# Auditlytics

> Auditlytics provides SOC 2 readiness advisory, compliance program management,
> vCISO services, AI GRC, and Managed Service Provider (MSP) solutions for
> businesses navigating information security compliance. We offer advisory and
> implementation services — not audit services — allowing us to focus entirely
> on client outcomes.

Auditlytics helps companies of all sizes achieve SSAE 18 SOC 2 certification,
develop information security programs, and manage IT operations. We specialize
in getting organizations audit-ready as efficiently as possible.

## Company

- [Home](https://www.auditlytics.com/index.html): Overview of all Auditlytics services, core SOC 2 processes, and contact information
- [About Us](https://www.auditlytics.com/index-aboutus.html): Background, mission, and team
- [Careers](https://www.auditlytics.com/index-careers.html): Open roles at Auditlytics

## Advisory Services

- [Consulting](https://www.auditlytics.com/services-consulting.html): Compliance program management and SOC 2 readiness advisory
- [vCISO](https://www.auditlytics.com/services-vciso.html): Virtual Chief Information Security Officer services
- [AI GRC](https://www.auditlytics.com/services-aigrc.html): Governance, risk, and compliance for AI systems
- [Security Questionnaires](https://www.auditlytics.com/services-secquestions.html): Vendor and customer security questionnaire support

## Managed Tools (MSP)

- [Coro](https://www.auditlytics.com/services-coro.html): Cybersecurity platform — endpoint, email, cloud, and network protection
- [JumpCloud](https://www.auditlytics.com/services-jumpcloud.html): Cloud directory, identity management, SSO, MFA, and device management
- [Vanta](https://www.auditlytics.com/services-vanta.html): Automated compliance and SOC 2 audit readiness platform
- [Vanta Implementation](https://www.auditlytics.com/services-vanta.html): Expert Vanta setup, integrations, and audit preparation services

## Compliance Frameworks

- [SOC 2](https://www.auditlytics.com/frameworks-soc2.html): SOC 2 opinions, report types (Type 1 & 2), trust services categories, system descriptions, and key terms
- [ISO 27001](https://www.auditlytics.com/frameworks-iso27001.html): Information security management system certification
- [ISO 42001](https://www.auditlytics.com/frameworks-iso42001.html): AI management system standard
- [GDPR](https://www.auditlytics.com/frameworks-gdpr.html): General Data Protection Regulation compliance
- [HIPAA](https://www.auditlytics.com/frameworks-hipaa.html): Health Insurance Portability and Accountability Act compliance

## LLMs and Compliance

Key considerations for organizations using Large Language Models (LLMs) in
their operations: data privacy and handling policies, access control for LLM
interfaces, model security against unauthorized access, output monitoring and
auditing, third-party LLM vendor risk assessments, staff training on secure
LLM use, incident response planning for LLM-related scenarios, and compliance
documentation for SOC 2 and other frameworks.

Auditlytics helps clients integrate emerging AI technologies while maintaining
robust security and compliance standards.

## Optional

- [Privacy Policy](https://www.auditlytics.com/index-privacy.html): How Auditlytics handles user data submitted via the contact form
- [Sitemap](https://www.auditlytics.com/sitemap.xml): Full list of all pages