Auditor Introduction Process
Auditor introductions can happen as soon as a deal is closed or following a customer onboarding, depending on the customer's preference for timing. We typically recommend 2-3 auditors for the customer to speak to so they can decide who is the best fit for them. A member of the Secureframe team will be sending those auditor introductions. After a customer chooses you as their auditor, you'll sign a contract with them directly.
Trusted Services Criteria
Secureframe takes care of a majority of the evidence gathering for our customers under our platform when it comes to security, availability, and confidentiality. Processing integrity and privacy are outside the current scope of Secureframe’s services, but if a customer wants these criteria then they would rely on their auditor to help them through that process.
Audit Dates and Expectations
Prior to scheduling the field work call, we recommend auditors review the evidence submitted by Secureframe on behalf of the customer. If needed, a preliminary fieldwork call should be scheduled with the Secureframe team solely.
If there is any additional evidence that is needed then we recommend utilizing the field work call as an opportunity to surface those inquiries. Following the fieldwork call, please assemble your findings and deliver your final report to the customer.