Recognised By
ISO, SOC 2 and GDPR Consulting for Companies in United States
Remote ISO, SOC 2 and GDPR consulting for companies in United States, delivered from India. Not an accreditation or certification body.
Book a free consultation for United StatesHow we work with United States clients
We deliver from India, remotely. For United States that means video workshops, a shared document workspace, and written status updates at an agreed rhythm. India is 9.5 to 13.5 hours ahead of US time zones, depending on the zone and daylight saving; we schedule calls in your morning or our evening.
We cover the whole path: gap assessment, building the management system or control set, staff training, internal audit, and support while the independent certification body, CPA firm or assessor audits you. We do not have a local office in United States.
What companies in United States are usually asked for
- SOC 2: An AICPA attestation report issued by a licensed CPA firm, often requested by US enterprise buyers.
- HIPAA: Enforced by HHS; there is no official HIPAA certificate, so we prepare risk analysis, policies and evidence.
- PCI DSS: Required by card brands; validated by a QSA or through a self-assessment.
- State privacy laws: Laws such as the CCPA/CPRA in California shape data-handling and vendor requirements.
Services for United States organisations
States and regions we support in United States
Covering California, Texas, New York, Florida, Illinois, Massachusetts, Washington, Virginia, Georgia and New Jersey.
Questions from companies in United States
Do you have an office in United States?
No. We are based in India and serve clients in United States remotely. Work that has to happen on site is planned with you case by case.
How does working across time zones work for United States clients?
India is 9.5 to 13.5 hours ahead of US time zones, depending on the zone and daylight saving; we schedule calls in your morning or our evening. We agree a fixed meeting rhythm at the start and share progress in writing so nothing waits for a call.
Which certifications do companies in United States usually ask for?
SOC 2, HIPAA, PCI DSS and State privacy laws come up most often. The right starting point depends on what your customers and regulators require; a short gap assessment sets the order.
Do you issue ISO or SOC 2 certificates for United States organisations?
No. We are consultants, not an accreditation body or a certification body. The certificate or report comes from an independent certification body, CPA firm or assessor that you appoint.
Which sectors in United States do you support?
We work with software and SaaS, healthcare, financial services and manufacturing, along with other organisations that need to answer customer or regulator questions about security, quality or safety.
Is the information on this page legal advice?
No. It is a general summary to help you plan. Confirm the legal position for your organisation with qualified counsel in United States.
Other countries
1
We use analytics cookies and record your IP address, the pages you visit and the links you click to understand how our site is used and to follow up on enquiries. You can decline and still use the site.