Start with a discovery conversation.
We charge for the value you'll receive - not for seats of software you haven't touched.
Australian dollars. No surprises. No multi-year lock-in. Four tiers. A$ (AUD).
Don't commit to anything yet - check your readiness first.
The check produces a first-pass report citing your firm's public data. Most buyers start here. No card. No call required.
paid tiers below · Discovery + Pilot are below-cost-of-delivery by design · we earn the upgrade through demonstrated value.
Pilot
A$40k
Single domain · live audit trail · 1 workflow end-to-end. Workspace provisioned at <yourcompany>.xlooop.com under your practitioner sign-off.
6-role panel in watch + propose mode · full per-engagement audit trail · 1 OAuth integration · 99.0% uptime.
One ladder. Six checkpoints. You pick where you start.
"Recommended start" on Pilot: most regulated SMBs land best at Pilot tier — it's the lowest-cost configuration that produces a real customer-facing audit trail and lets your principal sign off a real output before a longer commitment. From there, the three Annual bands (Foundation A$120k · Growth A$200k · Multi-office A$350k) match your operating shape — small office, multi-office, or multi-tenant service-provider mode.
Discovery
Diagnostic only. No workspace provisioned.
A$15k
one-time · 90-min workshop
Book discovery →Compliance-gap audit + scope of work. 90-minute structured workshop. You leave with a one-page gap audit, a scope-of-work proposal, a pilot price, and a go / no-go decision.
No 6-role AI panel runs. Sample audit trail only. Recommendation-level reviewer sign-off (no built-in chain).
Best-effort SLA. Termination: n/a. OAuth integrations: none. Customer-facing record: no.
Pilot
Lowest-cost configuration that produces a real customer-facing audit trail.
A$40k
60-day proof · fixed term
Start a pilot →Single domain · live audit trail · 1 workflow end-to-end. Workspace provisioned at <yourcompany>.xlooop.com. 1 customer trial. The pilot stays under your firm's practitioner sign-off.
6-role AI panel runs in watch + propose mode. Full per-engagement audit trail. Built-in reviewer sign-off chain. 1 OAuth integration included (Xero / MYOB / QuickBooks).
99.0% uptime · 4h response. Termination: none during 60-day fixed term. Cyber-tier continuous monitoring + per-tenant Cloudflare Access. Enterprise SSO available on request.
Production POC
Multi-domain production · regulator-ready evidence.
A$100k/yr
monthly billed · 30-day notice
Talk to us →Multi-domain · full review board · regulator-ready evidence. Workspace provisioned (production). Customer-facing production record. 1 AU practitioner sign-off (review board engagement) included.
6-role AI panel runs at production gates. Full per-engagement + cross-engagement audit trail. Reviewer sign-off chain with custom roles. Up to 5 OAuth integrations. Enterprise SSO (SAML / OIDC) included.
99.5% uptime · 2h response · monthly review. 30-day termination notice. Dedicated support channel. Region-pinning (AU / EU / UK / US edge). Model-agnostic (Claude · GPT · Gemini · local).
Annual · Foundation
Single office · single regulated domain. The smallest annual band.
A$120k/yr
annual · 90-day post-band notice
Talk to us →1 office · 5-25 staff · regulated single-domain (e.g. accounting OR construction OR financial advisory). Production workspace. Ongoing AU practitioner sign-off. Single-domain audit trail with reviewer chain.
6-role AI panel runs in production + autonomous-where-authorised mode. Up to 5 OAuth integrations. Enterprise SSO (SAML / OIDC). Custom reviewer roles. Region-pinning (AU / EU / UK / US edge).
99.9% uptime · 1h response · weekly review + dedicated CSM. Per-tenant Cloudflare Access. Model-agnostic (Claude · GPT · Gemini · local).
Annual · Growth
Default annual band. Where most regulated SMBs land.
A$200k/yr
annual · 90-day post-band notice
Talk to us →1-2 offices · 25-80 staff · multi-domain (e.g. accounting + financial advisory, or construction + insurance). Production + secondary workspace. Cross-domain audit trail. Ongoing AU practitioner sign-off.
6-role AI panel runs in production + autonomous-where-authorised mode. Unlimited OAuth integrations (fair use) under your authority. Enterprise SSO + SCIM provisioning. Custom + multi-domain reviewer roles.
99.9% uptime · 1h response · weekly review + dedicated CSM. Per-tenant Cloudflare Access. Model-agnostic. Named partner SLA.
Annual · Multi-office
Multi-location OR multi-tenant service-provider mode.
A$350k/yr
annual · 90-day post-band notice
Talk to us →2+ offices OR multi-customer service-provider mode (e.g. accounting franchise; construction firm with subcontractor portfolio; insurance broker network). Multi-tenant workspace. Cross-engagement + cross-customer-isolated audit trail.
6-role AI panel runs in production + autonomous-where-authorised mode. Unlimited OAuth integrations. Enterprise SSO + SCIM. Custom + multi-tenant reviewer roles. Per-tenant Cloudflare Access.
99.9% uptime · 1h response · weekly review + dedicated CSM. Named partner SLA. Quarterly band review. Custom infrastructure-manager configuration available.
