
GITNUXSOFTWARE ADVICE
Cybersecurity Information SecurityTop 8 Best Compliance Dashboard Software of 2026
Compare the top 10 Compliance Dashboard Software tools with rankings and picks, including Drata, Vanta, and Secureframe. Explore options.
How we ranked these tools
Core product claims cross-referenced against official documentation, changelogs, and independent technical reviews.
Analyzed video reviews and hundreds of written evaluations to capture real-world user experiences with each tool.
AI persona simulations modeled how different user types would experience each tool across common use cases and workflows.
Final rankings reviewed and approved by our editorial team with authority to override AI-generated scores based on domain expertise.
Score: Features 40% · Ease 30% · Value 30%
Gitnux may earn a commission through links on this page — this does not influence rankings. Editorial policy
Editor’s top 3 picks
Three quick recommendations before you dive into the full comparison below — each one leads on a different dimension.
Drata
Automated continuous monitoring with evidence-backed control status updates in a compliance dashboard
Built for teams needing automated evidence, control mapping, and audit dashboards for multiple standards.
Vanta
Automated compliance evidence collection with continuous control status updates
Built for teams automating SOC 2 and ISO evidence with connected tools.
Secureframe
Automated compliance workflows with evidence collection and audit-ready reporting
Built for compliance teams managing SOC 2 and ISO workflows with evidence tracking.
Related reading
Comparison Table
This comparison table evaluates compliance dashboard software used to manage audit readiness, control mapping, evidence collection, and reporting workflows across major frameworks. It contrasts tools including Drata, Vanta, Secureframe, LogicGate, and Sword GRC based on capabilities teams use to reduce manual effort, improve traceability, and maintain audit-ready documentation. Readers can scan the table to compare feature coverage and operational fit for different compliance and governance needs.
| # | Tool | Category | Overall | Features | Ease of Use | Value |
|---|---|---|---|---|---|---|
| 1 | Drata Automates evidence collection and continuous compliance for security and compliance frameworks by turning system activity into audit-ready control proof. | continuous compliance | 8.8/10 | 9.0/10 | 8.6/10 | 8.6/10 |
| 2 | Vanta Automates compliance workflows and evidence gathering to support ongoing SOC 2, ISO 27001, and other framework control coverage. | compliance automation | 8.5/10 | 8.8/10 | 8.1/10 | 8.6/10 |
| 3 | Secureframe Centralizes compliance programs with control questionnaires, evidence management, and audit-ready reporting for common security and privacy standards. | GRC dashboard | 8.1/10 | 8.6/10 | 7.8/10 | 7.9/10 |
| 4 | LogicGate Provides compliance and risk dashboards that link workflows, control monitoring, and evidence repositories for enterprise governance programs. | risk and compliance | 8.1/10 | 8.6/10 | 7.9/10 | 7.5/10 |
| 5 | Sword GRC Manages compliance tasks, control libraries, risk assessments, and audit evidence in dashboards for regulated cybersecurity programs. | enterprise GRC | 8.1/10 | 8.4/10 | 7.8/10 | 7.9/10 |
| 6 | GRC 365 Runs security and compliance management through dashboards that connect frameworks, controls, evidence, and audit workflows. | compliance management | 7.6/10 | 7.8/10 | 7.3/10 | 7.7/10 |
| 7 | Securiti Provides compliance and policy dashboards that help organizations manage privacy, security governance, and audit evidence. | privacy governance | 8.1/10 | 8.7/10 | 7.9/10 | 7.5/10 |
| 8 | Tines Builds automated compliance workflows that orchestrate evidence collection, ticketing, and reporting through dashboard outputs. | workflow automation | 7.2/10 | 7.6/10 | 7.0/10 | 6.9/10 |
Automates evidence collection and continuous compliance for security and compliance frameworks by turning system activity into audit-ready control proof.
Automates compliance workflows and evidence gathering to support ongoing SOC 2, ISO 27001, and other framework control coverage.
Centralizes compliance programs with control questionnaires, evidence management, and audit-ready reporting for common security and privacy standards.
Provides compliance and risk dashboards that link workflows, control monitoring, and evidence repositories for enterprise governance programs.
Manages compliance tasks, control libraries, risk assessments, and audit evidence in dashboards for regulated cybersecurity programs.
