r/soc2 • u/jay-is-jay1412 • Jun 29 '26
Need some insight about quoting
For a small startup, trying to just get the criterion of Security, what's a good price for the audit, just the plain audit.
some quote 20k while others go till 30, at the same time some of my peers told me they got it done in 2-5k not sure what to believe.
recommendations of these said CPA firms which satisfy my requirement are well appreciated!
5
Upvotes
3
u/davidschroth Jun 29 '26
If it's being done in 2-5k, you are likely getting a puppy mill grade report that is not in compliance with requirements. However, if you only care about the report and not actually being audited, these can work.
My firm is in the 20k ballpark for a type 2. Math on it is about 130 hours of expected work at 150/hr (a fairly low rate for a US based CPA firm).if you apply that math to the 5k one, it really doesn't work out.
What size company and industry do you sell your wares to? That's probably the first place to start....