied to controls and evidence.
Free
-
Essentials
-
Pro
✓Included
Reporting
Reporting and analytics
Turn compliance activity, risks, evidence, and control status into clear reporting for stakeholders.
Free
•1 Report
Essentials
✓Unlimited
Pro
✓+ Automation
Compliance dashboards
Monitor framework progress, gaps, risks, evidence health, and audit readiness from one view.
Free
•Limited
Essentials
✓Included
Pro
✓Included
Client compliance portal
Give clients a dedicated portal to review tasks, evidence, progress, and compliance status.
Free
-
Essentials
-
Pro
✓Included
White-label portal
Present client-facing compliance workflows under your brand for a more polished managed service motion.
Free
-
Essentials
-
Pro
✓Included
Audit
Audit readiness
Organize controls, evidence, policies, risks, and ownership into a cleaner path toward audit review.
Free
-
Essentials
-
Pro
✓Included
Audit support
Support third-party audit workflows with the structure, documentation, and evidence auditors expect.
Free
-
Essentials
-
Pro
✓Included
Trust portal
Share approved security and compliance posture with prospects, customers, and stakeholders without repetitive requests.
Free
-
Essentials
-
Pro
✓Included
AI
ControlMap Copilot
Use in-app chat to review evidence, draft compliance documents, analyze gaps, answer questionnaires, and move audit-readiness work faster.
Free
-
Essentials
-
Pro
✓Included
Pro includes everything in Essentials, plus the client-facing and audit-ready layer.
FAQ
ControlMap FAQ
Answers to common questions about frameworks, tenants, integrations, hosting, and audit readiness.
How quickly can ControlMap help us get audit-ready?
Timelines vary by framework, scope, and the maturity of your current program. ControlMap helps accelerate audit readiness by organizing frameworks, controls, evidence, policies, risks, and ownership in one compliance workspace.Can I use my own auditor?
Yes. You can use your own auditor. If you need help finding one, ScalePad can connect you with auditor partners familiar with ControlMap-supported workflows.What integrations does ControlMap support?
ControlMap integrates with 40+ common tools, including AWS, Azure, Google Cloud, Google Workspace, Okta, OneLogin, and Microsoft 365. It also integrates with Lifecycle Manager within the ScalePad suite.What frameworks does ControlMap support?
ControlMap supports 63+ regional, international, and industry-focused frameworks, including SOC 2, ISO 27001, HIPAA, GDPR, CMMC, and NIST.Where is ControlMap data hosted?
ControlMap supports hosting in the United States, Canada, European Union, or Australia. Partners choose their preferred hosting region after purchase.Is GovCloud hosting available?
Yes. GovCloud hosting is available for partners that need it and can be selected during checkout or purchasing.Does each client need a separate tenant?
Yes. Each client starting a compliance program needs its own tenant. Packages start with one tenant, and additional tenants can be added as your MSP and client base grow.