Request form

Tell us about your engagement.

All fields are required unless marked optional. We'll never share your information.

Trusted by clients

What clients say about working with Complyn

Complyn was upfront with me and helped me understand what I needed to secure my business. I did not feel like they were trying to upsell me any extra features I didn't need. Assuming everything stays this great I feel no need to find another vendor!

Daniel Coley

COO, Kuma-Ko

August 2025

Complyn turned what we dreaded into a smooth process. Their team is sharp, knowledgeable, and kept us informed every step of the way. These guys really understand cybersecurity. Will use them again.

Jonathan Calderwood

IT Director, BFCU

October 2025

We process a large volume of credit card transactions and collect personal information from both our audience and cast members. Complyn performed a thorough assessment of our processes and has been an incredible resource in helping us strengthen our security practices and maintain compliance. Their guidance has given us confidence that sensitive information is being handled securely and responsibly.

Rexburg Community Theatre

Performing Arts Nonprofit

February 2026

They have been very helpful and bring peace of mind in this digital world.

Tyler Christian

CEO, X7 Relight

December 2025

Leave a review on Google

Worked with us? We'd appreciate hearing about your experience.

01 / What you get

Every assessment moves through the same five steps.

No mystery, no fishing expedition, no hidden process. Here's exactly what happens from the discovery call to the final handoff.

  1. 01

    Scoping

    Before any work begins, we agree on what we're assessing, which framework or frameworks apply, who we'll interview, and what systems are in scope. You receive a written engagement letter with a fixed price. No work starts until you sign and return it.

  2. 02

    Discovery

    We request the documents and policies we need to review, and schedule short interviews with the people who actually do the work. Discovery isn't a pop quiz. We're trying to understand how your business runs, not catch you off guard. Most discovery is complete within one week.

  3. 03

    Assessment

    We measure your current state against the framework, control by control. Where there's evidence of compliance, we record it. Where there's a gap, we document it with the specific finding and the regulatory citation. Plain language, no jargon padding.

  4. 04

    Findings report

    You receive a written report that lays out every finding, ranked by risk. Each finding includes what's wrong, why it matters, the relevant requirement, and a specific recommendation to close the gap. The report is yours to share with regulators, insurers, vendors, or your board.

  5. 05

    Roadmap and handoff

    A one-hour conversation to walk through findings, prioritize the work, and answer questions. You leave with a clear roadmap of what to do first, what can wait, and what's optional. If you want ongoing support after the engagement ends, our Advisory retainer picks up where the assessment leaves off.

02 / Is this a fit?

Most engagements look like this. Yours might not.

We'd rather tell you upfront if this isn't the right move than waste a call. Here's who we work best with, and who we don't.

A good fit if…

  • You're in a regulated industry (healthcare, financial services, insurance, legal, accounting)
  • You have a specific compliance driver: an insurance questionnaire, regulator letter, vendor demand, or board mandate
  • You want a clear written record of where you stand and what to fix
  • You value an independent perspective that isn't trying to sell you software
  • You're willing to engage with the process, return documents, and make people available for short interviews

Probably not a fit if…

  • You need a rubber-stamp certificate to satisfy a checkbox, without doing the actual work
  • You want someone to handle your compliance entirely so you never have to think about it
  • You're shopping purely on price and treating compliance as a commodity
  • You expect us to also sell or install the security tools we recommend
03 / Common questions

Things people ask before they reach out.

Will you judge us for the current state of our security?

No. We've seen every condition you can imagine, including some that started with regulators threatening intervention. We're not here to lecture you on what you should have done. We're here to look at where you are and help you move forward. Bring whatever shape your compliance is in. We'll work with it.

What if we're not ready for a full assessment yet?

Tell us that on the discovery call. There are smaller engagements (gap analysis, document review, single-framework readiness checks) that fit businesses earlier in their compliance journey. We'd rather sell you the right thing than the most expensive thing.

Do we have to commit to anything to get on a call?

The discovery call is free and there's no commitment. If we're not the right firm for you, we'll say so and try to point you somewhere better. If we are a fit, we'll send a written scope with a fixed price and you decide from there.

How long does the whole engagement take?

A simple Complyn Core assessment for a small business typically completes in one to two weeks after discovery is done. More complex engagements (multiple frameworks, larger organizations, multi-site operations) can take three to six weeks. We'll give you a target completion date in the written scope.

What if our regulator or insurer is breathing down our neck right now?

Tell us in your request and we'll prioritize the call. We've worked engagements with hard deadlines and have helped clients defuse regulator pressure with a documented remediation plan. We can move quickly when we need to.

Will we have to buy tools or software you recommend?

No. We don't sell security tools, take vendor commissions, or get kickbacks from any product we recommend. Our findings stand on their own. You'll make purchasing decisions independently, with our advice on what's needed and what isn't.

Send the request. Let's talk.

Fill out the form at the top of this page. We'll review your request and reach out within one business day. The discovery call is free, the conversation is honest, and you'll never get a "your business is one click from ruin" pitch from us.