SEE MATPROOF ON YOUR STACK — BOOK A 30-MINUTE DEMO

free tool · no login

What does ISO 27001 actually cost you?

Seven questions. You get the auditor's fee, the internal days it takes per team, and the full three-year cost — priced at labour costs for your country, not a generic average.

Which country are you certifying in?
How many employees do you have?
How many core processes (products or services) go in scope?

Count one per independent service or product. A SaaS tool plus its hosting is one; two unrelated platforms are two.

How many sites?
How long has the company been operating?

Older companies carry more legacy structure and undocumented process, which shows up as audit effort.

How many legal entities?
Where do you stand today?
Internal day rate: €340

Your estimated ISO 27001 cost

First year

€31,000 – €59,500

Three-year cycle

€56,000 – €102,000

External auditor, initial certification€8,000 – €10,000
Surveillance audit, years 2 and 3€5,500 – €6,500
Internal effort68 – 146 days

Want the full breakdown?

Enter your email and we'll send the per-team day breakdown, the three-year view and the comparison as a report you can forward to your board.

We use this to send your report and occasional compliance updates. Unsubscribe any time.

Day rate source: Estimated — this country is not covered by the Eurostat series. Adjust the day rate if you know better. (ONS ASHE 2025 + Eurostat sector ratio, 2025)

These figures are an orientation for budget planning, not a quote. Actual cost depends on your scope definition, your certification body and the state of your existing documentation. Matproof's effect on internal effort is an estimate based on typical projects, not a guarantee. The external auditor's fee is set by the certification body and is shown unchanged in both columns.