SOC 2
Get ready for a SOC 2 Type 1 or Type 2 report against the Trust Services Criteria. The report is issued by an independent CPA firm. We get you there and stay with you through the audit.
SOC 2
Prepared for Northwind Labs · Gap assessmentProve your controls to customers in the US and beyond.
Readiness assessment
Gap analysis against the criteria you choose.
Control design
Controls that fit how your team already works.
Evidence collection
Organised for the whole audit period.
Auditor liaison
We manage requests between you and the CPA firm.
From kickoff to certification in six steps
- Gap assessmentWhat you have today compared with what is required.
- PlanOwners, timelines and the evidence you will need.
- BuildPolicies, procedures and controls put in place.
- EvidenceOrganised so the auditor can find everything.
- Internal auditAn independent check so there are no surprises.
- External auditWe stay with you through certification or review.
What you get
- Gap assessment report and remediation roadmap
- Tailored policies, procedures and templates
- Risk register and control mapping
- Internal audit report and management review pack
- Support through the external audit
Who needs it
- B2B SaaS selling to US customers
- Data processors and analytics platforms
- Managed service providers
- Startups facing their first security questionnaire
Questions about SOC 2
How long does it take?
It depends on your scope and starting point. You get a realistic timeline after the gap assessment.
Do you issue the certification?
Certifications and attestations are issued by accredited certification bodies or licensed firms. We prepare you, run the internal audit and support you through the external audit.
Can we combine standards?
Yes. Controls overlap heavily, so evidence collected once is reused, for example ISO 27001 with SOC 2, or ISO 9001 with ISO 14001 and ISO 45001.
What does CertiClad certify?
We issue certificates for the audits and assessments we carry out. Each one can be verified on this website.
Ready to secure it, certify it and prove it?
Book a 30-minute call. We look at your stack, your standards and your deadline, and send a fixed quote within two working days.
- A named lead for your engagement
- Fixed scope and fixed price
- Certificates your customers can verify