Field notes from independent audit.
Buying guides, framework deep-dives, and honest takes on the compliance industry, written for the people who actually have to get audited.
The Trust Layer is Dying
Certification was built to give companies a common language for trust. Somewhere between the readiness platforms and the auditors they recommend, the line between supporting an audit and influencing one went opaque. A look at the feedback loop nobody designed.
Read articleThe conflict of interest hiding in your compliance platform
Referral economics quietly shape which auditors get recommended. Here's what that means for buyers, and why an independent marketplace matters.
How much does a SOC 2 audit cost in 2026? A buyer's breakdown
A transparent breakdown of what a SOC 2 audit actually costs in 2026: readiness, Type I, Type II, and ongoing surveillance, plus how to get an itemized quote you can trust.
Independent vs platform-preferred auditors: the hidden costs
Compliance platforms often surface a shortlist of "recommended" auditors. Here is what that shortlist can and cannot tell you, and why independence is a structural question, not a slogan.
SOC 2 vs ISO 27001: which should you tackle first?
A practical decision framework for early-stage and scaling companies weighing their first major audit.
How to evaluate an audit bid (beyond the headline price)
Scope, sampling, deliverables, and timeline can swing the real cost by 40%. A buyer's checklist.
What makes an auditor truly independent?
Accreditations are table stakes. We unpack the structural questions every buyer should ask.
Preparing for your first SOC 2 Type II
A 12-week readiness plan covering evidence, sampling windows, and the questions auditors will actually ask.
HIPAA for SaaS companies: a 2026 overview
BAA scope, technical safeguards, and the auditor expectations that have shifted in the past year.
Why we built Nomona
A note from the founders on independence, transparency, and the future of audit procurement.
How audit firms get more clients in 2026 (without buying placement)
Where compliance audit firms actually find new clients in 2026, why platform partner programs squeeze independent firms, and how to win engagements on merit.
No fluff. One email a month.
New buying guides, framework changes, and the occasional industry takedown. Unsubscribe anytime.