Plans & Pricing — Innovations GRC Managed Hosting Plans

Plan 01 · Governed hosting

Foundation

One production site, hosted and operated to a documented standard, with a launch-ready build and the monthly evidence to prove the controls ran. For businesses that need control without an in-house engineer.

$129/ month

Billed monthly · cancel any time

Start with Foundation

Infrastructure & controls

Managed cloud hosting for 1 production site, isolated 2 vCPU / 4 GB container, 40 GB NVMe, 1 TB transfer, in the EU, Middle East or US region you choose
1 domain registered or transferred in your name, DNS with DNSSEC, auto-renew monitored
Global CDN, edge caching, automatic TLS, HTTP/3
Daily encrypted off-site backups, 14-day retention, quarterly restore drill with a written result
Managed firewall, baseline WAF rules, malware scanning, OS and CMS patching with a patch log
Uptime monitoring every 60 s from 3 regions, TLS and domain expiry alerts
Named access roles, 2FA recommended on every admin, change log kept
5 business mailboxes with SPF, DKIM and DMARC configured

Engineering, growth & reporting

Launch-ready website build: up to 6 pages on a maintainable CMS, performance-tuned
2 hours of engineering changes per month
Analytics installed with a consent banner and basic conversion events
Monthly evidence pack: uptime, backup and restore results, patch log, access list

SLA99.9% uptime

SupportEmail · next business day

ResidencyYour choice

Sites1

Most chosen

Plan 02 · Dedicated infrastructure

Assured

Dedicated resources, a staging pipeline, hardened security, access reviews and the measurement stack. For companies acquiring customers online that answer to clients, insurers or a board.

$449/ month

Billed monthly · cancel any time

Start with Assured

Infrastructure & controls

Everything in Foundation, plus:
Dedicated server, 4 vCPU / 8 GB, 160 GB NVMe, 5 TB transfer, up to 5 production sites
Staging environment per site, git-based CI/CD deployments with one-click rollback and a release log
Managed WAF with custom rules, DDoS mitigation, rate limiting, bot filtering
Hourly backups, 30-day retention, managed database with its own backup stream, monthly restore drills
Redis object cache, image pipeline, Core Web Vitals budget in the deploy pipeline
Monitoring from 6 regions plus real-user monitoring, 30-day log retention
Weekly vulnerability scans, file-integrity monitoring, 2FA enforced, quarterly access reviews documented
25 business mailboxes, transactional email relay, DMARC reporting

Engineering, growth & reporting

Website or store build up to 15 pages, or migration and rebuild of an existing site
6 hours of engineering changes per month
Analytics stack: GA4, server-side tag manager, consent mode, conversion tracking audited
CRM and email-automation platform set up and integrated with your forms and store
Quarterly technical SEO audit with fixes applied by us
3 landing pages per month for campaigns
Monthly evidence pack plus a 30-minute review call

SLA99.9% uptime

SupportPriority · 4 h response

ResidencyYour choice

SitesUp to 5

Plan 03 · Full operation

Sovereign

Multi-node infrastructure, custom applications, security operations and audit support. Your entire digital operation, designed, hosted, run and documented by one team.

$1,299/ month

Billed monthly · cancel any time

Start with Sovereign

Infrastructure & controls

Everything in Assured, plus:
Multi-node architecture: load-balanced application tier, separate database node, 8+ vCPU / 32 GB pooled, 500 GB NVMe, unlimited sites
Point-in-time database recovery, 90-day retention, documented and tested disaster-recovery failover
24/7 monitoring with on-call engineer, synthetic user journeys, 30 s checks
Security operations: quarterly penetration test coordinated and remediated, SSO, audit logs, access reviews
Audit support: evidence on demand for your ISO 27001, SOC 2 or customer security questionnaires
Preview environment per branch, infrastructure as code, secrets management
100 business mailboxes, dedicated sending domain and IP reputation management

Engineering, growth & reporting

Custom web application, customer portal or integration layer, scoped and built, then maintained
20 hours of engineering per month, roll-over up to one quarter
API integrations: payments, ERP, CRM, logistics; event pipeline and data warehouse with dashboards
Full growth retainer: paid media management (Google, Meta), 4 SEO articles per month, email and automation campaigns
Unlimited landing pages within engineering hours
Dedicated account engineer, monthly review, quarterly roadmap

SLA99.99% uptime

Support24/7 · 1 h response

ResidencyMulti-region option

SitesUnlimited

Prices exclude VAT where applicable and are billed in USD. Third-party usage is passed through at cost with no mark-up: domain renewals beyond the included domain, advertising spend, premium SaaS licences, and transfer or storage beyond the plan's allocation. Annual billing is ten times the monthly price, invoiced up front. See the refund policy and SLA. We do not issue compliance certifications; we operate the controls and give you the records.

Line by line

Everything, compared.

If something you need is not on this list, it is either a pass-through cost or an add-on, both of which are listed further down.

