Free for you. No account.

Describe the compliance work you need. Matching providers reply to you.

Tell us what you need (SOC 2, ISO 27001, GDPR, HIPAA, PCI, AML, AI governance, a pen test or a fractional CISO), your state and your timeline. We send it to up to four listed providers who work on exactly that. Free, no account, no obligation.

Providers pay a flat annual fee to be listed. We do not recommend or endorse any provider.

Your requestExample
  • What you needIn your own wordsSOC 2
  • Your stateWhere the work happensTX
  • Sent toListed providers that matchUp to 4
  • RepliesBy email, to youDirect
Example layout. Not a real request.

Explain the work once and let providers come to you.

A compliance need can mean many calls to firms that may not do that kind of work. Here you describe it once, and it reaches the providers that list that category in your state.

How it works

Three steps, and only the first one is yours.

  1. Describe

    You write what you need, choose your state and give an email address for replies. No account, no payment.

  2. Match

    Software classifies it and sends it to up to 4 listed providers in your state that work on it. They are listed because they paid a flat annual fee. We do not rate them.

  3. Reply

    They write to you by email, and you choose whether to answer. We delete your details after 30 days.

What happens to your details

Stated plainly, before you submit anything.

What you send

Your need, your state, a reply address

You send a short description of the work, your company size, your timeline, your state and an email address for replies. You agree to the intake notice when you submit. There is no account and no card.

Who sees it

Up to 4 listed providers

Only those that list your category and state. Each pays a flat annual fee to be listed. They reply to you by email.

What we keep

Deleted after 30 days

Your details are deleted after 30 days. If nobody matches, we hold the request for 5 days, tell you, and then delete it. Providers keep their own copies of messages they send or receive.

For providers

Get compliance work requests that match your practice, by email, as they arrive. One flat annual listing. No per-lead fees, no exclusivity, no commission.

  • USD 1,499 per year, flat. Paid once for the year; it does not renew by itself.
  • First 25 verified providers list free for 90 days. After that, a listing stays active only with the yearly fee.
  • Before you are listed, we check your licence or registration against public registers: CPAverify (state CPA licence); PCI SSC QSA company list; ANAB accredited certification bodies; State bar licence lookup; IAPP certification directory (CIPP/CIPM/CIPT); ISC2 member verification (CISSP); State business registration (fallback, with a client reference).

Providers pay a flat annual fee to be listed. We do not recommend or endorse any provider.

What it is not

Written down before the first request, so nobody has to guess.

  • No account and no fee for you. Providers pay to be listed; you never pay us.
  • No recommendation. We do not rank, rate or endorse any provider, and the order of replies means nothing.
  • No advice. Nothing here is legal, tax or financial advice, and a request creates no engagement with us or with any provider.
  • No promise. We cannot say whether anyone will reply, how soon or on what terms.
  • United States only for now.
  • Your request is shared with the providers it matches. Do not include confidential details.

Emergencies and criminal matters. We do not route emergencies or criminal matters. If anyone is in danger, call 911. If you are thinking about harming yourself, call or text 988 in the US. For a criminal charge, contact a defense lawyer through your state bar's referral line.

Questions, answered

Yes for you. There is no account, no fee and no card. Providers pay a flat annual fee to be listed.

Only up to 4 listed providers whose category and state match it. They see what you wrote and the email address you gave for replies.

No. Providers pay a flat annual fee to be listed. We do not recommend or endorse any provider. Before listing, we check each licence or registration against public registers. That check shows a licence exists. It says nothing about the quality of the work.

Your details are deleted after 30 days. If no listed provider matches, we hold the request for 5 days, tell you, and then delete it. A provider keeps its own copy of any message it sends or receives.

The service covers the United States for now. You choose your state on the form, and the request goes only to listed providers that cover it. Some states may have no match yet.

You pay nothing. Providers pay USD 1,499 per year, flat, for a listing. There is no per-request fee and no commission. The first 25 verified providers list free for 90 days.

Describe it once.

A few fields and your state. If a listed provider replies, it comes by email.

Free for you. No account. Your details are deleted after 30 days.