What Does a TISAX Assessment Cost in 2026?
TISAX certification costs include ENX registration, the assessment, preparation and your team’s working time. Software and technical measures depend on your starting point. What matters is which parts of your ISMS already work and what you still need to implement for the required assessment objectives.
For orientation: our AL2 examples with Kopexa Pro for one site total 17,868 EUR when building an ISMS and 15,168 EUR with an existing ISMS. The calculation with modelled time savings follows below.
People often search for “TISAX certification”. Technically, it is an assessment with TISAX labels. Your budget needs to account for the work behind it.
Worked example · Year 1 · excluding VAT
A useful budget starts with clear assumptions.
Two starting points with Kopexa Pro for one site, one assessment scope and AL2. We model less consulting and administration through shared measures and directly assigned evidence. Reference hours and preparation days are shown below.
| Cost item & assumption | Small supplier building its ISMS | Supplier using an existing ISMS |
|---|---|---|
| ENX registration1 site × EUR 405 | 405 EUR | 405 EUR |
| TISAX assessment2.5 days × EUR 1,350 | 3,375 EUR | 3,375 EUR |
| External preparationEUR 1,200 per preparation day | 4,500 EUR7.5 → 3.75 days | 2,400 EUR4 → 2 days |
| Internal working timeEUR 50 per working hour | 2,400 EUR80 → 48 hours | 1,800 EUR60 → 36 hours |
| Kopexa Pro · year 1599 EUR × 12 · one space | 7,188 EUR | 7,188 EUR |
| Budgeted effort and expenditure | 17,868 EUR | 15,168 EUR |
Arrows show reference effort → effort with Kopexa. The model assumes 50% less external preparation and 40% less internal administration. Actual reductions depend on your setup. Day rates and working hours are calculation assumptions; the software item uses the current Kopexa Pro price for one space. Technical upgrades, training, travel and follow-up work are additional as needed. Current Pro plan →
Interactive cost calculator
What does TISAX cost in your setup?
Adjust the model to your company. The estimate with Kopexa updates immediately. Optionally compare it with reference effort before the modelled reduction.
Estimated cost year 1
AL2 and AL3 describe assessment depth. Your required level follows from objectives and customer requirements.
Labels describe achieved objectives. Their count is a simplified modelling assumption for additional effort here.
Breakdown
- ENX registration
- 405 EUR
- Audit day rates(2.5 audit days)
- 3,375 EUR
- Consulting15 → 7.5 preparation days
- 9,000 EUR
- Internal effort (estimate)220 → 132 hours
- 6,600 EUR
- Kopexa Pro license (year 1)
- 7,188 EUR
Software: 599 EUR × 12, one Pro space. Year-one model, excluding VAT. Includes the value of internal working time. Budget separately for technology, training and extra scopes.
Optional: compare effort with Kopexa
(assumes 50% less consulting and 40% less internal effort)
Modelled effort savings: 13,400 EUR
Calculation assumptions & sources
All amounts exclude VAT. The calculation assumes one shared assessment scope: under the ABC model, a 405 EUR ENX fee per site, with a 10% discount from 5 sites and 20% from 10 sites. Labels do not increase this fee. Additional scopes must be budgeted separately. Audit, consulting and effort are illustrative budget assumptions, not ENX day rates or quotations. Both variants use the same current Pro price for one space. The comparison isolates modelled consulting and administrative effort. SIEM, MDM and other technical measures require separate budgets. Savings and payback are not guaranteed.
ENX price list (checked October 18, 2026) ↗Want to see which work can be simplified in your setup? Explore Kopexa without obligation →
Key Cost Factors
ENX Registration Fee
The ENX price list specifies EUR 405 excluding VAT per site and assessment scope under the standard ABC model. A scope with 5–9 sites receives a 10% discount; 10 or more sites receive 20%. Company size and label count do not change this fee. There are no recurring ENX fees during assessment validity. The alternative PBC model requires an agreement with ENX. Official ENX price list ↗
Audit Day Rates
Agree audit day rates and assessment duration with an ENX-approved assessment provider. Request quotations for the same scope and objectives. Ask for preparation, assessment, reporting, travel and any follow-up assessments to be itemised separately.
The calculator uses EUR 1,350 per day for AL2 and EUR 1,450 for AL3 as modelling assumptions. These are not universal provider prices. AL3 involves more intensive verification; derive the required assessment level from your objectives rather than the cheapest quotation.
Internal Costs
Plan specific tasks and hours: review requirements, implement measures, assign evidence, involve staff and support the assessment. Whether this needs a few hours a week or more capacity depends on your existing ISMS and outstanding work.
Value internal working time using an explicit hourly rate. Our examples show reference hours and modelled effort with Kopexa. This is the value of working time, not an additional supplier invoice.
