Post a project

A posting is what auditors bid on, so the better it describes the work, the more useful the bids. Posting is free; you pay only when you fund a contract.

Starting a posting #

From the dashboard, choose Post a project. The form walks through the posting in steps; you can save and come back.

What the form asks #

• Framework. The standard or regulation the audit is for: ISO 27001, SOC 2, GDPR, NIS2, DORA, the EU AI Act, HIPAA, PCI DSS, or another one you name. If you are not sure which rules reach you, the rules finder on the public site answers that in ten questions.
• Type of engagement. A gap assessment, an internal audit, readiness work, a certification audit, or implementation support.
• Scope. The systems, locations, teams and processes the auditor should cover, and what is out of scope. Write it in your own words; this is what the auditor will price.
• Deliverables. What you expect at the end: a report, a findings register, a remediation plan, a certificate readiness statement.
• Timeline. A target start and a completion window.
• Budget. A range, in euros. Auditors bid a fixed price against it.
• Screening questions. Optional questions every bidder must answer, for example about experience with your sector.

After you post #

The posting is visible to auditors on the platform. They see the posting in full but not your company's name, which stays hidden until you fund a contract with one of them. You can edit the posting while it has no accepted bid, close it at any time, and post as many as you need.

Bids arrive under Bids received. Next: compare bids.