Security, SOC 2, and ISO 27001 for fintech companies
Banks and credit unions vet every vendor. Before a pilot becomes a contract, expect a long security questionnaire, a request for your SOC 2 report, and sometimes a call with their vendor risk team. We get small fintechs through that process without a full-time security hire.
SOC 2 on a deadline
Tell us the date your customer gave you. We plan backward from it and tell you on day one whether it is realistic.
Questionnaires answered once
We build a library of approved answers, so the next bank questionnaire takes days instead of weeks.
Cloud and identity
Least-privilege access in AWS or Google Cloud, single sign-on, and logging that an auditor and a bank examiner will both accept.
A security contact for your customers
When a bank wants to talk to your head of security, there is someone senior on the call.
Where to start
- SOC 2 readiness and implementation
From gap assessment to a clean audit, for Type 1 and Type 2.
Type 1 from $9,500
- Security advisory (vCISO)
A part-time head of security for companies with their own IT or engineering staff.
From $2,500 per month
- Managed IT + Security
Managed IT with endpoint protection, monitoring, policies, and questionnaire help.
$175 per user per monthSecure plan
Recent work
An AI data readiness and migration platform for financial services
We ran their IT and secured it. Their customers are financial institutions, so their security had to hold up to outside review.
Talk to us
Tell us what's driving it: a customer deadline, a questionnaire, an exam, or IT that has outgrown whoever handles it now. A first call takes 30 minutes, and you'll leave knowing whether we're a fit and roughly what it costs.
Book a 30-minute callor send a message, or email contact@birchny.com.