Which SOC 1 certification path fits you?
Six questions, two minutes. We’ll point you at the right SOC 1 report -- Type 1 point-in-time, readiness assessment, or full Type 2 -- based on your services, customer requirements, and control maturity.
Why the path matters more than the price
Most SOC 1 budget disasters aren’t about overpaying a CPA firm -- they’re about buying the wrong engagement: a Type 2 when a Type 1 would do, or a cold-start Type 2 that stalls because nobody did readiness first. Answer honestly; the quiz below routes you to the path that fits your situation, with typical costs and timelines for each.
The 2-minute quiz
1. Do your services affect your customers' financial reporting (payroll, billing, claims, transaction processing, hosting)?
2. What have your customers (or their auditors) told you they require?
3. Has your control environment been through a SOC examination before?
4. How mature are your documented controls (access reviews, change management, reconciliations)?
5. What's driving your timeline?
6. How many employees touch the in-scope services?
How scoring works
Each answer is worth 0–2 points (max 12). 0–4: your profile fits the Type 1 path. 5–8: a readiness assessment first. 9–12: a full Type 2 with a licensed CPA firm. This is a routing aid, not an examination opinion -- confirm what your customers will accept in writing.
Know your path? Get quotes
Assessors scope fees around your path. Tell us where you stand and get matched.
How it works: tell us once (4 questions, 2 min) → we match licensed auditors to your size and scope → they send scoped quotes directly. Free, no obligation.