MHM Professional Corporation

www.mhmcpa.ca
SOC 2ISO 27001Works with Drata
Frameworks & servicesSOC 1/2/3, ISO 27001, ISO 27701, ISO 42001, privacy auditssource
Platform partnershipsDrata (Audit Alliance)source
RegionsCalgary, Canada; clients in North America, Europe and Israel (per Drata listing)source
Startup focusSMB (1–300 FTE) and mid-market, including start-ups (per Drata listing)source
Published pricingNot published; fixed-fee proposals after scopingsource
Last verified2026-10-28

Overview

MHM describes itself as a licensed CPA firm authorized to perform independent SOC attestations and an SCC-accredited (Standards Council of Canada) certification body for ISO standards. It says it was Canada's first SCC-accredited certification body for ISO/IEC 42001 AI governance audits, and that it focuses exclusively on independent SOC examinations, ISO certifications and AI governance audits across SOC 2, ISO 27001, ISO 27701, ISO 42001 and privacy frameworks. source

SOC 2

MHM performs SOC 2 Type 1 and Type 2 examinations with what it calls a practical, risk-based approach, for organizations pursuing a first report, responding to customer requirements, or running SOC 2 alongside ISO/IEC 27001. Its contact page lays out the process: an intake, a brief technical scoping call, then a fixed-fee, all-inclusive proposal with milestone windows. source

Pricing

MHM does not publish fee amounts. Its pricing page says most engagements are fixed-fee based on scope and readiness, that bundled pricing is available for multiple audits such as SOC 2 plus ISO 27001, and that the maturity of your control environment affects effort. Contact: [email protected]. source

Firm background

In its Drata Audit Alliance listing, MHM says it is a Calgary-based boutique CPA firm of former Big 4 professionals, led by former PwC partners Mark Mandel and Jose Costa, with clients in North America, Europe and Israel. It says its pricing is tailored for small and mid-sized organizations and lists SMB (1–300 FTE) and mid-market clients, including start-ups. source

Profile compiled from the firm's public website and listings, last checked 2026-10-28. Facts are attributed to the linked source; AuditPicker does not endorse any firm.