Most firms use one of three models: time-and-materials (hourly or daily rates), fixed-price for bounded scopes, or dedicated team retainers with a fixed monthly cost. Hourly rates vary by geography and seniority. For regulated industries, compliance architecture work commands a premium regardless of geography. A discovery phase is usually priced separately at fixed cost before a full engagement begins.