Certification readiness
Gap analysis, remediation tracking and continuous evidence collection in the Trust Workspace, then an introduction to an accredited auditor or certification body. OpenDossier prepares; the independent firm or body certifies.
Frameworks
SOC 2 (Type I and Type II, AICPA Trust Services Criteria), ISO/IEC 27001:2022, ISO/IEC 42001:2023, ISO/IEC 27701. Others by arrangement.
How a programme runs
Evidence inventory from the Trust Workspace; gap analysis against the framework; remediation plan with owners and deadlines; evidence collection through integrations (identity, cloud, HR, ticketing) and uploads; readiness review; auditor introduction and scoping; continuous monitoring after the certificate.
Pricing
Readiness programmes from US$8,000 (SOC 2), US$12,000 (ISO 27001) and US$15,000 (ISO 42001); continuous monitoring from US$400 a month. Auditor and certification-body fees are separate and paid to them.
The boundary
We do not issue attestations or certificates, and we do not guarantee that an auditor will. We make the evidence complete and findable, which is most of the work.
Questions
How long does it take?
Readiness two to four months for a company with basic controls; a SOC 2 Type II needs an observation period of typically three to twelve months after Type I; ISO certification involves stage 1 and stage 2 audits and three-year cycles with surveillance.
Can I use my own auditor?
Yes. We prepare the evidence pack in the form your auditor asks for.
Start
One company, one brief, or claim your own profile.