ISO 27001 and SOC 2 readiness
Ready for the audit before the auditor arrives. We put the policies, controls and evidence in place for ISO 27001 and SOC 2, and help you answer the security questionnaires customers send.
What’s included
Gap assessment
Where you stand today against ISO 27001 or SOC 2, in writing.
Policies and procedures
Short, real policies your team can follow.
Controls and evidence
The technical and process controls auditors look for, with evidence collected as you go.
Audit support
Help preparing for, and getting through, the auditor’s review.
Security questionnaires
Clear, accurate answers to the questionnaires customers send.
When it makes sense
- An enterprise customer requires ISO 27001 or a SOC 2 report.
- Security questionnaires slow down your sales.
- You want to be audit-ready before a funding round.
What you get
- A gap assessment
- Policies and procedures
- Controls in place, with evidence
- Support through the audit
Tools we work with
We pick what fits your project and your team, and we’ll say why.
- ISO/IEC 27001
- SOC 2 Trust Services Criteria
- Compliance automation tools
Questions about compliance and audit readiness
Can you get us ISO 27001 certified?
We prepare you for certification: policies, controls, evidence and an internal review. The certificate itself is issued by an accredited certification body after its own audit.
Who issues the SOC 2 report?
An independent CPA firm. We prepare you and support you during their audit; the report itself has to come from them.
Related services
Tell us what you need built.
A free 30-minute call with an engineer. You get the scope, timeline and price in writing before you commit, and a reply within one working day.