Services

What it costs and what it covers

Four priced steps for analysis and build, each useful on its own — most clients start with a review and decide from there. Risk and compliance work and ongoing operation are quoted against an agreed scope.

Let's understand the challenge

A 30-minute conversation about your business, the problem you are dealing with, and whether we are the right people to solve it.

From €300

Process Review

Understand what is slowing the business down.

A focused look at one process to find the bottlenecks and the improvements available immediately.

  • One discovery workshop
  • Review of one existing process
  • Identification of key bottlenecks
  • Practical improvement recommendations
  • Follow-up discussion
Recommended

From €700

Process Improvement Plan

Get the roadmap before spending on development.

A structured analysis and redesign of the process, including where automation genuinely pays off and where it does not.

  • Up to three stakeholder interviews
  • Current-state process analysis
  • AS-IS and TO-BE process design
  • Prioritised improvement opportunities
  • Automation recommendations
  • Implementation roadmap

From €1,500

Build & Automate

Turn the plan into something that runs.

Design and implementation of the solution itself — workflow automation, integrations, dashboards, internal tools or custom software.

  • Requirements definition
  • Solution design
  • Development and configuration
  • Testing and implementation
  • Basic documentation
  • Handover session

Final price depends on agreed scope, complexity and functionality.

From €300/month

Ongoing Support

Keep improving after launch.

Continuous support for what is already running: technical changes, small improvements and advice as the business shifts.

  • Up to 10 hours per month
  • Small improvements and changes
  • Technical assistance
  • Business and technology consultation
  • Monthly summary of work done

Includes up to 10 hours per month. Additional work at €40 per hour.

Need something different?

For smaller tasks, shifting requirements or work that does not fit a package, we also work hourly.

€40 per hour

All prices are starting prices and exclude VAT and third-party costs such as hosting, software licences, paid APIs and external services. A final quotation, timeline and list of deliverables follows once the scope is agreed.

What each practice covers

The ladder above prices analysis and build. Technology risk work and ongoing operation are scoped on the same free call and quoted against the agreed scope.

Business analysis & consulting

Understanding how the work actually happens, and what the better version looks like.

Process analysis

  • Process mapping and AS-IS documentation
  • Bottleneck and handover analysis
  • Data and information requirements

Design and planning

  • Target operating models
  • Ownership and responsibility models
  • Prioritised improvement roadmaps

Performance measurement

  • KPI and OKR frameworks
  • Service performance assessment
  • Stakeholder alignment and workshops

Handover to development

  • Functional and non-functional requirements
  • Reporting and workflow logic
  • Acceptance criteria

Technology risk & compliance

Practical IT audit experience applied to controls, documentation and evidence. Readiness work, not certification.

IT audit and assurance readiness

  • Audit readiness and gap assessments
  • IT general controls (ITGC) preparation
  • SOC 1, SOC 2 and ISAE 3402 readiness
  • Control documentation and evidence preparation

ISO 27001 and information security

  • ISO/IEC 27001:2022 gap assessments
  • Security policy and procedure development
  • Security risk identification and control mapping
  • ISMS documentation and remediation roadmaps

Regulatory control readiness

  • NIS2 cybersecurity control gap assessments
  • DORA ICT risk and third-party control assessments
  • GDPR technical and organisational control reviews
  • Mapping existing controls against requirements

IT governance and internal controls

  • Access management and periodic access reviews
  • Joiner, mover and leaver controls
  • Privileged access and segregation of duties
  • Change management and approval workflows
  • Risk and control matrices

Third-party, cloud and SaaS risk

  • Third-party IT risk assessments
  • Supplier risk management frameworks
  • SOC 1, SOC 2 and ISAE 3402 report reviews
  • Complementary user entity controls
  • Cloud governance and control assessments

Cybersecurity risk and resilience

  • Cybersecurity risk and control assessments
  • Incident management procedure reviews
  • Backup and recovery control assessments
  • Business continuity and disaster recovery readiness
  • Logging, monitoring and vulnerability governance

Technology change risk

  • ERP access and change management reviews
  • Migration risk assessments
  • System interface and data-processing controls
  • Post-implementation control reviews

Ongoing risk and compliance support

  • Periodic IT control reviews
  • Control documentation updates
  • Remediation tracking and supplier follow-up
  • Preparation for recurring external assessments

Software & IT

The build and the running of it, starting with what the current setup costs you — some of that comes off without writing anything new. Sold on its own, or as the delivery arm of an analysis or a readiness engagement.

Cost and performance analysis

  • Cloud and infrastructure spend reviews
  • Database and query performance analysis
  • Unused environments, services and data stores
  • Build-or-buy assessment before anything is written

Development

  • Full-stack web applications
  • Internal tools and admin interfaces
  • Customer-facing portals and dashboards
  • Spreadsheet and no-code platform extensions

Integrations

  • APIs between systems that do not talk to each other
  • Payment, messaging and marketing platforms
  • Data exchange and synchronisation
  • Migration away from a service you are leaving

Databases

  • Schema design and indexing
  • Partitioning and query tuning on large tables
  • Data migration between systems
  • Reporting and analytical views

Cloud and infrastructure

  • Infrastructure design and deployment on AWS
  • Infrastructure as code
  • Cost reduction and right-sizing
  • Monitoring, backups and recovery

Automation and AI

  • Workflow and reporting automation
  • AI assistants with handover to a person
  • Document and data processing pipelines
  • Scheduled jobs and data collection

Testing and release

  • Automated test coverage before a change is made
  • Environment and release management
  • Deployment pipelines
  • Migrating a live system without losing data

Operation

  • Handover with documentation and a walkthrough
  • Ongoing maintenance and support
  • Incident response and change requests
  • Periodic review of cost and performance

Our work in the risk and compliance practice is advisory and readiness-focused. Independent certifications, statutory audit opinions and formal assurance reports are performed by appropriately qualified independent providers.

Start with the problem

Tell us what is not working

What takes too long, costs too much, or stops the business growing. We define the problem and name the most practical next step, on a free 30-minute call.

Fixed scope, fixed price

Agreed in writing before work starts.

Stop after any step

Each stage is useful on its own.

Yours to run

Every solution is handed over with documentation.

The cheapest software is the one you did not need to build. That is what the first conversation is for.
© 2026 Ventora Group. All rights reserved. Privacy