Runs security and compliance management through dashboards that connect frameworks, controls, evidence, and audit workflows.
Provides compliance and policy dashboards that help organizations manage privacy, security governance, and audit evidence.
Builds automated compliance workflows that orchestrate evidence collection, ticketing, and reporting through dashboard outputs.
Drata
continuous complianceAutomates evidence collection and continuous compliance for security and compliance frameworks by turning system activity into audit-ready control proof.
Automated continuous monitoring with evidence-backed control status updates in a compliance dashboard
Drata stands out for turning audit and compliance evidence into a living, automatically updated compliance dashboard. The platform centralizes control mapping, continuous monitoring, and evidence collection across systems like GitHub, Google Workspace, AWS, and common HRIS sources. Stakeholder-ready reports show control status, audit readiness, and remediation progress, which reduces manual spreadsheet work. Workflow automation helps track findings to closure with an auditable trail tied to specific controls.
Pros
- Continuous compliance monitoring keeps control evidence current without manual refresh
- Control mapping to frameworks and audit requirements links dashboards to specific controls
- Automated evidence collection supports faster audits with centralized artifacts
- Remediation workflows track findings to closure with an audit trail
Cons
- Setup for connectors and control coverage can require substantial initial effort
- Some organizations need customization to match unique internal control narratives
- Dashboards can feel broad without careful filtering by audience and scope
Best For
Teams needing automated evidence, control mapping, and audit dashboards for multiple standards
More related reading
Vanta
compliance automationAutomates compliance workflows and evidence gathering to support ongoing SOC 2, ISO 27001, and other framework control coverage.
Automated compliance evidence collection with continuous control status updates
Vanta stands out by turning compliance evidence collection into continuous, source-linked attestations tied to cloud security and identity signals. Core capabilities include automated control mapping, evidence gathering from common SaaS and cloud platforms, and an audit-ready compliance dashboard for frameworks like SOC 2 and ISO 27001. The product also supports workflow management for control tasks and exceptions, plus exportable reports that consolidate status across systems.
Pros
- Automates evidence collection by connecting to cloud and SaaS sources
- Framework control mapping reduces manual spreadsheet cross-referencing
- Audit-ready dashboards centralize status, owners, and evidence links
Cons
- Accuracy depends on correct integrations and identity permissions
- Exception handling can feel heavy for highly customized controls
- Dashboard insights can lag when upstream systems change slowly
Best For
Teams automating SOC 2 and ISO evidence with connected tools
Secureframe
GRC dashboardCentralizes compliance programs with control questionnaires, evidence management, and audit-ready reporting for common security and privacy standards.
Automated compliance workflows with evidence collection and audit-ready reporting
Secureframe centralizes compliance program work with automated workflows, evidence collection, and audit-ready reporting in one dashboard. It maps policies and controls to frameworks like SOC 2, ISO 27001, and HIPAA so teams can track obligations and status in a single place. The platform supports recurring tasks, approvals, and control ownership to keep remediation work moving between reviews. Reporting capabilities highlight gaps, overdue items, and evidence completeness for internal readiness and customer audits.
Pros
- Framework mapping ties controls to policies and obligations in one workflow.
- Evidence collection and status tracking streamline audit preparation.
- Recurring tasks and approvals keep remediation and reviews organized.
Cons
- Setup requires careful control and workflow configuration before results.
- Reporting flexibility can be limited for highly customized dashboards.
Best For
Compliance teams managing SOC 2 and ISO workflows with evidence tracking
More related reading
LogicGate
risk and complianceProvides compliance and risk dashboards that link workflows, control monitoring, and evidence repositories for enterprise governance programs.
Control mapping workflows that enforce evidence collection and approvals
LogicGate stands out with workflow-first compliance management built around customizable logic and reusable templates. Teams can centralize evidence collection, map controls to policies, and track tasks through automated workflows with audit-ready activity histories. The platform supports dashboard views that aggregate compliance status across programs and provides configurable governance for review and escalation. Reporting and visibility are driven by the model of controls, assignments, and completed evidence rather than spreadsheets.