By tier - at a glance.
| Feature | Discovery | Pilot | Production POC | Annual |
|---|---|---|---|---|
| Compliance-gap audit | ✓ | ✓ | ✓ | ✓ |
| Single-domain audit trail | — | ✓ | ✓ | ✓ |
| Multi-domain audit trail | — | — | ✓ | ✓ |
| Vertical templates (drop-in) | — | optional | ✓ | ✓ |
| Custom integrations | — | — | 1 included | unlimited (fair use) |
| 6-role AI panel (governance) | — | ✓ | ✓ | ✓ |
| Customer-facing review surface | — | — | ✓ | ✓ |
| Cyber-tier continuous monitoring | — | ✓ | ✓ | ✓ |
| Sterile teardown + export on exit | ✓ | ✓ | ✓ | ✓ |
| Support tier | email + Slack | dedicated channel | named partner + SLA | |
| AU practitioner sign-off included | n/a | n/a | 1 review board engagement | ongoing |
| Region-pinning (AU / EU / UK / US edge) | n/a | ✓ | ✓ | ✓ |
| Model-agnostic (Claude · GPT · Gemini · local) | n/a | ✓ | ✓ | ✓ |
| Per-tenant Cloudflare Access | — | ✓ | ✓ | ✓ |
| SCIM provisioning | — | — | — | ✓ |
| Enterprise SSO (SAML / OIDC) | — | on request | ✓ | ✓ |
single source of truth: XCP_PRICING_DRAFT_v1.md (governance-side · masters/ canonical). Prices auto-adjust for your selected region - region switcher in top-nav swaps A$ → € → £ → US$ with exchange-rate locked at engagement (see Terms of Service §3 for currency methodology).
We tell you what we don't sell, so the boundary is honest.
- X
No per-seat fee
You add team members at no incremental cost. We charge for value delivered, not chairs filled.
- X
No multi-year lock-in
Pilot is fixed 60 days. Production is monthly with 30-day notice. Annual licence is annual.
- X
No paid integrations
OAuth integrations to your tools are included; we don't charge per connector.
- X
No data-egress fees
When you leave, you get your customer-facing record as a portable export (PDF + JSON + audit log). See Data Sovereignty § "Export + portability".
- X
No surprise overage billing
Annual licence usage-band tiers are forecast at engagement; if you exceed band, you get a written band-change proposal before the next invoice - never a back-charge.
Eight things that ship with every engagement.
- +Australian-resident data by default (Cloudflare AU edge); multi-region for paid tiers on request
- +6-role AI agent panel: Chief of Staff · Risk Officer · DevSecOps · Knowledge Architect · Domain Operator · Commercial Claim Reviewer
- +Audit-grade ledger: write-only, reviewer-signed, customer-facing record
- +L0-L5 authority gates: you control what AI agents may do with your data at every stage
- +Model-agnostic: Claude · GPT · Gemini · local models · BYO
- +AU + EU + UK + US legal coverage; multi-jurisdictional terms; AU practitioner sign-off on Privacy + Terms + Data Sovereignty (v2.1-FINAL) is the publication gate
- +Privacy Act 1988 + APPs voluntary compliance even under small-business exemption (positions you for B2B trust + future-proofs against tranche-2 amendments)
- +No training on your data. Contractually.
The discovery conversation.
Discovery is a 90-minute structured workshop. Output: a one-page compliance-gap audit + a scope-of-work proposal. We assess six dimensions; you leave with a gap audit, a scope of work, a pilot price, and a go / no-go decision.
Regulatory exposure
Which regimes apply: TPB · ATO · AUSTRAC · building defect liability · APES 110 · NSW Fair Trading · others.
Tool inventory
Which AI tools your team already uses.
Customer-evidence question
Who asks "show me what your AI built" today; who will ask in the next 6 months.
Authority gate
Where humans hold sign-off authority; where it leaks today.
Workflow density
Which 1-3 workflows produce the highest evidence-leverage in 60 days.
Cyber baseline
DMARC · TLS · HIBP · SOC 2 / ISO posture (we assess; we don't replace your existing controls).
Banded by engagement volume + customer-evidence-record output.
Not seat count. Bands are forecast at engagement and reviewed quarterly. If you exceed band, you get a written band-change proposal before the next invoice - never a back-charge.
Three lighter-touch paths.
If none of those fit: hello@xlooop.com. One human reads every message.
Where we are, in plain language.
We have zero paying customers as of May 2026 and two pilot engagements in progress (ASP + H&Y - public-discovery / draft-consent posture). Pricing tiers above are what we'll charge when we open paid engagements; pilot tiers are the active offer today.
We tell the truth about where we are. "What's authored does not equal what's shipped" - and the audit-grade evidence we promise customers begins with the audit-grade evidence we keep about ourselves.
The questions buyers ask in pricing review.
Cold, warm, pre-sold - one CTA each.
Two ways to start.
The readiness check is the path most firms take. The walkthrough is the path most partners take.
Currency: AUD ex-GST. Entity: ADEVI PTY LTD (trading as Xlooop) · ABN 80 627 916 698 · ACN 627 916 698 · Australia (NSW jurisdiction). Multi-jurisdictional terms apply per Terms of Service; data-residency posture per Data Sovereignty.
Three doors. Same destination: a firm whose AI work is provable.
Pick the one that fits where you are today — none commit you to anything.
Or simply email hello@xlooop.com — one human reads every message.