A-LIGN
Listed · public sourcesA-LIGN is listed as an Audit Partner in the Vanta directory (observed Jul 2026), founded 2009. Listed for SOC 2 attestation, SOC 1 attestation, ISO 27001 certification and HITRUST assessment (Type 2) across GDPR and CMMC; the firm also offers penetration testing, readiness & implementation and vCISO & advisory.
Compiled from public sources · observed Jul 2026
Appears in Vanta's Audit Partner directory and Drata's Audit Alliance · observed Jul 2026
Before you request a quote from A-LIGN
You’d be talking to GRC Migrate, the independent advisor, not A-LIGN.We don’t sell audits. You get an independent read, and an introduction to a vetted partner where one fits.
See what buyers at your size actually paid →Independent by structure: nothing from platform vendors, nothing from firms to be listed. We earn a flat referral fee only when a vetted partner accepts an introduction, disclosed plainly.
Get Connected to this auditor
Prefer not to book a call? Share a few details and GRC Migrate, the independent advisor, reviews it first and makes a warm intro if it’s a fit. You’re reaching GRC Migrate, not A-LIGN directly.
Already have a quote from A-LIGN or another firm?Get an independent read on it →
The facts, with their sources
Every line below is compiled from a public source and dated. Nothing here is written by the firm.
Sources last observed
Services
| Detail | Source |
|---|---|
| SOC 2 attestation | a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| ISO 27001 certification | a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| ISO 42001 readiness | a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| PCI DSS assessment | a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| HITRUST assessment | a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| FedRAMP assessment | a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| readiness & implementation | a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| SOC 1 attestation | a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| HIPAA assessment | a-lign.com · Jul 2026 |
| penetration testing | a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| vCISO & advisory | a-lign.com · Jul 2026 |
Frameworks
| Detail | Source |
|---|---|
| SOC 2 | a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| ISO 27001 | a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| ISO 42001 | a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| PCI DSS | a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| HITRUST | a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| FedRAMP | a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| CMMC | a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| SOC 1 | a-lign.com · Jul 2026; a-lign.com · Jul 2026 |
| HIPAA | a-lign.com · Jul 2026 |
| GDPR | a-lign.com · Jul 2026 |
Founded
| Detail | Source |
|---|---|
| 2009 | a-lign.com · Jul 2026 |
Audit types
| Detail | Source |
|---|---|
| Type 2 | a-lign.com · Jul 2026 |
Directory presence
- Drata directory · observed Jul 2026
- Vanta directory · observed Jul 2026
Before you request a quote from any firm
- Scope: how many Trust Services Criteria, and how many systems, are in scope.
- Type 1 vs Type 2: a point-in-time report costs less than a 3–12 month observation window.
- Readiness vs audit: whether the quote covers gap-closing work plus the audit, or the audit alone.
- Firm tier: specialist, regional CPA, mid-tier national, and Big Four firms price the same scope very differently.
Firm website (a fact, not a recommendation): a-lign.com
We hold too few verified quotes for A-LIGN to publish a firm-level figure, and we won’t estimate one.
The audit is a separate cost
We hold too few verified quotes for A-LIGN to publish a firm-level figure, and we won’t estimate one.
The external audit is a separate engagement with a licensed CPA firm, priced independently of any platform. Firm tier drives cost more than your company size does.
- The platform fee does not include the audit.
- The audit is a separate engagement with a licensed CPA firm.
- You choose your own auditor. It is not tied to your platform.
- Firm tier drives cost more than company size.
We don’t publish audit-cost figures yet. We won’t cite numbers we can’t source to a party with no stake in them. What we do publish · methodology.
Is this your firm? Get in touch and we’ll route it to the operator directly.
Request a correction or removal
See something wrong, or want this listing removed? Tell us which fact and why. We review correction requests within two business days; a disputed fact is pulled from this page pending review.