Geels Norton

What Geels Norton does

Geels Norton is a privately held, US-based professional services firm that delivers data security and privacy compliance and advisory services, primarily SOC 1 and SOC 2 examinations, Microsoft SSPA Independent Assessments, and ISO 27001/27017/27018 internal audits. The firm is structured as a partnership-style entity (Geels Norton PLLC/LLC) co-founded by Bryan Geels (CPA) and Nick Norton (MPAc, CISA), with a small credentialed team that includes a CIPP/US-certified privacy specialist and additional CPA staff. The firm holds Microsoft Preferred Assessor status for the SSPA program and has passed an AICPA peer review, providing credentialed gating mechanisms for engagements with Microsoft suppliers and audited entities.

The firm's product surface is built around three service lines rather than software: SOC audits (Type 1 and Type 2 with a stated two-week draft report turnaround), SSPA Independent Assessments offered at disclosed price tiers of $7,500, $10,000, and $14,000 depending on scope (Sections A:I, A:J, A:K), and ISO framework audits that can be consolidated with SOC 2 in a single engagement. Technology is limited to audit automation and compliance software used to accelerate examinations, with no proprietary platform, AI capabilities, or software product disclosed. Service delivery emphasizes partner-level staffing, white-glove client engagement, and a collaborative, educational audit philosophy rather than check-the-box compliance.

Geels Norton's go-to-market is sales-led and direct, relying on its website, SEO for compliance keywords, published testimonials from named enterprise clients (Brex, Sourcegraph, AITX, Resolve), and inbound inquiries converted through contact forms, email, and phone. Pricing is bespoke and quote-based for SOC and ISO work, with SSPA tiers being the only publicly disclosed fees. The firm claims to serve companies globally but is US-delivered, and revenue model is purely professional services with no disclosed software, subscription, or platform recurring revenue streams. No external funding, parent company, or institutional ownership is disclosed.

Name

Geels Norton

Legal name

Geels Norton LLC

Website

https://geelsnorton.com

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

1–10 employees

Short description

Geels Norton is a US-based compliance advisory firm that delivers SOC 1/SOC 2 audits, Microsoft SSPA Independent Assessments, and ISO 27001/27017/27018 audits for high-growth technology companies and Microsoft suppliers, leveraging partner-led white-glove delivery.

Ownership category

akta.pro rank

Product category

Compliance Advisory & Audit Services

NAICS

Testing Laboratories and Services (541380), Other Scientific and Technical Consulting Services (541690)

SIC

Services-Testing Laboratories (8734)

akta.pro primary industry

Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG)

akta.pro secondary industries

EHS Auditing, Inspections & Assurance (BPAHAJAG), EHS Management Systems & ISO Consulting (ISO 14001/45001) (BPAHAJAF)

Keywords

• SOC 2 audit services
• Data security compliance
• SSPA independent assessment
• ISO 27001 internal audit
• Compliance advisory services

Headquarters

HQ city

Wausau

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Others

Revenue model

1. Compliance Advisory Services: Professional services revenue generated through advisory engagements for SOC 1, SOC 2, SSPA, and ISO compliance. Services include readiness assessments, Type 1 and Type 2 examinations, and ongoing compliance consulting. The firm operates on a quote-based pricing model tailored to client-specific factors including complexity and maturity.
2. SSPA Independent Assessments: Assessment fees for Microsoft SSPA Independent Assessments, with tiered pricing based on sections covered. Assessment typically takes 3-8 weeks depending on supplier preparedness and compliance gaps.
3. ISO Internal Audits: Internal audit services for ISO frameworks including ISO 27001, ISO 27017, and ISO 27018. Often offered as consolidated audits combined with SOC 2 examinations.

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels5 records

Core offering

Geels Norton is a purpose-built compliance and advisory firm delivering data security and privacy audit services. The firm provides SOC 1 and SOC 2 audit examinations (Type 1 and Type 2), Microsoft SSPA Independent Assessments for suppliers, and ISO 27001/27017/27018 internal audits. Services are delivered by partner-level professionals through a white-glove, high-touch engagement model with a two-week report turnaround.

Product overview

Geels Norton is a compliance and advisory services firm, not a software product company. The firm offers a unified portfolio of audit and assessment services built around three core offerings: SOC 1/SOC 2 audit examinations, Microsoft SSPA Independent Assessments, and ISO framework audits (ISO 27001, ISO 27017, ISO 27018). The SOC services include readiness preparation, Type 1 and Type 2 examinations with a two-week report turnaround. The SSPA service provides structured assessment tiers (Sections A:I, A:J, A:K) for Microsoft suppliers. The ISO services feature Certified ISO 27001 Lead Auditors and consolidated multi-framework audits that can combine SOC 2 with ISO 27001 in a single engagement. All services are delivered through direct engagement with partner-level team members.

