Implementation & Ongoing Support
Optional post-sale services Swiss AMF can coordinate for your SAMFCore deployment — with indicative pricing, what each engagement actually is, and who issues the resulting certificate or report.
These are optional services provided by Swiss AMF after purchase. They are not SAMFCore software capabilities, and SAMFCore itself holds no ISO, SOC 2 or PCI DSS certification. Swiss AMF can coordinate and support the work needed to prepare a deployed environment for the standards relevant to your business model.
Services may be commissioned individually or undertaken in parallel. Each line below states what the engagement is, so a certification, an assurance report, testing and a compliance programme are not presented as the same thing.
ISO/IEC 27701 – Privacy Information Management System (PIMS)
Certification
Privacy extension to an information security management system. Certificates are issued by an independent certification body.
€6,000
VAPT – Vulnerability Assessment & Penetration Testing
Security testing
Testing of the deployed environment with findings and remediation support. The indicative price includes initial testing and fixes, as applicable. Testing, not a certification.
€10,000
ISO/IEC 27001 – Information Security Management System (ISMS)
Certification
Information security management system. Certificates are issued by an independent certification body.
€8,000
SOC 2 Type II (AICPA) – System and Organization Controls
Assurance / attestation engagement
An independent auditor's attestation report covering controls over a defined review period. An assurance engagement, not a certification.
€20,000
GDPR Compliance Programme
Compliance programme
Preparation and documentation for GDPR obligations. A compliance programme, not a certification.
€15,000
CCPA Compliance Programme
Compliance programme
Preparation and documentation for CCPA obligations. A compliance programme, not a certification.
€13,000
PCI DSS Level 1 Validation, where applicable
Compliance / validation framework
Applicability depends on the scope of the deployed environment. PCI DSS includes vulnerability and penetration-testing requirements for applicable in-scope environments.
€20,000
Indicative pricing. Final scope, deliverables, independent third-party costs and timing are confirmed in the applicable engagement documentation.
Target implementation and compliance programme: approximately 90 days. Multiple workstreams may be undertaken in parallel. Actual completion timing depends on scope, remediation needs, customer readiness and third-party auditor/certification-body processes.
ISO/IEC 27001 and ISO/IEC 27701 certificates are issued by independent certification bodies, SOC 2 Type II reports by independent auditors; Swiss AMF coordinates and supports this work but does not issue certificates, and no certification outcome is guaranteed. GDPR and CCPA are compliance programmes, not certifications.
PCI DSS includes vulnerability and penetration-testing requirements for applicable in-scope environments.
Share the markets you operate in, the providers you plan to connect and the assurance your customers or partners ask for. We'll show what the deployed environment already supports, what can be prepared, and which of these engagements are appropriate.
