We count visits with Google Analytics cookies and Vercel Web Analytics to see which pages help readers most.

Cookie settings
The Assurance Desk

Sensiba LLP review

Certification body

A California accounting firm that ANAB accredits to certify organisations against ISO/IEC 27001, 27701 and 42001. It also runs SOC 1 and SOC 2 audits.

Relevant if you want ISO 27001 or ISO 42001 certification and a SOC 2 report from one firm

Price Not published
Indemnity cover Not published
How it uses AI Published
Facts last checked

Not published means we did not find it on the firm's own pages.

Sensiba scores

Six scores, each 1 to 5. The evidence for each is further down.

Help when things go wrong 2/5
Qualifications of the people who do the work 4/5
What it publishes about fees 1/5
Knowledge of your sector 3/5
Independence from what it sells 5/5
Who carries the risk if the advice is wrong 1/5

What Sensiba offers, and what it publishes

Sensiba certifies organisations against ISO/IEC 27001 for information security, 27701 for privacy and 42001 for AI management systems. ANAB's own directory lists it as accredited for all three. It says it gained the 42001 accreditation in May 2025. It also runs SOC 1 and SOC 2 audits, and says licensed CPAs lead every SOC engagement.

Sensiba does not publish a price. Its SOC and ISO pages lead only to an 'Ask an Auditor' contact form. It does not publish its indemnity cover or liability terms. It names no state CPA licence number. It also offers ISO/IEC 27017 and 27018 audits, but ANAB does not accredit it for those two.

The firm publishes an impartiality policy: no management-system consulting, no internal audits for clients it certifies, and no referral payments. Its SOC page says its audits use what it calls AI-powered efficiency. Its AIUC-1 accreditation, for a standard on AI agents, is provisional, pending a witness audit. On Clutch it has 5.0 out of 5 from 10 reviews.

Strengths

  • Full ANAB accreditation independently confirmed in ANAB's own Directory of Accredited Certification Bodies for ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001, a rare, externally-checkable combination that includes the AI-management-systems standard, achieved as early as May 2025.
  • Specific, published impartiality policy for its ISO program separating certification from consulting (no ISMS/PIMS consulting or internal audits for clients it certifies, no referral payments), corroborated by a named case study where the pre-audit advisory work was performed by a separate third party.
  • Combines an ANAB-accredited ISO/IEC certification-body practice with a CPA-led SOC 1/SOC 2 attestation practice under one long-established firm (founded 1977), evidenced by a client (Weel) that used both services together.

Things to check

  • We could not read the California licence register. Ask for its accountancy firm licence number.
  • Sensiba markets audits against ISO/IEC 27017 (cloud security) and ISO/IEC 27018 (PII in the cloud) on its own site, but neither standard appears in ANAB's accreditation scheme list at all, and ANAB's directory lists Sensiba as accredited only for ISO/IEC 27001, 27701 and 42001, so these two audit offerings do not carry ANAB accreditation the way its other three do.
  • Sensiba's AIUC-1 auditor accreditation is explicitly provisional, not full: a witness audit was still underway as of the 18 August 2026 announcement, with full accreditation contingent on completing it.
  • No professional-indemnity/E&O insurance disclosure or published liability/regulations terms were found anywhere on Sensiba's site, unlike some accredited-CB peers that publish a full regulations/liability document.

Common questions

Does Sensiba publish its prices?

No. Its SOC and ISO pages lead to a contact form with no prices. On Clutch, its cost rating is 4.8 out of 5, and most engagements listed there are under $50,000.

Is Sensiba accredited for ISO 42001?

Yes. ANAB's directory lists it as accredited for ISO/IEC 27001, 27701 and 42001.

Have its CPA licence and registration been confirmed?

No. It names no state licence number, and California's licence search and business register both blocked our automated checks.

Is its AIUC-1 accreditation final?

No. It is provisional, pending a witness audit, as the firm announced on 18 August 2026.

