Groundset
A place for the program to live.
Groundset is a standalone compliance platform for companies that need a practical security and compliance foundation. It can also serve as the operating environment behind a 22 Compliance engagement.
Public price
$2,997
A practical compliance foundation without starting with a large enterprise GRC commitment.
What it holds.
Assessments
Controls
Policies
Framework readiness
Compliance documentation
Trust materials
Structure matters because compliance work compounds. Documentation scattered across drives and inboxes has to be rediscovered every time someone asks a question.
Groundset isn't the service.
It's where the service can operate.
The value of 22 Compliance is the people and operating ownership behind your compliance program. Groundset gives that work a structured home when you don't already have one.
A platform can hold your policies. It cannot decide that a policy no longer matches how you operate, or notice that the person who owned a control left in March.
Already using another platform?
That's fine.
22 can work with the compliance environment your company has already adopted. We do not require a migration, and we do not claim partnerships or integrations we have not built.
Three ways companies use it.
01
Start with the foundation
Use Groundset on its own to get assessments, policies, controls, and documentation into one structured place.
02
Expand into a framework
Grow the same foundation into SOC 2 or other framework readiness work as customers begin asking for it.
03
Add 22 when you need an owner
Bring in 22 Compliance when the program needs operating ownership rather than another system to maintain.
You can stop at any of them. Plenty of companies run Groundset without ever engaging 22, and plenty engage 22 without ever touching Groundset.
Common questions
Do we have to use Groundset?
Can 22 work with Vanta, Drata, or Secureframe?
What does Groundset actually hold?
How much is Groundset?
What happens to our data if we stop working with 22?
The system is the easy part.
Whichever platform you land on, the question is who is accountable for the work inside it.