FAQ
Frequently asked questions
Quick answers to the questions we hear most. Do not see yours? Just ask.
What does a compliance consultant do?
We prepare your company for an audit or certification: scoping, gap assessment, policies, controls, evidence and audit support. The audit itself is performed by an independent firm.
How long does it take?
It depends on the framework and your starting point. Many companies are SOC 2 Type I-ready in 8–16 weeks; ISO 27001 typically takes 4–9 months.
How much does it cost?
Pricing depends on the services and scope you need, so we don’t publish fixed prices. Contact us, and after a free consultation you will receive a written proposal with a fixed price.
Do you perform audits?
No. To stay independent, we never audit our own work. We introduce you to and work alongside independent auditors.
Do we need a compliance automation tool?
Not necessarily. Tools can reduce manual work, and we work with all major platforms, but they are not required.
Is our information safe with you?
Yes. We sign NDAs, use encrypted, access-controlled systems and follow the practices described in our Trust Center.
Can you help after we are certified?
Yes. Ongoing support and vCISO retainers keep your program current between audits.
Bring your next audit into the light.
Book a free 30-minute consultation. We will map where you are, what your customers need and the fastest path to get there.