Why audit firms refer it
Walkthrough-ready clients
Clients show up with per-control evidence packs — SHA-256 chain-of-custody sidecars, a cover-page Scope Attestation that states what was and wasn't scanned — instead of a folder of console screenshots taken the night before.
Evidence you can interrogate
Findings are mapped per control with the rationale stated, and gaps are reported as gaps rather than silently passed. What the scan could not measure, the pack says it could not measure.
Eight frameworks, one artifact shape
SOC 2, HIPAA, NIST CSF 2.0, PCI DSS, ISO 27001, CIS Controls v8, GDPR Article 32, and NIST SP 800-171 Rev 2 (evidence substrate for CMMC Level 2 preparation) — the same pack structure across every engagement type you run.
No data-custody entanglement
The scanner runs in the client's own infrastructure and writes to their storage. Neither Nsasoft nor your firm takes custody of scan data by recommending it.
Program structure
Referral fee
10–15% of first-year contract value on customers you refer that close — rate confirmed per partner at onboarding.
Co-marketing
Co-branded landing page, joint webinars (one per quarter), and co-authored content on audit-readiness.
Cadence
Quarterly partner check-in call, and a monthly content asset you can put in front of clients — slide deck, white paper, or case study.
The scanner is a tool your client operates in their own environment — it produces evidence for your audit; it does not perform the audit, and no scan output constitutes an auditor's opinion or a certification. Your independence obligations stay yours; the referral relationship is disclosed to the client.
Talk to us
Tell us about your practice
Write to partners@nsasoft.us with the details below and we'll set up a walkthrough of the evidence pack with your team.
- Firm name & website
- Engagement types you run — SOC 2, HIPAA, PCI, ISO, CMMC readiness, etc.
- Your typical clients — industry and size
- What client evidence looks like today in your walkthroughs
Want to inspect the evidence first? See the compliance documentation and NSAuditor AI Enterprise.