Prepare your evidence.
Plan your independent audit.

One program, three separate roles

Your team operates the controls. Readiness specialists help with scope, gaps, policies and evidence. An independent, qualified external provider makes the certification or attestation decision.

ISO management-system certification is performed by a certification body. A valid SOC 2 report is issued by a licensed CPA firm. TrustCertia’s website evidence badge does not establish either outcome.

Scope a readiness engagement

• Define the product, entity, systems, locations and framework in scope.
• Assess gaps and create an agreed remediation plan with owners.
• Prepare an evidence inventory and select a suitable evidence platform.
• Coordinate introductions and independent auditor proposals, subject to provider acceptance and availability.
• Plan report handling, renewal dates and ongoing evidence maintenance.

Custom pricing, agreed in advance

Readiness assessment: one-time scoped quote. Guided remediation: project quote. Ongoing evidence support: optional separately agreed recurring fee. External platform subscriptions, audit fees, certification fees and specialist testing are itemized separately.

No audit provider or platform partnership is represented as established today. Any referral compensation will be disclosed before an introduction. Acceptance, scope and timing depend on a written engagement and provider availability.

Choose the appropriate outcome

ISO/IEC 27001: an information security management system assessment within a defined certification scope, followed by the certification body’s decision and surveillance requirements.

SOC 2 Type I: the system description and control design at a specified date. Type II additionally addresses operating effectiveness over the examination period. The CPA firm sets the examination terms and issues its report.

Reports and customer evidence should remain private unless the issuer’s terms and your permissions allow sharing. An owner-supplied document is labeled as such; purchasing readiness services does not upgrade the website’s evidence status.

Documentation & audit guidance

Need help building policies, evidence registers and your assessment roadmap? Explore our separately scoped documentation service.

Request your scope

Tell us your company website, target framework, team size, target date, existing auditor or platform, and the support you need. Send no passwords, identity documents or restricted audit reports in the initial request.

Independent references

ISO: certification and accreditation · AICPA: SOC 2 report review checklist · Example platform partner program