Free. Answer a few questions, get a policy document you can adapt, mapped to ISO 27001 8.13, SOC 2 and NIS2. Everything runs in your browser: nothing you type is sent to us.
This is a starting template, not legal or audit advice. Adapt it to how your organisation actually works, then have it approved like any other policy. Auditors check that practice matches policy, so only commit to what you'll do.
Section 6 is the hard part. Writing "daily automated restore tests" is easy; running them and keeping the records is what auditors check. RecoverProof runs those tests inside your infrastructure and produces the evidence for section 7.