Pros
- Configurable workflow automation ties controls to evidence and review steps
- Dashboards aggregate compliance status across control sets and programs
- Audit trails capture changes, approvals, and task progress
- Reusable templates speed setup for common compliance use cases
- Role-based assignments support accountability across teams
Cons
- Initial configuration of logic and data models requires design effort
- Advanced dashboard tailoring can feel complex for non-admins
- Large-scale evidence operations may require careful taxonomy planning
Best For
Compliance teams standardizing evidence workflows and dashboards across multiple controls
Sword GRC
enterprise GRCManages compliance tasks, control libraries, risk assessments, and audit evidence in dashboards for regulated cybersecurity programs.
Evidence-linked compliance dashboard that visualizes control status with audit trail context
Sword GRC centers on a compliance dashboard experience that links governance tasks to evidence and audit trails. Core capabilities typically include risk tracking, policy and control mapping, assignment of compliance actions, and dashboard reporting for ongoing monitoring. It is designed to keep audit-ready documentation organized while showing progress across compliance workstreams. Reporting and workflow visibility are the main differentiators for teams that need a single operational view of compliance status.
Pros
- Dashboard views connect control work to evidence and audit trails
- Risk and control mapping supports structured compliance monitoring
- Task assignments help operationalize compliance requirements
- Audit-ready organization of compliance documentation reduces scramble
Cons
- Dashboard depth can require setup time to match audit workflows
- Advanced customization options are harder to use without internal expertise
- Reporting flexibility may lag specialized BI tools for complex analytics
Best For
Compliance teams needing audit-trace dashboards and risk-to-control tracking
More related reading
GRC 365
compliance managementRuns security and compliance management through dashboards that connect frameworks, controls, evidence, and audit workflows.
Compliance dashboards that track evidence and workflow status by obligation
GRC 365 centers on a compliance dashboard that turns audit, risk, and policy activity into a single operational view for compliance teams. The solution supports structured workflows for tasks, evidence collection, and status tracking so compliance work can move from planning to closure. Dashboards and reporting help teams monitor gaps, assign accountability, and track progress across initiatives tied to compliance obligations. Strong visibility and centralized controls are the main differentiators versus tools that only store documents or only manage tickets.
Pros
- Compliance dashboards consolidate obligations, status, and workflow progress
- Workflow and task tracking improves audit readiness and closure visibility
- Centralized evidence handling supports faster review cycles
Cons
- Dashboard depth can require careful setup to match real processes
- Workflow customization can feel heavy for simple compliance teams
- Reporting flexibility may be limited versus specialized BI tooling
Best For
Compliance teams needing visual oversight of audits, evidence, and obligations
Securiti
privacy governanceProvides compliance and policy dashboards that help organizations manage privacy, security governance, and audit evidence.
Control and evidence mapping that connects privacy and security controls to compliance dashboards
Securiti stands out by centering compliance evidence collection around data security and privacy controls rather than spreadsheets alone. The platform provides policy and control mapping, automated assessment workflows, and centralized reporting across systems with audit-ready documentation. It also supports continuous monitoring signals so compliance status can reflect changes in access, configurations, and data handling. Teams get a single dashboard view that ties regulatory requirements to implemented safeguards and measurable results.
Pros
- Control mapping ties regulatory requirements to concrete security and privacy evidence
- Automated assessment workflows reduce manual evidence collection effort
- Dashboard reporting links compliance status to specific controls and monitored signals
- Continuous monitoring inputs support faster compliance updates after changes
- Centralized documentation improves audit readiness and traceability
Cons
- Setup requires careful integration to ensure evidence sources map correctly
- Initial configuration complexity can slow time to first usable dashboard
- Dashboard granularity depends on data quality from connected systems
Best For
Enterprises needing evidence-driven compliance dashboards tied to security controls
More related reading
Tines
workflow automationBuilds automated compliance workflows that orchestrate evidence collection, ticketing, and reporting through dashboard outputs.
Workflow orchestration with triggers, branching logic, and approval steps
Tines stands out for automating compliance work through no-code workflow orchestration that connects tools across security, IT, and governance. It provides workflow building blocks like triggers, conditional logic, approvals, and task routing that can support compliance dashboard indicators such as ticket handling and control evidence collection. It also supports integrations and data handling patterns that enable centralized review cycles rather than manual tracking in spreadsheets. The main limitation as a compliance dashboard solution is that the dashboard experience depends on how workflows are wired into reporting destinations rather than offering a dedicated compliance metrics UI out of the box.
