A-LIGN is a compliance audit firm that helps organisations start and grow their compliance programmes across SOC 2, ISO 27001, CMMC and ISO 42001.
CompanyPenetration Testing FirmsVendor-verified
Pricing: Custom (contact sales)
Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below and information provided directly by the vendor · Last reviewed August 2026 · How we review listings
What is A-LIGN?
Founded in 2009 and headquartered in Tampa, Florida, A-LIGN is a compliance audit firm that helps organizations start and grow their compliance programs across SOC 2, ISO 27001, CMMC, and ISO 42001 frameworks. Testing sits alongside those audits through a single, consolidated provider relationship, scoped to satisfy SOC 2 and ISO 27001 requirements and run by a team kept independent from the audit side.
Best for: Companies running testing alongside a formal audit who want one accredited firm across both
Pros
- Accredited CMMC Third Party Assessment Organization (C3PAO) and CMMC-AB Approved Training Provider
- Dual ANAB (US) and UKAS (UK) accreditation for ISO 27001 certification
- Single, consolidated provider relationship across SOC 2, ISO 27001, CMMC, FedRAMP, HITRUST, and ISO 42001
- Among the first accredited certification bodies for ISO 42001 AI certification
Key Features
Add the Cyber Vendor Guide badge to your site
Sources & references
Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.
Spot an error, or do you represent A-LIGN? Request a correction.
Key facts
- Pricing
- Custom (contact sales)
- Model
- Project-based testing + audit engagements
- Founded
- 2009
Certifications
SOC 2, ISO 27001, CMMC, FedRAMP, HITRUST, PCI DSS