Control and Function LLC

We don't sell platforms. We earn audits.

Your buyers are asking for a SOC 2 report and your engineers are asking who owns it. Control and Function takes small companies from first gap assessment to auditor handoff with fixed pricing, operator-led delivery, and no platform to buy.

SOC 2 has three jobs and three parties. A compliance platform collects the proof. An audit firm independently tests it. We do the job in between: deciding which controls actually fit your business, whether your evidence would survive an auditor sampling it, and what the auditor will ask that no dashboard ever will.

The work covers scoping, policies, control implementation, evidence collection, vendor reviews, a pre-audit walkthrough and a clean handoff to your audit firm. Every engagement runs through a live client portal with control-by-control status, a dated timeline and an engagement log, so you watch readiness move instead of waiting for a status meeting. We keep pointers to your evidence, never the evidence itself.

The SOC 2 Type I program our operator led at a prior company passed clean on the first attempt, with no MSP and no compliance platform. We're running a full readiness engagement for an education technology client now.

Pricing is fixed and published. A Readiness Diagnostic is $2,500 and credits in full toward a larger engagement within 60 days. Coaching starts at $8,000 when your team drives the work, Full Readiness starts at $15,000 when we drive it, and Managed Compliance keeps the program running after your audit.

We are not an audit firm and never grade our own work. A licensed CPA firm performs your examination and issues the report, and we help you pick one. If we're not the right fit, we'll say so.