Pros
- No-code workflows automate compliance checks using triggers and conditional logic
- Approvals and task routing fit control attestation and evidence collection
- Integrates with common enterprise tools for compliance evidence pipelines
Cons
- Compliance dashboard visuals rely on external reporting destinations
- Complex programs require careful workflow design to avoid brittle logic
- Standard metrics and control libraries are not the primary built-in focus
Best For
Teams automating compliance evidence flows and approvals with workflow control
How to Choose the Right Compliance Dashboard Software
This buyer's guide explains how to evaluate Compliance Dashboard Software solutions using real capabilities from Drata, Vanta, Secureframe, LogicGate, Sword GRC, GRC 365, Securiti, and Tines. It covers what these tools do, which features matter most, and how to avoid implementation traps that show up across the category. The guide also includes decision steps, audience matchups, and a focused FAQ referencing the specific tools covered here.
What Is Compliance Dashboard Software?
Compliance Dashboard Software centralizes compliance control status, evidence, and audit progress into a dashboard used by security, privacy, and governance teams. It typically connects evidence sources to control mappings for standards like SOC 2 and ISO 27001 and then drives workflows from tasks to approvals and remediation closure. Tools like Drata and Vanta emphasize continuous monitoring and evidence-backed control status updates. Tools like Secureframe and LogicGate emphasize workflow-first compliance operations that track recurring tasks, approvals, and audit-ready reporting tied to specific controls and obligations.
Key Features to Look For
The most effective compliance dashboards tie control status to evidence and workflows so audit readiness stays current instead of becoming spreadsheet work.
Automated evidence collection tied to control status
Drata and Vanta excel at automated evidence collection that updates control status continuously as evidence changes in connected systems. This reduces manual evidence refresh cycles and keeps the compliance dashboard audit-ready with source-linked artifacts.
Continuous compliance monitoring with evidence-backed updates
Drata stands out for automated continuous monitoring where the dashboard reflects evidence-backed control status updates. Vanta also supports continuous control status updates using automated evidence gathering and source-linked compliance evidence.
Control mapping to frameworks and obligations
Secureframe and LogicGate provide framework mapping that connects controls and policies to standards and audit obligations in one workflow. Drata and Vanta also connect dashboards to specific controls and mapped requirements so stakeholders can trace status back to the right obligations.
Evidence-linked workflows that drive remediation to closure
LogicGate and Sword GRC both focus on dashboards that connect control work to evidence and audit trail context. Drata and Secureframe further operationalize closure with workflow automation that tracks findings to completion through auditable trails tied to controls.
Audit trails for approvals, task progress, and evidence handling
LogicGate emphasizes audit trails capturing changes, approvals, and task progress tied to compliance activity. Sword GRC centers on an evidence-linked compliance dashboard that visualizes control status with audit trail context for regulated cybersecurity programs.
Privacy and security control dashboards tied to monitored signals
Securiti centers compliance evidence mapping around privacy and security controls using continuous monitoring inputs. Securiti connects regulatory requirements to implemented safeguards and measurable results in a single dashboard view.
How to Choose the Right Compliance Dashboard Software
The selection process should match the dashboard’s evidence model and workflow depth to the standards, evidence sources, and governance processes that the program already runs.
Map the dashboard to the control model that matches the compliance program
Start by deciding whether the program needs control-first compliance dashboards or obligation-first oversight. LogicGate supports configurable workflow automation that ties controls to evidence and review steps, while GRC 365 focuses on dashboards that track evidence and workflow status by obligation. For multi-framework teams needing tight control mapping across standards, Drata and Vanta provide control mapping to frameworks and audit requirements linked to dashboard status.
Select an evidence strategy that matches how evidence gets produced today
If evidence is generated continuously by systems like cloud and SaaS, Drata and Vanta emphasize automated evidence collection and continuous source-linked updates. If evidence is driven by structured program work with recurring approvals and tasks, Secureframe centralizes evidence collection and status tracking with audit-ready reporting. If evidence is heavily privacy and security control-driven, Securiti ties dashboards to control and evidence mapping backed by continuous monitoring signals.
Validate workflow depth for owners, approvals, and remediation closure
Check whether the workflow supports owners, approvals, and remediation tracking to closure without losing audit context. Drata tracks findings to closure with an audit trail tied to specific controls, while LogicGate enforces control mapping workflows with review and escalation across assignments. Secureframe and Sword GRC also emphasize evidence-linked dashboards with task assignments that operationalize compliance actions.
