The platform. The audit. Any add-ons. Everyone knows what they’re paying for, and no one gets surprised at renewal.
How to buy
Through a partner, a distributor, or directly from us
soc2audit.ai is sold through IT providers, CPA firms and distribution, as well as directly by our team, so platform pricing is quoted for your company rather than published. Every subscription includes the full platform, and the audit fee is always quoted separately by your CPA firm.
Through your IT provider or CPA firm
Already work with an IT provider, MSP or CPA firm? Ask them about soc2audit.ai, or ask us and we will introduce you to a partner.
AI copilot, policies, evidence collection, connected control checks, and the auditor workspace. Annual subscription, quoted for your company.
Audit Fee
Your AICPA partner firm
Quoted separately by the CPA firm that runs your audit. Type I typically $15,000–$30,000 and Type II typically $25,000–$60,000, depending on scope and firm. See the SOC 2 cost breakdown.
Optional Add-Ons
Cyber Security Services
Pen testing, vulnerability management, virtual CISO. Priced per engagement. Never bundled, never required.
Who Provides It
Platform Subscription
soc2audit.ai
Audit Fee
Your AICPA partner firm
Optional Add-Ons
Cyber Security Services
What You Pay For
Platform Subscription
AI copilot, policies, evidence collection, connected control checks, and the auditor workspace. Annual subscription, quoted for your company.
Audit Fee
Quoted separately by the CPA firm that runs your audit. Type I typically $15,000–$30,000 and Type II typically $25,000–$60,000, depending on scope and firm. See the SOC 2 cost breakdown.
Optional Add-Ons
Pen testing, vulnerability management, virtual CISO. Priced per engagement. Never bundled, never required.
Subscription Tiers
Platform Subscription Tiers
Plan
Starter
Growth
Scale
Enterprise
Price
Quote
Quote
Quote
Quote
Fit
Up to 25 employees, SOC 2 Type I focus
Up to 100 employees, SOC 2 Type I and Type II
Up to 250 employees, SOC 2 Type I and Type II
250+ employees, custom needs
Includes
Every module: AI copilot, policies, risk register, access and vendor reviews, evidence
Everything in Starter, sized for larger teams and Type II observation periods
Everything in Growth, plus priority audit coordination and onboarding help
Custom terms, onboarding, and audit partner routing
Plan
Starter
Growth
Scale
Enterprise
Price
Quote
Quote
Quote
Quote
Plan
Starter
Growth
Scale
Enterprise
FIT
Up to 25 employees, SOC 2 Type I focus
Up to 100 employees, SOC 2 Type I and Type II
Up to 250 employees, SOC 2 Type I and Type II
250+ employees, custom needs
Plan
Starter
Growth
Scale
Enterprise
Includes
Every module: AI copilot, policies, risk register, access and vendor reviews, evidence
Everything in Starter, sized for larger teams and Type II observation periods
Everything in Growth, plus priority audit coordination and onboarding help
Custom terms, onboarding, and audit partner routing
Every Plan
Included in Every Plan
AI-guided gap assessment
AI-guided remediation with generated policies
Read-only integrations with AWS, GitHub, Microsoft 365, and Okta
AI-guided evidence collection for Type I & Type II
Connected control checks that keep evidence up to date
AI answers for inbound security questionnaires
HIPAA security risk assessment module
Access to our pre-vetted AICPA-licensed audit partner network
Employee policy acknowledgment tracking by email
Risk assessments, business continuity planning, and incident tracking
Email support from the Cyber Security Services team
Faq
Frequently Asked Question
Why is the audit fee separate?
Because under AICPA rules, the audit must be performed by a separate, independent CPA firm, not by a software platform. Every SOC 2 platform in the market works this way, whether they say so upfront or not. We say so upfront.
Why don't you publish prices?
soc2audit.ai is sold through IT providers, CPA firms and distribution as well as directly, so platform pricing is quoted for your company and how you buy. Contact us for a quote or an introduction to a partner. There are no setup fees and no per-user fees.
Do you charge per user?
No. Pricing is per company, based on your size. Add as many admins as you need.
Do you charge per framework?
No. Every plan covers SOC 2, with controls mapped to ISO 27001, HIPAA, and CJIS so your work carries over. That mapping is included at no extra cost.
What about year-two renewals?
Renewal terms are set out up front in your quote, so there is no year-two surprise.
Can I try before I buy?
Yes. Start free: complete a gap assessment and see the recommended remediation roadmap before you subscribe.
What if I need pen testing or a vCISO?
Those are optional services from our parent company, Cyber Security Services. Priced per engagement. You are never required to buy them, and you can bring your own vendor if you prefer.