Skip to main content

Compliance Tier

The Compliance Tier is designed for regulated enterprises (FinTech, Healthcare, Government) that cannot grant IAM access to third-party services due to security policies.

Perfect for Zero-Trust Environments

If your security team requires zero external access to your AWS accounts, Compliance Tier gives you all the power of CloudWise while your data never leaves your control.

Key Features​

365-Day Data Retention​

Unlike the standard 7-day Air-Gapped Mode, Compliance tier retains your uploaded cost data for a full year, enabling quarterly and annual variance analysis.

TierRetention Period
Free / Shield7 days
Compliance365 days

Persistent Anonymization Salt​

Your anonymization salt is preserved across uploads, ensuring consistent entity correlation for trend analysis. Without this, anonymized IDs would change each upload, making it impossible to track the same resources over time.

How it works:

  1. On your first anonymized upload, CloudWise generates a secure salt unique to your account
  2. The salt is stored securely (encrypted at rest with AWS KMS)
  3. Future uploads use the same salt, so account-abc123 always maps to the same anonymous ID
  4. You can regenerate your salt if needed (this breaks historical correlation)

Quarter-over-Quarter (QoQ) Variance Reports​

Compare costs across any two upload periods to identify trends, budget variances, and optimization opportunities over time.

Features:

  • Select any two historical uploads for comparison
  • View cost changes by service, account, region, or tag
  • Identify spending trends and anomalies
  • Export variance reports as CSV or PDF

🏷️ Cost By Tag Analysis​

If you use AWS resource tags (e.g., Environment, Team, CostCenter), CloudWise surfaces tag-based cost breakdowns across the entire platform.

Tag Your Resources

Cost By Tag works with any tags present in your AWS Cost and Usage Report. The more consistently you tag your resources, the more useful the breakdowns become.

Where you'll see tag data:

SurfaceWhat it shows
Workspace overview"Cost by Tag" card — select a tag key to see top values by spend
Cost viewsGroup by any tag key, filter by tag values in Advanced Filters
QoQ VarianceCompare cost changes by tag value across billing periods

How it works:

  1. Tags are automatically extracted from your CUR CSV during upload
  2. CloudWise discovers all available tag keys from your data
  3. Select a tag key from any dropdown to see the breakdown
  4. Works across all tiers (Dashboard card is available to everyone)

PDF Audit Reports​

Generate professional audit-ready PDF reports for compliance documentation:

  • Executive summary with key metrics
  • Detailed cost breakdown by service
  • Waste findings with remediation recommendations
  • Month-over-month trend analysis

Getting Started​

Step 1: Subscribe to Compliance Tier​

  1. Go to Settings → Subscription in the CloudWise dashboard
  2. Select the Compliance tier ($99/mo or $799/year)
  3. Complete payment via Stripe

Step 2: Download the Export Script​

# Download the CloudWise export script
curl -O https://cloudwise.dev/scripts/cloudwise-export.sh
chmod +x cloudwise-export.sh

Step 3: Run with Anonymization​

# Run in AWS CloudShell or locally with AWS credentials
./cloudwise-export.sh --anonymize --output-mapping

The --output-mapping flag saves a local mapping file so you can reverse-lookup anonymized IDs.

Multi-Region Export

To analyze resources across multiple AWS regions with anonymization:

./cloudwise-export.sh --regions us-east-1,eu-west-1,ap-southeast-1 --anonymize --output-mapping

All regions are bundled into a single ZIP. Global services are exported once.

Step 4: Upload to CloudWise​

  1. Open Air-Gapped Mode (the offline path of the Connect flow) in CloudWise
  2. Upload your generated ZIP file
  3. View your cost analysis instantly

Step 5: Repeat for Trend Analysis​

Run the export monthly or quarterly to build historical data for variance reports.

Pricing​

PlanPriceBilling
Compliance$99/mo or $799/yearMonthly or Annual

The Compliance tier includes everything in Shield, plus:

  • ✅ 365-day data retention (vs 7-day)
  • ✅ Persistent anonymization salt
  • ✅ QoQ variance reports (with tag dimension)
  • ✅ Cost By Tag across the Workspace overview, cost views, and QoQ Variance
  • ✅ PDF audit report exports
  • ✅ Up to 12 historical uploads

Frequently Asked Questions​

Can I switch from Shield to Compliance?​

Yes! You can upgrade at any time. Your Compliance tier starts immediately, and you'll be billed the prorated difference.

What happens to my data if I downgrade?​

If you downgrade from Compliance to Shield, your data retention returns to 7 days. Uploads older than 7 days will be automatically deleted according to our retention policy.

Is my anonymization salt secure?​

Yes. Your salt is:

  • Encrypted at rest with AWS KMS
  • Never transmitted to your browser
  • Used only server-side for anonymization matching
  • Unique to your account

Can I regenerate my salt?​

Yes, from the Salt Management section in Air-Gapped Mode. Warning: Regenerating your salt breaks correlation with historical uploads. Only do this if you need to start fresh.

Ready to upgrade? Go to Settings → Subscription in the CloudWise dashboard to get started.