Evidence for each Sensiba score

Show our working

Notes behind each thing to check

  • We could not read the California licence register. Ask for its accountancy firm licence number. (search.dca.ca.gov's search form embeds a cf-turnstile widget with the submit button disabled until a token is issued (confirmed in page source, checked 2026-09-20); sensiba.com/solutions/governance-risk-and-compliance/soc/ names no licence number or state board.)
  • Sensiba markets audits against ISO/IEC 27017 (cloud security) and ISO/IEC 27018 (PII in the cloud) on its own site, but neither standard appears in ANAB's accreditation scheme list at all, and ANAB's directory lists Sensiba as accredited only for ISO/IEC 27001, 27701 and 42001, so these two audit offerings do not carry ANAB accreditation the way its other three do. (sensiba.com/solutions/governance-risk-and-compliance/iso/ lists ISO/IEC 27017:2015 and ISO/IEC 27018:2019 under 'Standards Covered'; the ANAB directory's StandardId dropdown (anabdirectory.remoteauditor.com) has no ISO/IEC 27017 or 27018 entry, and Sensiba's own accredited-to listing there names only ISO/IEC 27001, 27701, 42001 (checked 2026-09-20).)
  • Sensiba's AIUC-1 auditor accreditation is explicitly provisional, not full: a witness audit was still underway as of the 18 August 2026 announcement, with full accreditation contingent on completing it. (sensiba.com/company/news/sensiba-achieves-provisional-aiuc-1-auditor-accreditation/: 'Provisional accreditation reflects that a witness audit is already underway, with full accreditation to follow once that audit is completed to AIUC-1 standards.')
  • No professional-indemnity/E&O insurance disclosure or published liability/regulations terms were found anywhere on Sensiba's site, unlike some accredited-CB peers that publish a full regulations/liability document. (Reviewed sensiba.com's SOC, ISO and about-us pages (checked 2026-09-20); none disclose PI cover, liability caps, or engagement/liability terms.)
Six criteria, each scored 1 to 5, with the evidence for each.
CriterionScoreEvidence
Help when things go wrong 2/5 The ISO service page names a complaints/appeals contact (complaints@sensiba.com) for reporting impartiality or certification issues, but there is no downloadable complaints procedure, appeals process document, or disclosed outcomes (contrast with peers that publish a full regulations page) (sensiba.com/solutions/governance-risk-and-compliance/iso/, checked 2026-09-20).
Qualifications of the people who do the work 4/5 Verified directly in ANAB's Directory of Accredited Certification Bodies (anabdirectory.remoteauditor.com, checked 2026-09-20): Sensiba LLP (ANAB ID Sensiba-MS-1128) is accredited to ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001. Its SOC practice claims 'Top 75 CPA firm' status and 'licensed CPAs' (sensiba.com/solutions/governance-risk-and-compliance/soc/) but names no specific state license number, and the California CPA licence lookup could not be independently checked (Cloudflare Turnstile-blocked). Its separate AIUC-1 auditor accreditation is provisional only, not full, as of 18 Aug 2026.
What it publishes about fees 1/5 No fee figures, rate card, or fee-model description found on the SOC or ISO service pages (sensiba.com, checked 2026-09-20); both route to an 'Ask an Auditor' contact form with no published pricing information of any kind.
Knowledge of your sector 3/5 Two named client case studies published (Weel and Block Earner, both sensiba.com/resources/case-studies/, checked 2026-09-20), both Australian/NZ fintech firms certified via the same software partner (Vanta), plus one named GRC practice leader (Scott Dritz). Evidence is real but narrow in breadth and sector spread.
Independence from what it sells 5/5 Published, specific impartiality policy on the ISO service page (sensiba.com/solutions/governance-risk-and-compliance/iso/, checked 2026-09-20): 'We do not provide management systems consulting services. We do not provide ISMS/PIMS internal audits for clients that we certify. Additionally, we do not pay or receive payment for referrals.' Its own Block Earner case study corroborates this in practice: the pre-audit advisory/readiness work was performed by a separate third-party virtual CISO, not Sensiba, with Sensiba conducting only the certification audit.
Who carries the risk if the advice is wrong 1/5 No professional-indemnity/E&O insurance disclosure, liability terms, or contract-terms document found anywhere on sensiba.com's SOC, ISO or about pages as checked 2026-09-20.

Sources for Sensiba

  • Sensiba LLP holds ANAB accreditation (ID Sensiba-MS-1128) to certify management systems against ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001. (ANAB-accredited: ISO/IEC 27001, 27701, 42001) (anabdirectory.remoteauditor.com, checked 20 September 2026)
  • Sensiba achieved its ISO/IEC 42001 (AI management systems) ANAB accreditation in May 2025, ahead of its later AIUC-1 news post. (sensiba.com, checked 20 September 2026)
  • Sensiba publishes an ISO-program impartiality policy stating it does not provide management-systems consulting or ISMS/PIMS internal audits for clients it certifies, and does not pay or receive referral payments. (Published impartiality policy (no consulting, no referral payments)) (sensiba.com, checked 20 September 2026)
  • Sensiba's AIUC-1 (AI agent security/safety) auditor accreditation, announced 18 August 2026, is provisional pending completion of a witness audit. (Provisional; witness audit underway as of Aug 2026) (sensiba.com, checked 20 September 2026)
  • Sensiba describes itself as a 'Top 75 CPA firm' and states every SOC engagement is led by licensed CPAs, without naming the specific state licence(s) held. ('Top 75 CPA firm'; SOC led by licensed CPAs (state unspecified)) (sensiba.com, checked 20 September 2026)
  • Sensiba LLP is headquartered in San Carlos, California, and traces its founding to 1977 (as Ireland San Filippo, then Sensiba San Filippo from 2009, renamed Sensiba in 2023). (Founded 1977; HQ San Carlos, CA) (sensiba.com, checked 20 September 2026)
  • Trustpilot: No Trustpilot profile exists for Sensiba LLP, direct URL lookups 404 and a Trustpilot site search for "sensiba" surfaces only unrelated similarly-named companies. A Clutch profile does exist instead: 5.0/5 from 10 verified reviews, clients praising professionalism, timeliness and SOC 2/ISO 27001/HIPAA audit expertise; cost rating 4.8/5 with most engagements under $50,000. (Trustpilot, checked 20 September 2026)

ANAB-accredited certification body, ISO/IEC 27001, ISO/IEC 27701 and ISO/IEC 42001 (ANAB ID Sensiba-MS-1128) AIUC-1 auditor accreditation, provisional, pending completion of a witness audit (announced 18 August 2026)

Seeking ISO 42001 certification

Where this firm appears

If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.

This is an independent editorial guide, not legal advice.