How fast can we be audit-ready?
You get a clear readiness picture within the first few weeks of the assessment. Full readiness depends on where you start, and we give you a realistic timeline up front.
Is Doniastack software or a consultancy?
Both. The platform holds your programme, and our specialists do the work alongside you: drafting policies, configuring controls, collecting evidence and answering questionnaires.
Which frameworks do you cover?
SOC 2 Type I and II, HIPAA, ISO 27001, NIST CSF and PCI DSS, plus customer security questionnaires such as SIG and CAIQ.
Do you issue the SOC 2 report or ISO certificate?
No. Those are issued by an independent CPA firm or certification body. We get you ready, and work with your auditor through the audit.
We’re a small team. Is this overkill?
No. Engagements are sized for small and mid-size companies. Many start with a single fixed-fee assessment and grow only as their obligations do.
What does it cost?
The assessment is a fixed fee scoped to your size. Ongoing support is a monthly plan you can cancel anytime. We quote both on the first call.
How do you protect our data?
Multi-factor sign-in, separated workspaces, role-based access and a complete audit trail, hosted on AWS. See our Security page for details.
Can we take our data with us?
Yes. You can export everything your workspace holds at any time, as one file.
Can our auditor and vendors use it?
Yes. Auditors get their own view of the audit workspace, and vendors answer your requests through a secure link without needing an account.
Get started
See where you stand in 30 minutes
Tell us which review or audit is in front of you. We'll walk you through the platform and map what readiness takes, with no obligation.