We count visits with Google Analytics cookies and Vercel Web Analytics to see which pages help readers most.

Cookie settings
The Assurance Desk

A-LIGN Compliance and Security, Inc. (dba A-LIGN) review

Certification body

A US certification body that ANAB accredits for ISO 22301, 27001, 27701 and 42001, the AI management standard. A separately named CPA firm issues its SOC 2 reports.

Relevant if you want one accredited body to certify security, privacy, continuity and AI management systems

Price Not published
Indemnity cover Not published
How it uses AI Not published
Facts last checked

Not published means we did not find it on the firm's own pages.

A-LIGN scores

Six scores, each 1 to 5. The evidence for each is further down.

Help when things go wrong 3/5
Qualifications of the people who do the work 5/5
What it publishes about fees 1/5
Knowledge of your sector 4/5
Independence from what it sells 5/5
Who carries the risk if the advice is wrong 2/5

What A-LIGN offers, and what it publishes

ANAB's directory lists A-LIGN as accredited, with ISO 22301, ISO/IEC 27001, 27701 and 42001 in scope. So its ISO 42001 certificates for AI management carry accredited status. A-LIGN says it does no ISO management consulting and does not audit clients that received non-audit services. It publishes a complaints, appeals and certificate withdrawal process.

A-LIGN does not publish a price. Its ISO 27001, ISO 42001 and SOC 2 pages all lead to a quote request. It does not publish its indemnity cover or liability terms. Its ISO 42001 page says it is accredited without naming who accredits it. We confirmed the accreditation in ANAB's directory.

The firm says it has more than 6,400 clients and has issued 25% of global ISO 42001 certifications. We did not check either claim. It also says it holds FedRAMP 3PAO and CMMC C3PAO status, which we could not confirm. Its Trustpilot page scores 2.2 out of 5 from 8 reviews, most from 2018 to 2020.

Strengths

  • Live ANAB accreditation independently confirmed against ANAB's own certification-body directory (ALIGN-MS-4760), rather than taken on trust from marketing copy, and it does cover ISO/IEC 42001, so the firm's AI-management-system certifications carry genuine accredited status.
  • Single accreditation spans four management-system standards (ISO 22301, 27001, 27701, 42001), giving one accredited relationship across security, privacy, business-continuity and AI-governance management systems.
  • Published impartiality policy explicitly bars A-LIGN from performing ISO management consulting for its own certification clients and separates audit from non-audit work.
  • Named federal and defense-sector specialisms alongside general ISO work: FedRAMP 3PAO status for federal cloud authorization and CMMC C3PAO status for the Defense Industrial Base.
  • Publishes a complaints, appeals and certificate suspension/withdrawal process tied to ISO/IEC 17021-1:2015, giving clients and relying parties a documented route if something goes wrong post-certification.

Things to check

  • No public price list, rate card or worked fee example was found for any A-LIGN service (ISO 27001, ISO 42001, SOC 2); every services page routes to a quote request or 'Contact Us'.
  • No professional indemnity insurance level, liability cap, or client-facing liability terms are disclosed anywhere on A-LIGN's public site.
  • A-LIGN's own ISO 42001 marketing page claims it is 'an accredited ISO 42001 certification body... among the first accredited certification bodies for ISO 42001' without naming the accrediting body, so the claim could not be substantiated from that page alone.
  • The Florida Secretary of State (Sunbiz) corporate record for A-LIGN Compliance and Security, Inc. could not be independently verified with the tools available in this pass.

Common questions

Is A-LIGN's ISO 42001 accreditation real?

Yes. ANAB's directory lists A-LIGN as accredited, certificate ALIGN-MS-4760, with ISO/IEC 42001 in scope. A-LIGN's own ISO 42001 page does not name who accredits it.

Does A-LIGN publish its fees?

No. Its ISO 27001, ISO 42001 and SOC 2 pages all lead to a quote request. There is no price list, rate card or worked example.

Who issues A-LIGN's SOC 2 reports?

A separate firm, Price and Associates CPAs, LLC, trading as A-LIGN Assurance. A-LIGN's site says it is a PCAOB-registered CPA firm. We did not check that ourselves.

Is A-LIGN's Florida company record confirmed?

No. The Florida company register blocked our check, and copies of the record on other sites sat behind a CAPTCHA.