Confirm the audit reporting experience aligns with stakeholder needs
Look for dashboards that show control status, audit readiness, and remediation progress in a stakeholder-ready way. Drata and Vanta consolidate status across systems and provide exportable audit-ready reporting, while Secureframe highlights gaps, overdue items, and evidence completeness for readiness and customer audits. Sword GRC emphasizes audit-trace dashboards for risk-to-control monitoring that visualize control status with evidence and audit trail context.
Stress-test setup effort and dashboard customization complexity
Plan for initial configuration effort if connector setup and control coverage mapping are required, especially for Drata and Vanta where integration accuracy and coverage affect evidence-backed status updates. LogicGate requires design effort for logic and data models and can feel complex for non-admin dashboard tailoring. Tines can require careful workflow design because its compliance dashboard visuals depend on the reporting destinations wired into its workflow orchestration.
Who Needs Compliance Dashboard Software?
Compliance Dashboard Software benefits teams that must show control status, evidence completeness, and remediation progress to internal stakeholders and auditors.
Security and compliance teams needing automated evidence with continuous control status updates
Drata and Vanta fit teams that want continuous monitoring where the compliance dashboard updates with evidence-backed control status. These tools centralize evidence collection and control mapping across connected sources like cloud and SaaS so dashboard status stays current.
SOC 2 and ISO compliance programs that rely on connected SaaS and cloud evidence
Vanta is a strong match for automating SOC 2 and ISO evidence with connected tool integrations and framework control mapping. Drata also supports multi-standard compliance dashboards with automated evidence collection and stakeholder-ready reporting.
Compliance teams running recurring tasks, approvals, and evidence workflows across reviews
Secureframe is designed for managing SOC 2 and ISO workflows with evidence tracking that includes recurring tasks and approval flows. LogicGate supports standardizing evidence workflows and dashboards across multiple controls using reusable templates and role-based assignments.
Privacy-focused enterprises that need dashboards tied to security controls and continuous monitoring signals
Securiti matches enterprises that need evidence-driven compliance dashboards tied to privacy and security controls. It maps regulatory requirements to implemented safeguards and measurable results using continuous monitoring inputs.
Common Mistakes to Avoid
Implementation problems in this category usually come from mismatched evidence sources, insufficient workflow design, or dashboards that are too broad for the intended audience.
Underestimating connector setup and control coverage work
Drata and Vanta can require substantial initial effort to set up connectors and ensure control coverage is complete enough for evidence-backed status updates. This leads to dashboards that look broad but are not yet accurate for audit readiness.
Building dashboards without a workflow path to remediation closure
Sword GRC and LogicGate provide evidence-linked dashboards that connect control work to evidence and audit trail context, but dashboards without configured workflows will not drive closure. Drata also depends on evidence-backed workflows that track findings to closure with an auditable trail tied to controls.
Ignoring governance complexity when customizing logic and data models
LogicGate requires design effort to configure logic and data models and can feel complex for non-admins when tailoring advanced dashboards. GRC 365 can also require careful setup to match real processes, which can slow time to a fully useful dashboard.
Relying on workflow orchestration without a dedicated compliance dashboard experience
Tines can automate evidence flows with triggers, branching logic, approvals, and task routing, but its compliance dashboard visuals depend on how workflows feed external reporting destinations. This can produce brittle reporting indicators if workflow wiring is not carefully designed for the compliance metrics needed.
How We Selected and Ranked These Tools
we evaluated every tool on three sub-dimensions with weights of features at 0.4, ease of use at 0.3, and value at 0.3. The overall rating is the weighted average formula overall = 0.40 × features + 0.30 × ease of use + 0.30 × value. Drata separated itself on the features dimension by delivering automated continuous monitoring with evidence-backed control status updates in a compliance dashboard and by providing control mapping that links dashboard status to specific controls. That evidence-backed, continuously updated dashboard model directly supports faster audits and clearer remediation tracking compared with tools that center more on document storage or workflow routing without the same continuous evidence-backed status emphasis.
Frequently Asked Questions About Compliance Dashboard Software
Which compliance dashboard tool provides the most automated evidence updates without manual spreadsheet work?
