Suite · 5 apps
Compliance Suite
Five registers that record GDPR requests, whistleblowing reports, NIS2 and CRA reporting deadlines, complaints and packaging data, on your own server.
5 apps, $299 once: $435 if bought separately, so you keep $136.
Privara
Confida
Complia
Packora
CyresoraWhat's inside · 5 full apps
What the same jobs cost rented, year one
AllVoices
$3,300.00
in year one at $275.00 a month. The suite covers it with Confida.
Read 2026-09-03 · source
HappyFox
$288.00
in year one at $24.00 a month. The suite covers it with Complia.
Read 2026-09-03 · source
The suite is $299 once. The figures above are the vendors' published monthly prices multiplied by twelve, nothing else.
Why this suite
Compliance duties arrive one law at a time — a DSAR inbox here, an EU whistleblowing channel there, a complaints register, NIS2 and CRA reporting clocks, packaging EPR reports. Each one alone is small; renting five SaaS tools for them is not.
- Five separate subscriptions for five record-keeping duties
- Sensitive compliance data spread across seven vendors' clouds
- One suite: every tool self-hosted, bought once, running on your own box
Before you buy
What runs it
Plain PHP 8.1+ (tested on PHP 8.3) with MySQL, MariaDB or SQLite, on ordinary shared hosting or the smallest VPS. Each app has its own two-minute web installer and its own database.
Try before you pay
Every app above has a live demo on sample data, with no sign-up. The demos run the same builds you download.
Your data, your source
The full PHP source of every app. Your data stays on your server, with CSV export and one-click backups in each app, and nothing connects back to us.
What each app deliberately doesn't do
Each app's own limits apply unchanged when it arrives as part of the suite.
Privara
- No automated data-discovery across systems — it tracks requests, it does not scan your databases for personal data
- Not a full GRC suite: no policies, DPIAs, breach management, or staff training records
- Not built for multi-tenant SaaS platforms needing isolated per-customer workspaces
- Using Privara doesn't itself make you GDPR-compliant — legal sufficiency of your responses is your responsibility
Confida
- Single organization per install (not multi-tenant).
- No supervisory-authority e-filing and no e-discovery platform.
- Handler email notifications deliberately carry no report content, and attachments never leave the server by email, webhook or calendar feed.
- Attachments are photos only (JPEG/PNG, metadata stripped, encrypted at rest); documents are refused because their author metadata cannot be reliably removed.
- Anonymity is an application guarantee, not a network or hosting guarantee — HTTPS and sane server logging are on you.
- Written intake only. Article 9(2) of the Directive lets a channel be "in writing or orally, or both"; Confida is the written kind — there is no telephone or voice-message intake here, no dedicated screen for typing up a call, and no field recording that a report arrived orally. The physical meeting a reporter may request is a process you run, not software you install.
- Aligns with the EU Whistleblowing Directive's timers and workflow; it is not legal advice.
Complia
- Single-tenant: one organization per installation (your team shares it, with viewer / member / admin roles and invite links).
- Email goes through your own SMTP server, never ours. Acknowledgment reminders are optional and off until you switch them on; they are checked whenever someone opens the dashboard, and by a daily cron call on days nobody does.
- Not a case-management suite: each complaint can have one named owner and acknowledgment reminders, but there is no workload allocation, no escalation between people and no billing. Attachments and an append-only investigation log are in.
- English-language UI.
- A records aid, not legal advice; buying it does not make you compliant.
Packora
- US-state scope; no EU/Canada program logic and no PRO API integration.
- Fee figures are estimates from the rates and eco-modulation adjustments you entered — no minimums or mid-year schedule changes.
- You maintain the reference data (materials, deadlines, rates); verify with your PRO each cycle.
- One company per installation; your team shares it with roles.
- Annual granularity, matching the annual-report cadence.
- Reminders reach people, not portals: Packora never files, submits or logs in for you.
Cyresora
- Not legal advice, and not a scope determination — it records your determination and your reasoning, it does not make it
- NIS2 is a Directive — it models the Directive's own stages, not 27 national transpositions
- It does not file anything. No integration with the CRA single reporting platform or any national portal
- Not a vulnerability scanner and not a CVE feed — a register of what you are handling, not a discovery tool
- No SOC, no SIEM, no detection — the clock starts when you record that you became aware
- Single-tenant: one organization per installation
Suite questions
What exactly do I receive?
One checkout delivers 5 separate apps, each with its own license key and its own download link, all listed in one email and one order.
Are these the same apps sold one by one?
Yes: identical builds and licenses. The suite is a price on the set ($435 bought one by one), not a different edition.
Do the apps share one install or database?
No. Each installs on its own on your server with its own database; they don't depend on each other.
I already own one of these apps. Do I pay for it again?
No. Within 12 months of buying any app in this suite, what you paid for it is credited in full against the suite: write to support with the order email of the app you own and you get a one-time code for that amount, valid on this suite's checkout. One code per suite order; it never expires once issued.
Can I start with one app and add the rest later?
Yes. Every app is sold on its own, and the suite is a price on the set. If you later want the whole set, contact support with your existing order before buying the suite.
What happens on a refund?
A refund of the suite order revokes all of its license keys and disables its downloads: the whole set, together.
Which license do I need?
It comes down to how many installations you need. Running your own business on one site is the Single license. Running it on more than one site you own or operate is the Extended license, with no cap. Both cover every app in the suite.
Single license$299
One (1) domain or subdomain · One business, running it on one site.
- Install it on one domain or subdomain you own or operate
- Change the source however you like for that installation
- Run your own business on it commercially, client work included
- Re-download the current build any time from your buyer portal
- A second site, or an installation you hand to a client as theirs, needs the Extended license
- No reselling, redistributing or sublicensing the source
- Not for offering it to other people as a hosted service
Extended license$649
Unlimited sites you own or operate, plus up to 10 client installations (white-label included) · Agencies, and anyone running it on more than one site.
- Everything the Single license grants
- Install it on as many domains as you own or operate — no cap on the number
- Up to ten client installations, one per client project, handed over or hosted for each client; for more, buy another Extended license
- White-label: remove or replace the product name and logo in the screens of client installations
- Still no reselling or redistributing the source itself
- Running it as a multi-tenant service others sign up for needs a SaaS agreement
Every download carries the full terms as LICENSE.txt. The complete wording is on the terms page.
Compliance Suite$299 once · 5 apps
Buy