Evidence for each A-LIGN score

Show our working

Notes behind each thing to check

  • No public price list, rate card or worked fee example was found for any A-LIGN service (ISO 27001, ISO 42001, SOC 2); every services page routes to a quote request or 'Contact Us'. (Reviewed a-lign.com/service/iso-27001-certification, a-lign.com/service/iso-42001 and the A-LIGN homepage, none publish pricing, fee structure or a rate model.)
  • No professional indemnity insurance level, liability cap, or client-facing liability terms are disclosed anywhere on A-LIGN's public site. (a-lign.com/impartiality-inquiries documents complaints, appeals, suspension and withdrawal procedures but contains no mention of PI insurance or liability terms; no separate insurance/liability disclosure page was found on the site.)
  • A-LIGN's own ISO 42001 marketing page claims it is 'an accredited ISO 42001 certification body... among the first accredited certification bodies for ISO 42001' without naming the accrediting body, so the claim could not be substantiated from that page alone. (a-lign.com/service/iso-42001 uses the unqualified word 'accredited' with no accreditor named; the specific ISO/IEC 42001 scope had to be confirmed separately via a direct search of ANAB's own accreditation directory (record ALIGN-MS-4760).)
  • The Florida Secretary of State (Sunbiz) corporate record for A-LIGN Compliance and Security, Inc. could not be independently verified with the tools available in this pass. (A direct fetch of search.sunbiz.org returned a Cloudflare bot-challenge page (HTTP 403); Bright Data's Web Unlocker fallback returned an explicit policy error stating search.sunbiz.org is classified as 'Government' and blocked under its usage policy, so no proxy route was available either.)
Six criteria, each scored 1 to 5, with the evidence for each.
CriterionScoreEvidence
Help when things go wrong 3/5 A-LIGN publishes a complaints, appeals, and certificate suspension/withdrawal process conducted under ISO/IEC 17021-1:2015 (impartiality-inquiries page), but discloses no named lead auditors, no public surveillance-outcome statistics, and no stated commitment to support a client through a breach or regulatory incident beyond the certification-appeals mechanism itself.
Qualifications of the people who do the work 5/5 Independently confirmed via ANAB's own Management Systems CB directory: A-LIGN Compliance and Security, Inc. dba A-LIGN holds live accreditation (ALIGN-MS-4760, status 'Accredited') for ISO 22301, ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001, verified against the accreditor's register rather than taken from marketing copy alone. SOC 2 work sits with a separately named, PCAOB-registered CPA-firm entity (self-reported, not independently checked against Florida CPA licensure).
What it publishes about fees 1/5 No fee model, rate structure, price list or worked example was found published anywhere on A-LIGN's public service pages; pricing is quote-only.
Knowledge of your sector 4/5 Named, distinct sector service lines beyond generalist ISO work: FedRAMP 3PAO (federal cloud authorization) and CMMC C3PAO (Defense Industrial Base) accreditation-adjacent roles, plus a dedicated 'AI Governance Hub' service and a self-reported claim of having issued 25% of global ISO 42001 certifications, the volume claim is self-reported and was not independently verified.
Independence from what it sells 5/5 Published impartiality policy states explicitly that 'ISO management consulting services are not performed by A-LIGN' and that A-LIGN does not perform audit services for clients where non-audit services were performed, operating under AICPA, ISO/IEC 17021:2015, ISO/IEC 27006:2015, FedRAMP and PCI SSC independence requirements.
Who carries the risk if the advice is wrong 2/5 A-LIGN documents a complaints/appeals/suspension/withdrawal process, but no professional indemnity insurance level, liability cap, or client-facing liability terms were found disclosed anywhere on its public site.

Sources for A-LIGN

  • ANAB's own Management Systems Certification Body directory lists A-LIGN as accredited under ISO/IEC 17021-1, certificate/registration number ALIGN-MS-4760, status 'Accredited', scope covering ISO 22301, ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001. (ALIGN-MS-4760, Accredited: ISO 22301, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001) (anabdirectory.remoteauditor.com, checked 20 September 2026)
  • The ANAB directory record names the accredited legal entity as 'A-LIGN Compliance and Security, Inc. dba A-LIGN', based in Florida, USA, with additional locations in Bulgaria and Panama. (A-LIGN Compliance and Security, Inc. dba A-LIGN, Florida, USA) (anabdirectory.remoteauditor.com, checked 20 September 2026)
  • A-LIGN's own ISO 27001 service page states it is dual-accredited by ANAB and UKAS for ISO/IEC 27001 (plus related ISO 27017/27018 certifications). (Dual-accredited by ANAB and UKAS for ISO/IEC 27001) (a-lign.com, checked 20 September 2026)
  • A-LIGN's SOC examinations are issued by a separate legal entity, 'Price and Associates CPAs, LLC dba A-LIGN ASSURANCE', described on A-LIGN's own site as a licensed CPA firm registered with the PCAOB. (Price and Associates CPAs, LLC dba A-LIGN ASSURANCE (self-reported PCAOB registration)) (a-lign.com, checked 20 September 2026)
  • A-LIGN publishes an impartiality policy stating that ISO management consulting services are not performed by A-LIGN and that audit services are not performed for clients that received non-audit services, governed under AICPA, ISO/IEC 17021:2015, ISO/IEC 27006:2015, FedRAMP and PCI SSC requirements. (Published impartiality policy separating certification from consulting) (a-lign.com, checked 20 September 2026)
  • A-LIGN publishes complaints, appeals, and certificate suspension/withdrawal procedures conducted in accordance with ISO/IEC 17021-1:2015, including a suspension trigger for non-conformance and withdrawal for non-performance, misrepresentation or unresolved corrective actions. (Complaints/appeals/suspension/withdrawal process published per ISO/IEC 17021-1:2015) (a-lign.com, checked 20 September 2026)
  • Trustpilot: A-LIGN has a claimed Trustpilot profile with a 2.2/5 'Poor' TrustScore from only 8 reviews total. Most reviews (dated 2018-2020) are 5-star and praise the audit team's professionalism, but the single most recent review (11 Aug 2025, 1-star) alleges poor communication and product issues, and one review appears unrelated to A-LIGN's actual services (comments on 'good tasting water'), suggesting possible review mismatch or low data quality. With only 8 reviews and none in the last 12 months prior to the August 2025 one, the profile is too thin to be a reliable read on client sentiment either way. G2 (403 forbidden) and Capterra (404 not found) pages could not be accessed to check for software-review coverage of A-LIGN's A-SCEND platform; no separate Clutch listing was found. (Trustpilot, checked 20 September 2026)

ANAB, ISO/IEC 17021-1 (ALIGN-MS-4760): ISO 22301, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001 UKAS, ISO/IEC 27001 (self-reported by A-LIGN, not independently confirmed against UKAS's own register)

Seeking ISO 42001 certificationExposed to the EU AI ActRegulated sectors

Where this firm appears

If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.

This is an independent editorial guide, not legal advice.