Drata automatically centralizes control mapping, evidence collection, and continuous monitoring across sources like GitHub, Google Workspace, and AWS. Vanta also updates control status continuously by linking attestations to cloud and identity signals.
What tool best fits organizations that need audit readiness dashboards for SOC 2 and ISO 27001 together?
Vanta is built around automated control mapping and evidence gathering for SOC 2 and ISO 27001 with exportable reporting. Secureframe supports SOC 2 and ISO 27001 control mappings and audit-ready reporting in one dashboard.
Which platform is strongest for workflow-driven compliance management with audit trails?
LogicGate is workflow-first and uses customizable templates to route evidence tasks, capture audit-ready activity histories, and enforce governance. Sword GRC links governance tasks to evidence and audit trails, which helps teams keep audit-trace context tied to compliance work.
How do leading tools compare for tracking remediation from findings to closure?
Drata ties findings to specific controls and uses workflow automation to track items to closure with an auditable trail. Secureframe adds recurring tasks, approvals, and control ownership so remediation progresses across review cycles with visible gaps and overdue items.
Which compliance dashboard option is most suitable for privacy and data security evidence rather than general compliance documents?
Securiti centers compliance evidence on privacy and data security controls and connects regulatory requirements to implemented safeguards. It includes automated assessment workflows and centralized reporting with continuous monitoring signals that reflect changes in access and configurations.
Which tools provide a dashboard view tied to obligations instead of just storing policies and documents?
GRC 365 turns audit, risk, and policy activity into an operational view where dashboards track evidence and workflow status by obligation. Secureframe highlights gaps, overdue items, and evidence completeness so dashboards reflect readiness, not only documentation.
What solution best supports automated integration-driven compliance evidence flows across security and IT tools?
Tines orchestrates compliance work with no-code workflows that connect security, IT, and governance tools using triggers, conditional logic, and approval steps. Drata and Vanta also integrate with common SaaS and cloud platforms, but Tines focuses on building the workflow logic that drives what the dashboard reports.
Which platform is best for standardized control mapping and reusable evidence collection models across multiple programs?
LogicGate supports reusable templates and dashboard views that aggregate compliance status across programs by controls and assignments. Drata similarly centralizes control mapping and evidence collection across systems, which helps keep standards consistent across teams.
What is the most common reason a compliance dashboard feels incomplete even after integrating tools, and which product highlights this risk?
Tines can require extra setup because the dashboard experience depends on how workflows wire reporting destinations rather than providing a dedicated compliance metrics UI out of the box. Secureframe and GRC 365 typically deliver audit-ready dashboards that reflect obligations, gaps, and evidence completeness within the product’s reporting model.
How should teams evaluate whether a compliance dashboard can handle continuous monitoring instead of periodic reviews?
Drata emphasizes automated continuous monitoring with evidence-backed control status updates, which keeps dashboards current as systems change. Vanta also supports continuous control status updates by collecting evidence from cloud and identity signals tied to attestations.
Conclusion
After evaluating 8 cybersecurity information security, Drata stands out as our overall top pick — it scored highest across our combined criteria of features, ease of use, and value, which is why it sits at #1 in the rankings above.
Use the comparison table and detailed reviews above to validate the fit against your own requirements before committing to a tool.
Tools reviewed
Referenced in the comparison table and product reviews above.
Keep exploring
Comparing two specific tools?
Software Alternatives
See head-to-head software comparisons with feature breakdowns, pricing, and our recommendation for each use case.
Explore software alternatives→In this category
Cybersecurity Information Security alternatives
See side-by-side comparisons of cybersecurity information security tools and pick the right one for your stack.
Compare cybersecurity information security tools→FOR SOFTWARE VENDORS
Not on this list? Let’s fix that.
Our best-of pages are how many teams discover and compare tools in this space. If you think your product belongs in this lineup, we’d like to hear from you—we’ll walk you through fit and what an editorial entry looks like.
Apply for a ListingWHAT THIS INCLUDES
Where buyers compare
Readers come to these pages to shortlist software—your product shows up in that moment, not in a random sidebar.
Editorial write-up
We describe your product in our own words and check the facts before anything goes live.
On-page brand presence
You appear in the roundup the same way as other tools we cover: name, positioning, and a clear next step for readers who want to learn more.
Kept up to date
We refresh lists on a regular rhythm so the category page stays useful as products and pricing change.
