27kay
ISO 27001 & SOC 2, built to last beyond audit
Work at 27kay? Claim this listing with a work email on the listing domain or a DNS TXT record.
Client reviews
Written by clients and checked before they go live. Agencies cannot edit them or the score.
Worked with 27kay? Be the first to review.
Score quality, schedule, cost and whether you would refer them, then say what they did best and what could be better. It takes about three minutes, and buyers read every word.
- Checked before it goes live
- The agency can reply, not edit
- Your email is never shown
About 27kay
27kay helps SaaS companies design, certify, and operate information security programs that scale with the business. We cover the full compliance lifecycle: scoping, gap assessment, ISMS implementation, internal audit, certification support, and ongoing vCISO operation.
Core service areas:- ISO/IEC 27001:2022 certification and ongoing maintenance- SOC 2 Type I and Type II readiness and audit support- Virtual CISO (vCISO) engagements, sized to stage and budget- Internal audit, risk assessment, and Statement of Applicability development
Our team brings over 22 years of practitioner experience in information security across telecom, cloud SaaS, and regulated industries, and active engagement in real-world ISMS operations alongside the consulting practice.
We typically work with two types of clients: founders and security leaders preparing for their first ISO 27001 or SOC 2 certification, often to unlock enterprise contracts; and mature security teams who want their ISMS to keep producing value year after year. Engagements are scoped to your stage, your tooling, and your audit calendar.
Headquartered in Estonia (27kay OÜ), with EU and international delivery.
Services
Capabilities listed on this profile.
Pricing
Self-reported by the listing.
Team & locations
Questions & answers
Ask 27kay about fit, budget or process before you reach out.
No questions yet. Ask about minimum budgets, who runs the account, or how they report results.
Sign in to ask a question. Questions are checked before they appear.
