We count visits with Google Analytics cookies and Vercel Web Analytics to see which pages help readers most.

Cookie settings
The Assurance Desk

Accorian (Esha Corporation dba Accorian; Accorian Assurance) review

Advisory firm

A US security and compliance firm doing CREST-accredited penetration testing, SOC 2, ISO 27001, PCI DSS and CMMC work, plus an ISO 42001 AI-governance advisory line.

Relevant if you need SOC 2 or ISO 27001 work and ISO 42001 help from the same firm

Price Not published
Indemnity cover Not published
How it uses AI Not published
Facts last checked

Not published means we did not find it on the firm's own pages.

Accorian scores

Six scores, each 1 to 5. The evidence for each is further down.

Help when things go wrong 2/5
Qualifications of the people who do the work 4/5
What it publishes about fees 2/5
Knowledge of your sector 3/5
Independence from what it sells 2/5
Who carries the risk if the advice is wrong 3/5

What Accorian offers, and what it publishes

Accorian offers ISO 42001 AI-governance advice: building an AI management system, AI risk and impact assessments, and alignment with the NIST AI Risk Management Framework. Its CREST listing shows penetration testing accreditation, ISO 27001, SOC 2 Type II, PCI DSS QSA and CMMC RPO status. It says its SOC reports come through Accorian Assurance, under an AICPA-registered CPA firm.

Accorian does not publish a price, fee schedule or rate card on either of its websites. It does not publish its indemnity cover. Its ISO 42001 page names no practice lead and shows no AI-governance case study.

Accorian sells its own governance software, GORICO, alongside its advice, so ask whether the advice leads to the product. The firm says it has about 150 staff and more than 450 clients. We found no sign of work under two US laws, New York City's Local Law 144 and the Colorado AI Act.

Strengths

  • Dedicated, named ISO 42001 / AI-governance service line rather than AI bolted onto generic cyber-GRC work.
  • Broad assurance credential base: CREST-accredited penetration testing, ISO 27001, SOC 2 Type II, PCI DSS QSA and CMMC RPO status.
  • SOC attestation work sits inside a licensed, AICPA-registered CPA firm (Accorian Assurance), giving audit opinions a professional-standards backing.
  • Long-standing legal entity (incorporated 1989) with a scaled team (~150 staff) and stated 450+ clients / 400+ compliance assessments a year.

Things to check

  • No named individual or case study is published for the AI-governance practice; the ISO 42001 service page names no practice lead.
  • Accorian sells its own GORICO GRC/AI-governance platform alongside its advisory services, which is a software-funnel conflict-of-interest risk.
  • No public pricing or fee-model disclosure was found on either Accorian site.
  • No evidence found of NYC Local Law 144 bias-audit or Colorado AI Act engagement work despite the stated US regime scope.

Common questions

Does Accorian publish its fees?

No. We found no pricing, fee schedule or rate card on accorian.com or accorianassurance.com.

What accreditations does Accorian hold?

Its CREST marketplace listing shows CREST penetration testing accreditation, four years of CREST membership, and ISO 27001, SOC 2 Type II, PCI DSS QSA and CMMC RPO status. Accorian says its SOC work runs through Accorian Assurance, under an AICPA-registered CPA firm.

Does Accorian sell software as well as advice?

Yes. Its ISO 42001 page markets 'Product-Driven Governance' through its own GORICO platform, alongside its advisory work.

Who is behind Accorian?

Esha Corporation, a New Jersey company, trades as Accorian. Premal Parikh is founder and chief executive, and Aaditya Uthappa is co-founder and chief operating officer. The firm rebranded from Esha IT to Accorian on 5 March 2021.

Evidence for each Accorian score

Show our working

Notes behind each thing to check

  • No named individual or case study is published for the AI-governance practice; the ISO 42001 service page names no practice lead. (accorian.com/iso-42001-ai-governance-advisory-services page lists no named AI-governance lead or case study)
  • Accorian sells its own GORICO GRC/AI-governance platform alongside its advisory services, which is a software-funnel conflict-of-interest risk. (ISO 42001 page markets 'Product-Driven Governance' via the GORICO platform alongside advisory work)
  • No public pricing or fee-model disclosure was found on either Accorian site. (No fee schedule, rate card, or pricing page found on accorian.com or accorianassurance.com)
  • No evidence found of NYC Local Law 144 bias-audit or Colorado AI Act engagement work despite the stated US regime scope. (Web search for Accorian plus Local Law 144 returned no firm-specific results)
Six criteria, each scored 1 to 5, with the evidence for each.
CriterionScoreEvidence
Help when things go wrong 2/5 No public case studies or evidence of defending clients in AI bias-audit or regulatory enforcement actions were found.
Qualifications of the people who do the work 4/5 Firm holds CREST pen-test accreditation, ISO 27001, SOC 2 Type II, PCI DSS QSA and CMMC RPO status, per CREST marketplace listing.
What it publishes about fees 2/5 No pricing, fee schedule or rate card is published on either accorian.com or accorianassurance.com.
Knowledge of your sector 3/5 Dedicated ISO 42001 AI-governance service page exists, but no named practice lead or AI-governance case study is published.
Independence from what it sells 2/5 Firm markets its own GORICO governance platform alongside advisory services, a software-funnel conflict risk.
Who carries the risk if the advice is wrong 3/5 Accorian Assurance is a licensed AICPA-registered CPA firm for SOC audits, but no PI-insurance disclosure was found.

Sources for Accorian

  • Esha Corporation (the legal entity behind Accorian) is registered with the New Jersey Division of Revenue and Enterprise Services as a domestic profit corporation, entity ID 0100426063, incorporated 30 Aug 1989, city East Brunswick. (Entity ID 0100426063; Type DP; Incorporated 8/30/1989; East Brunswick, NJ) (njportal.com, checked 20 September 2026)
  • Accorian runs a dedicated ISO 42001 AI Governance Advisory Services line covering AIMS development, AI risk/impact assessments and alignment with NIST AI RMF. (Named ISO 42001 / AI-governance service page) (accorian.com, checked 20 September 2026)
  • Accorian holds CREST Penetration Testing accreditation and has been a CREST member for 4 years, alongside ISO 27001, SOC 2 Type II, PCI DSS QSA and CMMC RPO status. (CREST member (4 yrs); ISO 27001; SOC 2 Type II; PCI DSS QSA; CMMC RPO) (marketplace.crest.org, checked 20 September 2026)
  • Accorian was founded by Premal Parikh (Founder & CEO) and Aaditya Uthappa (Co-Founder & COO); the firm rebranded from Esha IT to Accorian on 5 March 2021. (Founder: Premal Parikh; rebrand 5 Mar 2021) (accorian.com, checked 20 September 2026)
  • Accorian Assurance operates under Diwakar Kamath Professional Corporation, a licensed CPA firm (AICPA registration #98033086) based at 6 Alvin Ct, East Brunswick, NJ, providing SOC 1/SOC 2 attestation services. (AICPA registration #98033086; CPA: Diwakar Kamath) (accorianassurance.com, checked 20 September 2026)

CREST Penetration Testing accreditation (4-year member) ISO 27001 SOC 2 Type II PCI DSS QSA CMMC RPO AICPA registration #98033086 (Accorian Assurance / Diwakar Kamath Professional Corporation)

Seeking ISO 42001 certificationRegulated sectorsAfter a ransomware or security incident

Where this firm appears

If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.

This is an independent editorial guide, not legal advice.