How we engage.

Two engagement shapes. Fixed scope on entry. Optional retainer once your Type I report is in hand.

Fixed engagement

Type I readiness

Fixed scope · fixed quote

We take you from current state to Type I report. Scoping in week 1, policy and control build through weeks 2–7, mock audit in the final week. Weekly written status. No standing meetings.

  • Gap assessment
  • Policy set
  • Evidence pipeline
  • Mock audit
  • Auditor liaison through report
Ongoing retainer

Type II maintenance

Monthly · twelve-month minimum

Continuous evidence collection, quarterly internal control reviews, annual renewal prep, and auditor coordination through the observation period. We hold the standard so your engineering team doesn't have to.

  • Continuous evidence
  • Quarterly reviews
  • Renewal prep
  • Auditor liaison
  • On-demand control consults
Pricing

Three tiers. Fixed quote.

Engagement scope determined in the scoping memo before any commitment. The quote is the quote.

FOUNDATION
$8,500

For clean cloud-native stacks and Seed–Series A SaaS preparing for first enterprise procurement. Security trust criteria only. Single-environment scope.

STANDARD
$13,500

The typical engagement. Security plus one additional trust criterion (Availability or Confidentiality). Multi-tool environments with established infrastructure.

COMPREHENSIVE
$18,500

Complex engagements. Multiple trust criteria, multi-region deployments, or pre-existing compliance gaps requiring remediation. Includes extended auditor coordination through fieldwork.

Type II maintenance retainer: $2,500/month, twelve-month minimum. Available after Type I report is in hand.

Guarantee

Pass on the first attempt, or we run remediation free.

If your auditor returns material findings tied to Craine Technical's deliverables, we run remediation at no additional cost until your auditor signs off. The fixed quote is a maximum, not a minimum.

This isn't aspirational. It's how we'd want to be treated if the work weren't ours.

Engagement FAQ

Common questions before scoping.

Begin an engagement

Start with a scoping memo.

Send a brief describing your current SOC 2 state and target audit date. You'll receive a written scoping plan and fixed quote within two business days — yours to keep, regardless of whether you engage us.