Feature	Foundation $129 / mo	Assured $449 / mo	Sovereign $1,299 / mo
Infrastructure
Compute	2 vCPU · 4 GB isolated	4 vCPU · 8 GB dedicated	8+ vCPU · 32 GB, multi-node
NVMe storage	40 GB	160 GB	500 GB, expandable
Monthly transfer	1 TB + CDN	5 TB + CDN	Unmetered, fair use
Production sites	1	5	Unlimited
Data residency EU, Middle East or US	Your choice	Your choice	Multi-region option
Global CDN, HTTP/3, auto TLS	Included	Included	Included
Domain + DNS with DNSSEC	1 domain	5 domains	Unlimited
Staging environment	On request	Per site	Per branch
CI/CD with release log		Included	Included + infrastructure as code
Load balancing, failover			Included, tested
Security, backups & controls
Managed firewall + baseline WAF	Included	Included	Included
Custom WAF rules, DDoS mitigation, rate limiting		Included	Included
Patching with patch log	Included	Staged first	Staged first
Vulnerability scanning	Monthly	Weekly + file integrity	Weekly + quarterly pen-test
Backups	Daily · 14 days	Hourly · 30 days	Point-in-time · 90 days
Restore drills, documented	Quarterly	Monthly	Monthly + DR failover test
Access control	Named roles, 2FA recommended	2FA enforced, quarterly access review	SSO, audit logs, quarterly access review
Monitoring	60 s · 3 regions	60 s · 6 regions + RUM	30 s · 6 regions + RUM + synthetic
Audit support evidence for ISO 27001, SOC 2, questionnaires		On request	On demand
Email & domains
Business mailboxes	5	25	100
SPF / DKIM / DMARC configured	Included	+ DMARC reporting	+ dedicated IP reputation
Transactional email relay	Shared	Dedicated	Dedicated domain + IP
Engineering
Website build included	Up to 6 pages	Up to 15 pages or store	Custom app / portal, scoped
Engineering hours per month	2	6	20, roll-over one quarter
Performance budget in pipeline		Included	Included
API integrations, data pipeline		Within hours	Included + warehouse + dashboards
Growth layer
Analytics	GA4 + consent banner	GA4 + server-side tagging + consent mode	Full measurement plan, warehouse
CRM + email automation setup		Included	Included + campaigns run
Technical SEO		Quarterly audit + fixes	Continuous + 4 articles / mo
Landing pages		3 / month	Unlimited within hours
Paid media management ad spend passed through			Google + Meta
Support, SLA & reporting
Uptime SLA with credits	99.9%	99.9%	99.99%
Response target	Next business day	4 h, 08:00–20:00	1 h, 24/7
Channels	Email	Email + shared channel	Email + channel + phone + on-call
Monthly evidence pack	Included	Included + review call	Included + monthly review + quarterly roadmap
Named engineer	Yes	Yes	Dedicated account engineer

Add-ons

When one line is not enough.

Add-ons are billed with your plan and can be removed at the next billing date. Anything not listed is quoted in writing before work starts.

+ $29 / mo

Additional site

Another production site on the same infrastructure, with its own staging and backups.

+ $4 / mo

Additional mailbox

Per mailbox beyond the plan allocation, on the same email platform.

+ $110 / hr

Engineering hours

Beyond the monthly allocation, in blocks of five, tracked and reported.

+ $160 / mo

Managed database node

Separate database server with replication, for Foundation or Assured clients who outgrow the shared node.

+ $90 / mo

Extra 100 GB NVMe

Storage expansion including backup coverage.

+ $220 / mo

Additional region

Second region with replicated infrastructure for latency or residency.

+ $130 / mo

24/7 on-call for Assured

Extends Assured support to round-the-clock with a one-hour response target.

Quoted

Penetration test

Third-party test coordinated and remediated by us, scoped per application.

Billing & contract questions

The small print, in normal language.

How do I pay?

By card through a secure hosted checkout, or by bank transfer for annual plans. After you submit the order form we confirm scope within one business day and send the payment link or invoice. Your plan starts when payment clears, and onboarding begins the same day.

Is there a minimum term or setup fee?

No setup fee. Monthly plans renew monthly and can be cancelled before any renewal. Annual plans are paid up front at ten times the monthly rate and renew annually. Migration and the initial build are included in the plan price.

What is in the monthly evidence pack?

Measured uptime, backup runs and restore drill results, the patch log, the current access list and any changes to it, security scan findings and their status, and changes deployed. It is written so an auditor, insurer or customer security team can read it without us on the call.

Does this make us compliant with ISO 27001, SOC 2 or GDPR?

No service can make a company compliant on its own, and we do not issue certifications. What we do is operate the infrastructure controls those frameworks expect, keep the records, and give you the evidence for the parts of an audit that concern hosting, backups, access and change management. The rest of compliance is policy, people and process on your side.

Can I change plans?

Upgrade at any time; the difference is pro-rated to your billing date and the additional infrastructure is live within 48 hours. Downgrades take effect at the next renewal so that the current period's included work is honoured.

What is the refund policy?

14-day money-back guarantee on the first payment of a first plan, with the exception of third-party costs already incurred on your behalf such as a domain registration. Full terms are in the refund policy.

Who owns the website, the code and the accounts?

You do. Hosting, registrar, DNS, CDN and email accounts are created in your company's name. Code lives in a repository you own. Custom work is assigned to you on payment. We hold delegated access that you can revoke, and the access list in your evidence pack shows exactly who holds what.

Do you charge VAT?

Where we are legally required to. Business clients who supply a valid VAT or tax registration number are invoiced accordingly. Prices on this page are shown before tax.

Not sure which plan? Start with the audit.

We will tell you which tier your traffic, risk and reporting obligations actually need. Sometimes the answer is Foundation.

Start a plan Request an audit