Everything between you and the external audit.
Build it, check it, prove it. Choose a single engagement or let us run the whole journey. Every engagement is scoped to your business and agreed in writing before we start.
Build it Implementation (includes internal audit)
Check it Internal audit & assessment
Prove it Pen testing & audit support
Broaden it Other frameworks
Managed Compliance · Retainer
Your dedicated compliance team to build and maintain your certification, month after month, so it never slips.
How engagements work
How do you price an engagement?
Your size, systems and deadline set the scope. Within that, we work with you to get the most value from your budget, looking at the total cost of ownership rather than just our fee. After a free 30-minute consultation we send a written proposal with a clear scope, deliverables and timeline.
What isn’t included?
Certification body or SOC 2 auditor fees, which you pay to them directly, and any tooling you choose (such as Vanta). Remediation that needs your own engineers, such as configuration changes, is done by your team with our guidance.
Can we start small?
Yes. Many clients start with a gap assessment, internal audit or penetration test, then move to full implementation or a managed compliance retainer.
How is our data protected?
Every engagement begins with a signed NDA and a short onboarding questionnaire before any access is granted, and we use the least access the work needs.
Talk to someone who has taken companies like yours to audit.
Book a free 30-minute consultation. Tell us what is driving the need, and leave with a realistic timeline and the first three things to do.