# Accorian (Esha Corporation dba Accorian; Accorian Assurance) - **Type:** Advisory firm - **Website:** https://www.accorian.com/ - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A US security and compliance firm doing CREST-accredited penetration testing, SOC 2, ISO 27001, PCI DSS and CMMC work, plus an ISO 42001 AI-governance advisory line. ## Accorian scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 2/5 No public case studies or evidence of defending clients in AI bias-audit or regulatory enforcement actions were found. ### Qualifications of the people who do the work: 4/5 Firm holds CREST pen-test accreditation, ISO 27001, SOC 2 Type II, PCI DSS QSA and CMMC RPO status, per CREST marketplace listing. ### What it publishes about fees: 2/5 No pricing, fee schedule or rate card is published on either accorian.com or accorianassurance.com. ### Knowledge of your sector: 3/5 Dedicated ISO 42001 AI-governance service page exists, but no named practice lead or AI-governance case study is published. ### Independence from what it sells: 2/5 Firm markets its own GORICO governance platform alongside advisory services, a software-funnel conflict risk. ### Who carries the risk if the advice is wrong: 3/5 Accorian Assurance is a licensed AICPA-registered CPA firm for SOC audits, but no PI-insurance disclosure was found. ## Sources for Accorian Every line carries the page it was read on and the date it was checked. - Esha Corporation (the legal entity behind Accorian) is registered with the New Jersey Division of Revenue and Enterprise Services as a domestic profit corporation, entity ID 0100426063, incorporated 30 Aug 1989, city East Brunswick. - Source: https://www.njportal.com/DOR/BusinessNameSearch/Search/EntityId - Checked: 2026-09-20 - Accorian runs a dedicated ISO 42001 AI Governance Advisory Services line covering AIMS development, AI risk/impact assessments and alignment with NIST AI RMF. - Source: https://www.accorian.com/iso-42001-ai-governance-advisory-services/ - Checked: 2026-09-20 - Accorian holds CREST Penetration Testing accreditation and has been a CREST member for 4 years, alongside ISO 27001, SOC 2 Type II, PCI DSS QSA and CMMC RPO status. - Source: https://marketplace.crest.org/supplier/accorian/ - Checked: 2026-09-20 - Accorian was founded by Premal Parikh (Founder & CEO) and Aaditya Uthappa (Co-Founder & COO); the firm rebranded from Esha IT to Accorian on 5 March 2021. - Source: https://www.accorian.com/leadership-team/ - Checked: 2026-09-20 - Accorian Assurance operates under Diwakar Kamath Professional Corporation, a licensed CPA firm (AICPA registration #98033086) based at 6 Alvin Ct, East Brunswick, NJ, providing SOC 1/SOC 2 attestation services. - Source: https://www.accorianassurance.com/leadership - Checked: 2026-09-20 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Published - Independent accreditation: Published - Client results: Not published - How it uses AI: Not published ## Strengths - Dedicated, named ISO 42001 / AI-governance service line rather than AI bolted onto generic cyber-GRC work. - Broad assurance credential base: CREST-accredited penetration testing, ISO 27001, SOC 2 Type II, PCI DSS QSA and CMMC RPO status. - SOC attestation work sits inside a licensed, AICPA-registered CPA firm (Accorian Assurance), giving audit opinions a professional-standards backing. - Long-standing legal entity (incorporated 1989) with a scaled team (~150 staff) and stated 450+ clients / 400+ compliance assessments a year. ## Things to check Each one carries the factual basis it rests on. - No named individual or case study is published for the AI-governance practice; the ISO 42001 service page names no practice lead. - Basis: accorian.com/iso-42001-ai-governance-advisory-services page lists no named AI-governance lead or case study - Accorian sells its own GORICO GRC/AI-governance platform alongside its advisory services, which is a software-funnel conflict-of-interest risk. - Basis: ISO 42001 page markets 'Product-Driven Governance' via the GORICO platform alongside advisory work - No public pricing or fee-model disclosure was found on either Accorian site. - Basis: No fee schedule, rate card, or pricing page found on accorian.com or accorianassurance.com - No evidence found of NYC Local Law 144 bias-audit or Colorado AI Act engagement work despite the stated US regime scope. - Basis: Web search for Accorian plus Local Law 144 returned no firm-specific results ## Where this firm appears - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [After a cyber attack: what to report, and to whom](https://theassurancedesk.com/best/security-incident) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.