Sign in Get started

Done with you

SOC 2 Readiness Sprint

Four weeks at a fixed price, working through it with Keel’s founder. You go from “a customer asked for our SOC 2” to a scoped, documented program you can hand an auditor.

Chris Brock has been a CIO for more than a decade and has taken companies through six ISO 27001, SOC 2 and HIPAA audit cycles with zero major nonconformities.

Contact for pricing Prefer to do it yourself? See plans

Four weeks, one deliverable each

  • Week 1: Scope

    Settle the Trust Services Criteria, the systems in scope, and Type I or Type II. You leave with a written scope and a timeline.

  • Week 2: Gaps

    Keel’s SOC 2 control set goes into your workspace. Every control gets an owner and an honest rating, and the gaps are ranked by effort.

  • Week 3: Policies and evidence

    Missing policies are drafted from Keel’s templates and fitted to how you actually work, with an evidence plan for each control.

  • Week 4: Readiness review

    A walk-through of what is left, your trust center published, and introductions to audit firms if you want them.

What is and isn’t included

Included

  • Keel Starter for the length of the sprint
  • Weekly live working sessions, with email support between them
  • One customer security questionnaire answered together

Not included

  • The audit itself. A licensed CPA firm performs SOC 2 audits.
  • Engineering changes. You get told what to change; your team or MSP makes the change.
  • A guaranteed outcome. Nobody can honestly promise one.

Price

Contact for pricing. The price is fixed and agreed in writing before week 1 starts.

Contact for pricing

Questions

Do I need to be a Keel customer already?
No. Keel Starter is included for the length of the sprint. Afterwards you can keep it, move to another plan, or drop to Free and keep your data.
Type I or Type II?
That gets decided in week 1. Many first-time companies start with Type I to get a report sooner, then move to Type II. Your customer’s request usually settles it.
Does the sprint include the audit?
No. A licensed CPA firm performs SOC 2 audits, and Keel does not issue reports. The sprint gets you ready for one.
Can my MSP take part?
Yes. They are often the ones making the technical changes, so it helps to have them in the week 2 and week 3 sessions.
What does it cost?
It is a fixed price, agreed before you start. Contact us for pricing and we will send a short written proposal.