Get ready for your first SOC 2 audit

When a customer asks for SOC 2, you need two things: a security program that's ready to be tested, and an independent CPA firm to do the testing. We help you with the first and introduce you to the second.

What you get

• A gap assessment against the SOC 2 Trust Services Criteria (usually Security first)
• Policies, controls and an evidence plan built from our templates
• Help choosing and setting up a compliance platform if you want one
• An introduction to an independent CPA firm from our vetted partners. The audit itself is done and billed by that firm. SOC 2 reports are issued by licensed CPA firms, not by us.

Price

Fixed fee, scoped on a short call. The CPA audit is billed separately by the audit firm.

We get you ready for the audit. We don't perform it or issue the report.