Partners
Regulator packs make an implementation configuration, not a build.
Sastrum is sold and delivered with partners who already advise regulated firms. This page answers the questions a consultancy, managed service provider or integrator asks before the first call.
01About partnering
- Who partners with Sastrum?
- GRC and cyber security consultancies, managed service providers, systems integrators and regional firms that already advise regulated clients. We are looking for partners in Australia, Malaysia, Saudi Arabia and India, in banking, insurance and capital markets first. Our partners today: Accuteque in Australia (Melbourne, Sydney and the Sunshine Coast).
- What kinds of partnership are there?
- Two. A referral partner introduces a prospect and SecurEyes sells and delivers. A reseller and services partner sells the subscription, implements it and gives first-line support, with SecurEyes behind them. Most partners start as referral partners and move to reseller after their first deployment.
- What does SecurEyes bring?
- The product, with regulator content packs for India, Malaysia, Australia and Saudi Arabia; Lumina AI, which drafts controls and policies for a named person to sign; and the company behind it: twenty years in cyber security and GRC consulting, about 350 staff across India and Saudi Arabia.
- Why is Sastrum easy to partner with?
- A regulator pack means an implementation is configuration, not a build: the frameworks, controls, risks, policies and audit tests for a sector are mapped before the first workshop. Lumina drafts; your consultants do the judgement and the sign-off. A first deployment for a small or mid-size firm takes eight to twelve weeks and twenty to thirty consultant-days.
- Which customers are the fit?
- Small and mid-size regulated firms: banks, building societies, credit unions, NBFCs, insurers, brokers, super and pension funds, and capital market firms. Larger enterprises are handled jointly with SecurEyes.
02Commercials
- How is Sastrum priced?
- An annual subscription per customer, by module tier and user band, for SaaS. Private cloud and on-premise deployments run the same product and are priced on request. Implementation, training and support services are priced by the partner.
- What does a partner earn?
- A referral partner earns 10% of the first-year subscription of a deal it introduced. A reseller partner buys the subscription at 20% below list for the life of the customer and sets its own services fees. Rates are fixed in the partner agreement and do not change for a registered deal.
03Enablement
- What training do partners get?
- Three days of product training for consultants, online, covering onboarding, the risk profile, control mapping, policy drafting with Lumina, audit and incidents. Free for the first five people from a partner; further seats at cost. The material is the system-user training built for the Malaysian deployment, adapted for partners.
- Is there a certification?
- Planned for the second quarter of 2027: a Sastrum Certified Consultant badge after training and one supervised implementation.
- Can partners demo the product?
- Yes. Each partner gets a demo tenant with the sample organisation, five user logins, and the regulator packs for their country. Demo data is refreshed monthly.
- What collateral is there?
- The two-minute product film, module stills, the country content for the partner's market, a security and trust summary, and a sales deck. Partners may add their own logo beside Sastrum's on co-branded material; the product name and claims stay as published on the website.
04Delivery and support
- Who implements?
- The reseller partner, with SecurEyes on call. For a partner's first deployment SecurEyes leads and the partner shadows; from the second, the partner leads. A typical deployment covers onboarding, the risk universe, one or two regulator packs and two modules, over eight to twelve weeks.
- Who supports the customer?
- First line: the partner, in local business hours. Second line and product fixes: SecurEyes, Monday to Friday, in Indian and Saudi business hours, with weekend cover for severity 1.
- What are the response times?
- Severity 1 (service down or data at risk): response within one hour, workaround within eight. Severity 2 (a module unusable): response within four business hours, fix or workaround within two business days. Severity 3 (everything else): response within two business days. Set out in the support schedule of the partner agreement.
- How do escalations work?
- Partner support lead to [email protected], then to the Sastrum product head, then to SecurEyes' CEO. Severity 1 goes straight to the product head.
- Where is the customer's data hosted?
- SaaS in a cloud region in or near the customer's country, private cloud in the customer's own account, or on-premise. The same product in each case. The hosting region is stated in the customer's contract.
- Who answers the regulator's questions about an outsourced provider?
- SecurEyes supplies a security pack on request: data handling, hosting, access control, business continuity, penetration test summary and the certifications held, so the partner can answer a customer's vendor due diligence.
05Marketing and leads
- Where do website enquiries go?
- An enquiry from a partner's country goes to the partner and to SecurEyes at the same time. The partner replies within one business day and owns the conversation; SecurEyes joins on request.
- Can partners be named on the website?
- Yes, with written consent, on the country page and the partner page: name, locations, contact details and hours. Partner tiers are not shown; the programme has none yet.
- Is there co-marketing?
- One joint webinar a quarter, with SecurEyes providing the speaker and content and the partner the audience and follow-up. Events case by case. Each side bears its own costs unless agreed in advance.
- Can partners run their own campaigns?
- Yes, using the approved content. Claims about the product must match the website: what it does, what it is certified for, who uses it. Figures need a public source. Customer names need the customer's written consent.
06Getting started
- How do we apply?
- Use the partner enquiry form, or write to [email protected]. Tell us your country, the sectors you serve and the kind of partnership you have in mind.
- What happens next?
- A call within two business days, a demo, and a short questionnaire on your practice and clients. If both sides want to go ahead, the partner agreement follows within three weeks.
- What is in the agreement?
- Partner type, territory, rates, deal registration, the support schedule, training, branding rules, data protection, and a one-year term that renews unless either side gives 60 days' notice.
- Who is the contact?
- [email protected], for partnerships in all regions.
Tell us your country and the sectors you serve.
A call within two business days, then a demo on the regulator packs for your market.