Other Budget Items by Company Size
Company size is an indicator, not a price tag. A small team with many sites or high protection needs can face more work than a larger organisation with a well-maintained ISMS.
- Assessment scope
- Which sites, processes and assessment objectives are in scope?
- Existing ISMS
- Which measures and current evidence can you reuse?
- Outstanding work
- Which technical, organisational or staffing gaps need to be addressed?
The worked examples and calculator separate external expenditure from internal working time. Budget separately for technical upgrades, training and additional scopes as needed.
Timeline: How Long Does It Take?
Separate three timelines: your team’s working hours, the assessment days you book and elapsed calendar time until the result. Waiting for appointments or technical changes extends a project without creating the same workload every week.
Where does each cost arise?
Define the scope
Identify objectives and sites.
Registration & planning
Implement
Address gaps, assign owners and maintain evidence.
Team time, consulting & technology
Assess
Prepare and complete the assessment with the provider.
Assessment & possible travel
Maintain
Address findings and keep the ISMS current.
Follow-up & ongoing work
- Existing ISMS
- Use a gap analysis to identify additional TISAX requirements.
- Starting from scratch
- Establish ownership, risk treatment, measures and reliable evidence first.
- Assessment & findings
- Plan the appointment, possible corrections and follow-up with your provider.
Recertification After 3 Years
TISAX results are generally valid for three years. Continuing requires a new assessment, not simply a standard delta check. A maintained ISMS makes preparation easier, but does not establish a fixed percentage such as “60–70% of initial costs”. Plan continuity with your assessment provider well in advance.
TISAX recertification and continuity planning →
Cost Saving Tips
- Reuse existing work
- Reuse suitable measures and current evidence from your ISO 27001 ISMS. Assess the additional TISAX requirements specifically.
- Make ownership clear
- One owner and a clear next step for each task reduce repeated questions and stalled work.
- Assign evidence directly
- Keep evidence current alongside the relevant measure to reduce searching before customer checks and assessments.
- Compare equivalent scopes and offers
- Budget for the complete required scope. Compare quotations with identical objectives and sites.
For implementation details: TISAX checklist · Audit preparation.
Frequently Asked Questions on TISAX Costs
Direct answers on audit costs, ENX fees, working time and preparation with Kopexa.
What is the TISAX audit day rate in 2026?
Agree the audit day rate with an ENX-approved assessment provider. The quotation depends on scope, objectives, assessment level and the days required. Our calculator uses EUR 1,350 for AL2 and EUR 1,450 for AL3 as calculation assumptions. Ask for preparation, assessment, reporting, travel and follow-up to be itemised separately.
What does the ENX registration cost?
Under the standard ABC model, the ENX price list sets registration at EUR 405 excluding VAT per site and assessment scope. A scope with 5–9 sites receives a 10% discount; 10 or more sites receive 20%. The fee does not depend on company size or label count. There are no recurring ENX fees during assessment validity. Audit and consulting costs are separate. An alternative PBC model is available only by agreement with ENX.
AL2 or AL3: which is cheaper?
AL2 and AL3 differ in assessment depth. AL3 involves more intensive verification and can add on-site and travel effort. There is no fixed percentage difference in cost. Choose the level according to required assessment objectives and customer requirements, then compare appropriate quotations.
Does existing ISO 27001 reduce TISAX costs?
A maintained ISO 27001 ISMS can reduce preparation work by reusing suitable measures, ownership and current evidence. A gap analysis identifies additional TISAX requirements, such as prototype protection. The actual reduction depends on scope and implementation status.
What does TISAX recertification cost after 3 years?
Plan a new assessment to continue after three years. Costs depend on the scope and objectives at that time, organisational changes and the provider quotation. Maintained measures and evidence make preparation easier; a fixed percentage of initial costs is not a reliable budgeting basis.
Where are the typical cost traps hidden?
Common omissions include extra sites or scopes, technical upgrades, training, internal hours, travel and addressing findings. Have quotations show these separately. Record outstanding measures and ownership early so the work is visible before the assessment.
How much does Kopexa save on a TISAX project?
The practical benefit is less repeated administration: reuse measures across linked requirements, clarify ownership and assign evidence directly. The optional calculator comparison holds the published Pro software cost constant and models 50% less consulting and 40% less internal effort with a EUR 7,188 Kopexa Pro licence in year one. These are assumptions, not measured savings. ENX fees and assessment costs are not reduced in the model. Whether Kopexa pays off depends on your setup.
Are there public funding options for TISAX certifications?
Some consulting services may qualify for support programmes. Eligibility depends on factors including location, company size, consulting content, provider and application timing. The German BAFA consulting programme is not a blanket subsidy for TISAX certification. Check current terms before commissioning work and include a grant only once confirmed.