How it works
From first call to certificate, and every visit after.
Four steps, one record
1
Week 0–1
Scope
A 30-minute readiness call, then a written scope: frameworks, gaps and a realistic audit date.
2
Weeks 1–8
Build
Controls mapped once across frameworks, policies written with your team, and 49 connectors collecting evidence, hashed on arrival.
3
From week 8
Audit
Your auditor works in its own workspace, reviews evidence live and raises findings. Your team fixes them, and a second person verifies.
4
Ongoing
Stay certified
Continuous monitoring, check-in visits and renewal on the same record, with a Trust Center your buyers can read.
Your compliance lead
Someone who has done this before, every week
- Scopes your frameworks against the deals and regulators that matter
- Writes policies your team will actually follow
- Maps controls once, so the next framework reuses them
- Coordinates your auditor from booking to report
- Runs a weekly check-in so nothing stalls
8–12
49
3
1
Questions about the engagement
What does your compliance lead do?
The decisions software cannot make: scope, which controls apply, how to word a policy and how to answer an auditor. Your team implements the technical controls with that guidance, and the platform collects the evidence.
Who is the auditor?
An independent CPA firm for SOC 2, or an accredited certification body for ISO. We introduce auditors from our network or work with yours. Certifyi never issues the opinion.
What happens after the certificate?
Monitoring, scheduled access and vendor reviews, surveillance-audit preparation and your Trust Center, all on the same record. Adding a framework reuses what you have already built.