When does your customer need the report?
Give us the date sales promised. We’ll count back eight weeks, book the audit firm’s fieldwork week, and print one price with their fee already in it.
A compliance platform gets you ready. The audit is a second purchase, from a firm with its own calendar, and fitting the two together is where the date slips. Fieldproof is both, on one invoice, with the audit week counted back from your date.
| Report | SOC 2 Type I |
|---|---|
| Window | 8 weeks |
| Audit firm | Ardwell Pike LLP |
| Price | $16,800 |
| Your time | 2–3 h / week |
| Record | 68 of 71 |
- Day oneSign, then connect GitHub, AWS, Google Workspace, Okta, Jira and Slackby Fri 23 Oct
- W1First Monday. The Binder starts from your answersMon 26 Oct
- W7Fieldwork with Ardwell Pike LLP. The as-of date is the MondayMon 7 Dec
- W8SOC 2 Type I report issuedFri 18 Dec
- TotalArdwell Pike LLP’s $7,200 fee included. One invoice.$16,800
days to report
Eight weeks, counted down
passed
Four things are failing, and you know which
33 passed, 8 in progress, 2 not started, 4 failing. Each failure names a fix and an owner.
Mon 24 Aug
6 risk changes logged in RISK
W. Okafor
4 control failures, each ticketed with an owner
W. Okafor
Tue 25 Aug
Fraud risk section signed
W. Okafor
Confidential data inventory signed
W. Okafor
Wed 26 Aug
Post-incident review for INC-14 (3 Jul)
W. Okafor
Capacity alarms on 9 services
Tap, no one
Thu 27 Aug
Quarterly control review, Q3
Fieldproof reviewer
Restore test: none on record
Tap, no one
Fri 28 Aug
Leavers since 1 Mar: 4 of 5 removed, P. Nair still in Stripe
W. Okafor
Sat 29 Aug
Sun 30 Aug
Mon 24 Aug · 5 evidence
6 risk changes logged in RISK
W. Okafor
4 control failures, each ticketed with an owner
W. Okafor
Tue 25 Aug · 14 evidence
Fraud risk section signed
W. Okafor
Confidential data inventory signed
W. Okafor
Wed 26 Aug · 12 evidence
Post-incident review for INC-14 (3 Jul)
W. Okafor
Capacity alarms on 9 services
Tap, no one
Thu 27 Aug · 8 evidence
Quarterly control review, Q3
Fieldproof reviewer
Restore test: none on record
Tap, no one
Fri 28 Aug · 3 evidence
Leavers since 1 Mar: 4 of 5 removed, P. Nair still in Stripe
W. Okafor
Two to three hours a week, and where they go
| When | Your side | Who | Time |
|---|---|---|---|
| Day one | Connect the six Taps | 30 min | |
| W1 | Answer 40 questions for the Binder | 2 h | |
| W1–W2 | Edit and sign the 14 policies | 3 h | |
| W2 | First access review, 41 accounts | 40 min | |
| W3 | Upload what no Tap can see | 1.5 h | |
| W4–W5 | Fix the four failing controls | 6 h | |
| W5 | Dry Run, three sessions | 3 h | |
| W7 | Two walkthroughs with the auditor | 40 min | |
| Total | About 17 hours across eight weeks | 2.2 h / wk |
| Our side, every week |
|---|
| Pull evidence through six Taps, on a schedule |
| Write the Binder's first draft from your answers |
| Check every upload in Second Look before it counts |
| Run the Dry Run in the auditor's order |
| Book Ardwell Pike and answer the DRL from the Ledger |
You don’t need a compliance hire. You need someone who has done this before to tell you which 40 minutes matter.
“Our largest prospect’s security review asked for a SOC 2 by the end of September. I typed September 25 into the box on a Thursday night, and the report was dated the Monday they’d said it would be.”
| Signed | Thu 30 Jul 2026 |
|---|---|
| Fieldwork | Mon 14 Sep 2026 |
| As-of date | Mon 14 Sep 2026 |
| Report issued | Fri 25 Sep 2026 |
| Engineering time | 2.4 h / week, averaged |
| Exceptions | 0 |
A Type I is a photograph. Type II is the film.
The Type I says your controls were designed correctly on one day. Larger customers will ask next for a Type II, which tests that the same controls operated across an observation window of three to twelve months. Standing carries you through that window on the same Ledger, and the annual audit fee is inside the monthly price.
See Standing on the price page- Owner
- Wendell Okafor
- Source
- Okta Tap
- Population
- 5 leavers since 1 Mar
| Leaver | Left | Access | |
|---|---|---|---|
| Priya Nair | 14 Aug | Okta · Google · Stripe admin | |
| Tomás Ruiz | 13 Mar | Okta · Google · Slack | Removed in 2 h |
| Hannah Croft | 30 Apr | Okta · GitHub · AWS prod | Removed in 3 h |
| Joel Marsh | 2 Jul | GitHub · billing-svc | Removed in 1 h |
| Nadia Boateng | 24 Jul | Okta · Google · Slack | Removed in 4 h |
| Q3 2026 | 2 of 3 leavers removed | Failing |
| Q4 2026 | Opens 1 Oct · Standing | Open |
| Q1 2027 | Opens 1 Jan · Standing | Open |
When someone asks for ISO 27001
Rerun is the same schedule, pointed at a certificate. Give us the date the customer needs it. We count back to Ardwell Pike’s Stage 1 and Stage 2 audits, book both, and put the certificate on a Friday. Add it to Standing for $690 a month, with the certification audit included.
- Day oneSign. The ISO 27001 controls join your Ledgerby Fri 13 Nov
- W5Stage 1 with Ardwell Pike LLP: they read the ISMS documentsMon 14 Dec
- W8Stage 2: they test that it runs, two daysMon 4 Jan
- W10ISO 27001 certificate issuedFri 22 Jan
- PriceOn Standing. Ardwell Pike LLP’s certification audit included.$690 / mo
Pick the date.
Since March 2025, 68 of 71 Opinion reports were issued on the date we counted back to at signing. Two were a week late because the customer moved fieldwork; one was three working days late, and that one was ours. All three are on the trust page.
No call needed. If your scope is unusual (several products, a regulator, more than 60 people), tell us about it here.