SOC 2 readiness with a clear plan and engineering support

Our SOC 2 readiness support covers a readiness gap assessment, control mapping, access management improvements, change-management workflows, logging, backup procedures, policy documentation and evidence collection processes. We work with your control owners and your chosen auditor to clarify responsibilities and prepare the required material. The exact scope depends on your current stage, the controls in scope and how much implementation work your team wants us to take on.

No. We do readiness only. An independent CPA firm performs the SOC 2 examination and issues the report, and the outcome is theirs to determine. Our role is to help you assess readiness, close technical gaps and organise evidence so you go into the examination prepared. We do not certify your organisation or guarantee a result, and we work alongside the auditor you choose.

The SOC 2 infrastructure package starts at $5,900 for one AWS organisation and one main application. It covers the technical controls auditors test: access, change management, logging, encryption, backups and vulnerability management, with evidence connected to your compliance platform. Policy writing, larger environments and ongoing support are quoted to scope. Auditor fees and platform licences are paid by you directly.

We need a named contact, access to the systems in scope and time from your control owners, the people responsible for areas such as access, change management and backups. It helps to know your target timeline, any customer requirements driving the audit and whether you have chosen an auditor. Control owners stay accountable for their controls; we help them implement, document and evidence the work.

Your team receives a prioritised readiness roadmap, ownership assignments for each control and documented implementation work. Depending on scope, that includes improved access management, change-management workflows, logging, backup procedures, policy documentation and a repeatable evidence collection process. These are the materials your team presents to the independent CPA firm, which then performs the examination and issues the SOC 2 report.

Yes. The service suits SaaS companies and technology service providers preparing for their first audit, as well as teams part-way through that need engineering help to close gaps. It is also a fit if a customer has asked for SOC 2 during a security review. It is not a substitute for an auditor, and it is not suitable if you need someone to issue the report.