Differentiator

Problem solved

Functional benefit

Products and services

• SOC 2 Audit Services SOC 2 Type 1 and Type 2 audit examinations for emerging and high-growth cloud technology companies, with draft reports delivered within two weeks of audit testing.
• SOC 1 Audit Services SOC 1 audit examinations for companies needing to demonstrate controls relevant to financial reporting, delivered through cloud-friendly IT governance practices.
• SOC Readiness Services Pre-audit preparation including control language development, criteria mapping, and control narrative (Section 3) development to prepare clients for SOC examinations.
• SSPA Independent Assessment Microsoft Supplier Privacy Assessment services helping clients complete the SSPA process through the Aravo portal, with tiered assessments (Sections A:I at $7,500, A:J at $10,000, A:K at $14,000).
• ISO 27001 Internal Audit Internal audit services for ISO 27001 certification, conducted by Certified ISO 27001 Lead Auditors, with options to consolidate SOC 2 and ISO 27001 audits into a single engagement.
• Consolidated Multi-Framework Audit Combined audit services covering multiple frameworks (SOC 2, ISO 27001, ISO 27017, ISO 27018) in a single audit engagement, reducing time and cost compared to separate examinations.

Quantifiable outcome

• Two-week draft report delivery from audit testing completion
• +2 more outcomes

Named customers4 records

Segments4 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

One partnership is on record.

• MicrosoftcoreStrategic or Co-development PartnerGeels Norton has a long-standing relationship with Microsoft's SSPA team and has been recognized for high-value services provided to Microsoft suppliers. The firm is a Preferred Assessor for Microsoft, helping Microsoft suppliers navigate the SSPA Independent Assessment process. They hold clients' hands through the Independent Assessment process, helping with DPR compliance, Aravo portal navigation, and ongoing compliance support.

Scale indicators2 records

Recent moves5 records

Expansion highlights5 records

Direct peers

• AssuranceLab: AssuranceLab is an international audit firm focused on SaaS SOC 2 and ISO 27001 audits with a remote-first model. Comparable in tech-only focus and use of compliance automation tooling to deliver fast turnaround audits.
• Sensiba: Sensiba (Sensiba San Filippo) provides SOC, ISO, and HITRUST audits alongside broader advisory for SaaS and high-growth tech clients. Comparable multi-framework audit positioning and tech-vertical specialization.
• KirkpatrickPrice: KirkpatrickPrice offers SOC 2, ISO 27001, PCI, and HITRUST audits plus cybersecurity services to SMB and mid-market technology firms. Comparable audit-only service model targeting the same compliance-fatigued buyer.
• Linford & Co: Linford & Co is a cloud-focused CPA firm specializing in SOC 1, SOC 2, and ISO audits for SaaS and technology companies. Directly comparable on target market (SaaS/cloud-native firms) and audit-only service model.
• BARR Advisory: BARR Advisory is a cybersecurity and compliance advisory firm providing SOC 2, ISO 27001, and HITRUST audits to technology and SaaS clients. Comparable service mix and SaaS-centric go-to-market.
• A-LIGN: A-LIGN is a tech-focused compliance, cybersecurity, and audit firm offering SOC 2, ISO 27001, and similar frameworks to SaaS and tech clients. Highly comparable in target customer, framework breadth, and growth-stage SaaS focus.
• 360 Advanced: 360 Advanced delivers SOC, ISO, HITRUST, and cybersecurity assessments with a focus on cloud and SaaS clients. Comparable multi-framework audit portfolio and tech-vertical focus.
• Schellman & Co: Schellman is a leading national SOC 2, ISO 27001, and cybersecurity audit firm targeting technology and SaaS clients. It is the closest pure-play direct peer given near-identical service mix, client profile, and white-glove positioning.

Emerging players

• Vanta: Vanta is a compliance automation platform that auto-collects SOC 2 and ISO 27001 evidence and partners with auditors. Not a direct competitor, but its automation tooling compresses the underlying audit hours and reshapes the buyer journey Geels Norton depends on.

Broad incumbents

• CohnReznick: CohnReznick is a top-30 US accounting firm with a dedicated SOC/cybersecurity practice serving technology and SaaS clients. Comparable SOC and ISO services but as part of a much broader tax, audit, and advisory portfolio.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Geels Norton