# A-LIGN Compliance and Security, Inc. (dba A-LIGN) - **Type:** Certification body - **Website:** https://www.a-lign.com - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A US certification body that ANAB accredits for ISO 22301, 27001, 27701 and 42001, the AI management standard. A separately named CPA firm issues its SOC 2 reports. ## A-LIGN scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 3/5 A-LIGN publishes a complaints, appeals, and certificate suspension/withdrawal process conducted under ISO/IEC 17021-1:2015 (impartiality-inquiries page), but discloses no named lead auditors, no public surveillance-outcome statistics, and no stated commitment to support a client through a breach or regulatory incident beyond the certification-appeals mechanism itself. ### Qualifications of the people who do the work: 5/5 Independently confirmed via ANAB's own Management Systems CB directory: A-LIGN Compliance and Security, Inc. dba A-LIGN holds live accreditation (ALIGN-MS-4760, status 'Accredited') for ISO 22301, ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001, verified against the accreditor's register rather than taken from marketing copy alone. SOC 2 work sits with a separately named, PCAOB-registered CPA-firm entity (self-reported, not independently checked against Florida CPA licensure). ### What it publishes about fees: 1/5 No fee model, rate structure, price list or worked example was found published anywhere on A-LIGN's public service pages; pricing is quote-only. ### Knowledge of your sector: 4/5 Named, distinct sector service lines beyond generalist ISO work: FedRAMP 3PAO (federal cloud authorization) and CMMC C3PAO (Defense Industrial Base) accreditation-adjacent roles, plus a dedicated 'AI Governance Hub' service and a self-reported claim of having issued 25% of global ISO 42001 certifications, the volume claim is self-reported and was not independently verified. ### Independence from what it sells: 5/5 Published impartiality policy states explicitly that 'ISO management consulting services are not performed by A-LIGN' and that A-LIGN does not perform audit services for clients where non-audit services were performed, operating under AICPA, ISO/IEC 17021:2015, ISO/IEC 27006:2015, FedRAMP and PCI SSC independence requirements. ### Who carries the risk if the advice is wrong: 2/5 A-LIGN documents a complaints/appeals/suspension/withdrawal process, but no professional indemnity insurance level, liability cap, or client-facing liability terms were found disclosed anywhere on its public site. ## Sources for A-LIGN Every line carries the page it was read on and the date it was checked. - ANAB's own Management Systems Certification Body directory lists A-LIGN as accredited under ISO/IEC 17021-1, certificate/registration number ALIGN-MS-4760, status 'Accredited', scope covering ISO 22301, ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001. - Source: https://anabdirectory.remoteauditor.com/ - Checked: 2026-09-20 - The ANAB directory record names the accredited legal entity as 'A-LIGN Compliance and Security, Inc. dba A-LIGN', based in Florida, USA, with additional locations in Bulgaria and Panama. - Source: https://anabdirectory.remoteauditor.com/ - Checked: 2026-09-20 - A-LIGN's own ISO 27001 service page states it is dual-accredited by ANAB and UKAS for ISO/IEC 27001 (plus related ISO 27017/27018 certifications). - Source: https://www.a-lign.com/service/iso-27001-certification - Checked: 2026-09-20 - A-LIGN's SOC examinations are issued by a separate legal entity, 'Price and Associates CPAs, LLC dba A-LIGN ASSURANCE', described on A-LIGN's own site as a licensed CPA firm registered with the PCAOB. - Source: https://www.a-lign.com/ - Checked: 2026-09-20 - A-LIGN publishes an impartiality policy stating that ISO management consulting services are not performed by A-LIGN and that audit services are not performed for clients that received non-audit services, governed under AICPA, ISO/IEC 17021:2015, ISO/IEC 27006:2015, FedRAMP and PCI SSC requirements. - Source: https://www.a-lign.com/impartiality-inquiries - Checked: 2026-09-20 - A-LIGN publishes complaints, appeals, and certificate suspension/withdrawal procedures conducted in accordance with ISO/IEC 17021-1:2015, including a suspension trigger for non-conformance and withdrawal for non-performance, misrepresentation or unresolved corrective actions. - Source: https://www.a-lign.com/impartiality-inquiries - Checked: 2026-09-20 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Not published - Independent accreditation: Published - Client results: Published - How it uses AI: Not published ## Strengths - Live ANAB accreditation independently confirmed against ANAB's own certification-body directory (ALIGN-MS-4760), rather than taken on trust from marketing copy, and it does cover ISO/IEC 42001, so the firm's AI-management-system certifications carry genuine accredited status. - Single accreditation spans four management-system standards (ISO 22301, 27001, 27701, 42001), giving one accredited relationship across security, privacy, business-continuity and AI-governance management systems. - Published impartiality policy explicitly bars A-LIGN from performing ISO management consulting for its own certification clients and separates audit from non-audit work. - Named federal and defense-sector specialisms alongside general ISO work: FedRAMP 3PAO status for federal cloud authorization and CMMC C3PAO status for the Defense Industrial Base. - Publishes a complaints, appeals and certificate suspension/withdrawal process tied to ISO/IEC 17021-1:2015, giving clients and relying parties a documented route if something goes wrong post-certification. ## Things to check Each one carries the factual basis it rests on. - No public price list, rate card or worked fee example was found for any A-LIGN service (ISO 27001, ISO 42001, SOC 2); every services page routes to a quote request or 'Contact Us'. - Basis: Reviewed a-lign.com/service/iso-27001-certification, a-lign.com/service/iso-42001 and the A-LIGN homepage, none publish pricing, fee structure or a rate model. - No professional indemnity insurance level, liability cap, or client-facing liability terms are disclosed anywhere on A-LIGN's public site. - Basis: a-lign.com/impartiality-inquiries documents complaints, appeals, suspension and withdrawal procedures but contains no mention of PI insurance or liability terms; no separate insurance/liability disclosure page was found on the site. - A-LIGN's own ISO 42001 marketing page claims it is 'an accredited ISO 42001 certification body... among the first accredited certification bodies for ISO 42001' without naming the accrediting body, so the claim could not be substantiated from that page alone. - Basis: a-lign.com/service/iso-42001 uses the unqualified word 'accredited' with no accreditor named; the specific ISO/IEC 42001 scope had to be confirmed separately via a direct search of ANAB's own accreditation directory (record ALIGN-MS-4760). - The Florida Secretary of State (Sunbiz) corporate record for A-LIGN Compliance and Security, Inc. could not be independently verified with the tools available in this pass. - Basis: A direct fetch of search.sunbiz.org returned a Cloudflare bot-challenge page (HTTP 403); Bright Data's Web Unlocker fallback returned an explicit policy error stating search.sunbiz.org is classified as 'Government' and blocked under its usage policy, so no proxy route was available either. ## Where this firm appears - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [Does the EU AI Act apply to a UK firm?](https://theassurancedesk.com/best/eu-ai-act-exposed) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.