They Retired the Free Tier. We Kept Ours.
SafeBase defined the trust center category, then Drata acquired it, discontinued the free tier for new buyers, and moved pricing behind a sales call. Concord publishes a slider and gives every account a branded trust center.
A Free Tier That Still Exists
Branded trust center at a {slug}.trustcenter.to domain, 5 documents, 50 FAQs, and gated access with approval workflows. No card, no sales call.
A Meter, Not a Tier Cap
Approved Domains is a seller-controlled whitelist capped by tier, so passing 100 means a sales conversation. Concord slides from 100 to 500 companies at a published rate.
RFPs as Well as Questionnaires
SafeBase covers questionnaires. Concord agents also read an RFP, draft responses from your knowledge base, and flag the gaps for a human to fill.
Built for teams whose deals wait on the security review
A Real Free Tier, on Your Own Domain
Every plan includes a branded trust center at a {slug}.trustcenter.to domain with gated access and approval workflows. Not a trial, and not a logo-walled demo.
Published Pricing, No Sales Gate
A public slider priced on external companies reached, not seats, with a stated overage rate. Transparent pricing has been the number one vendor ask from B2B buyers four years running (TrustRadius).
AI-Native, Not AI Bolted On
Agents draft questionnaires and RFPs, learn from every correction, and answer buyers on your trust center. Connect Claude, ChatGPT, or any MCP assistant to ask across your trust data directly.
Start on the Trust Center, Grow Into Compliance
Land on a modern trust center today, then add controls, evidence, frameworks, and an auditor portal on the same platform as your program matures. One vendor, from your first questionnaire to your next audit.
Buyers Verify on Their Own Terms
AI chat on the public trust center, 1-click NDA with a release ID and content hash stamped at signature, and gated documents with approval workflows. No waiting on your team.
One Update, Everywhere It Appears
Documents, policies, and FAQs live once in a versioned data layer behind the Trust Center, the AI chat, questionnaire drafts, and RFP responses. No re-uploading, no third place where the old answer survives.
Concord vs. SafeBase, at a glance
| Feature | Concord | SafeBase |
|---|---|---|
| Public Trust Center | Included | Included |
| AI Questionnaire Automation | Included | Included |
| AI Assistant Access (MCP)Query your trust data from Claude or ChatGPT | Included | Not included |
| RFP / RFX Automation | Included | Not included |
| Free TierFor new buyers, post-acquisition | Branded Domain, 25 Companies | Discontinued |
| External Reach Model | Metered, Slider to 500 | Approved Domains, Tier Cap |
| Published Pricing | Public Slider + Overage Rate | Quote Only |
| Custom Domain | Pro and Above | Included |
| 1-Click NDARelease ID and content hash at signature | Included | Included |
| Engagement Analytics | Included | Included |
| CRM Integration | Soon | Salesforce, Deep |
| Security Controls & Evidence | Included | Via Drata Platform |
| Standalone PurchaseWithout buying the GRC platform | Included | Increasingly Bundled |
| Connected Privacy PlatformConsent, DSARs, policies, data mapping | Included | Not included |
Switching from SafeBase before your renewal
- Rebuild your trust center yourself: upload documents, set audiences, publish
- Bring your prior answers across; auto-RAG indexes them on upload with no manual tagging
- Move from a tier-capped domain whitelist to a published, metered slider
- Keep a free branded trust center if your volume does not justify a paid plan
Frequently asked questions
Drata acquired SafeBase in February 2025. Pricing moved to drata.com and is quote-only, and the free tier that SafeBase historically offered was discontinued for new buyers. The product itself remains strong; what changed is how it is bought and whether you can start without a sales conversation.
Approved Domains is a seller-controlled whitelist with a cap set by your tier, so exceeding it means moving up a tier through sales. Concord meters the count of external companies that access gated content, on a public slider from 100 to 500, with a stated overage rate and Enterprise above that. The distinction matters when your reach grows mid-contract.
With SafeBase, increasingly yes; it is now positioned as the proof layer of the Drata GRC platform. Concord Trust is bought and used on its own. If you also run Concord Privacy, policies managed there surface in the Trust Center, but that is a compounding benefit rather than a requirement.
Yes. Concord agents identify the sections of an RFP or RFX, draft responses from your knowledge base with citations, and surface the gaps for a human to complete. SafeBase focuses on security questionnaires and does not offer RFP response automation.
You upload the documents you already share, define audiences and approval rules, connect a custom domain on Pro or above, and point your existing trust page at the new one. There is no implementation project and no professional services requirement.
The same platform carries the program behind the trust center: adopt controls, attach evidence, map to frameworks (including AI governance standards like ISO/IEC 42001 and the NIST AI RMF), and give auditors scoped access. SafeBase leans on the Drata platform for that layer, which means buying into the GRC suite. With Concord you start on a free branded trust center and grow into controls and compliance on the same platform, without switching vendors.
