Close enterprise deals
without stalling on security.

SOC 2 and AI governance for AI-native startups, from a team that maps your systems, fixes the gaps, and gets you audit-ready.

Frameworks we work with Frameworks we work with
The Problem

Your next enterprise customer will ask how your AI handles their data.

Security questionnaires now ask about model providers, prompt retention, and AI oversight, not just passwords and encryption. SOC 2 is often the minimum to get through procurement, and AI governance frameworks like ISO 42001 are starting to appear in requests.

Most early-stage teams don't have anyone whose job this is.

2023
Samsung — employees pasted confidential source code into ChatGPT. The gap: no AI acceptable-use policy limiting what data reaches third-party models.
2024
Air Canada — a Canadian tribunal held the airline responsible for its chatbot's wrong answer. The gap: no oversight of what an AI system tells customers.
2025
DeepSeek — researchers found a publicly exposed database of chat histories and secret keys. The gap: basic cloud security hygiene.
Our Packages

Four ways to work together.

Every engagement is fixed-scope with a clear deliverable. Start with the package that fits where you are now.

AI Trust Sprint
$9,000CAD
For teams with an enterprise deal blocked by a security questionnaire

2–3 weeks
  • ✓Security questionnaire response
  • ✓Security & AI policy pack
  • ✓A public Trust Page
Learn more
MOST POPULAR
SOC 2 Readiness
$19,500CAD
For teams that need SOC 2 Type I or Type II to sell to enterprise

Scoped to your audit timeline
  • ✓AWS security review
  • ✓AI-aware gap assessment
  • ✓Incident response plan & tabletop
  • ✓Hands-on remediation
  • ✓Auditor coordination
Learn more
AI Governance & ISO
$16,500CAD
For teams whose customers or markets expect formal AI governance

Scoped to the frameworks you need
  • ✓ISO 42001 gap assessment
  • ✓ISO 27001 readiness
  • ✓HIPAA & PIPEDA support
Learn more
Fractional Lead
$5,500/mo
For teams that are audit-ready and need to stay that way

Monthly retainer
  • ✓Continuous compliance (Vanta/Drata)
  • ✓Ongoing questionnaires & security calls
  • ✓Year-over-year audit prep
Learn more

All prices in CAD. Final price depends on scope, confirmed on the intro call.

Why AYE

Most consultants hand you a list of gaps.
We close them.

Hands-on in your cloud

We map your AWS environment ourselves and configure what needs fixing.

Built for AI products

Controls that cover LLM data flows, model vendors, and agent permissions.

Secure by default with auditors too

Read-only API integrations instead of handing out user accounts.

How It Works

How an engagement works.

01

Intro call

30 minutes to understand your product, customers, and deadlines.

02

Map and assess

We map your infrastructure and data flows and compare them against the framework you need.

03

Fix and document

We close the gaps together: technical controls, policies, and evidence.

04

Audit-ready

You go into the audit or the security review with confidence, and with someone in your corner.

Got a security questionnaire or SOC 2 deadline coming up?

Book a 30-minute call, or reach out directly — we'll reply within two business days.

Or reach us directly at roni@aye-verify.com