MHM Professional Corporation
www.mhmcpa.ca| Frameworks & services | SOC 1/2/3, ISO 27001, ISO 27701, ISO 42001, privacy auditssource |
|---|---|
| Platform partnerships | Drata (Audit Alliance)source |
| Regions | Calgary, Canada; clients in North America, Europe and Israel (per Drata listing)source |
| Startup focus | SMB (1–300 FTE) and mid-market, including start-ups (per Drata listing)source |
| Published pricing | Not published; fixed-fee proposals after scopingsource |
| Last verified | 2026-10-28 |
Overview
MHM describes itself as a licensed CPA firm authorized to perform independent SOC attestations and an SCC-accredited (Standards Council of Canada) certification body for ISO standards. It says it was Canada's first SCC-accredited certification body for ISO/IEC 42001 AI governance audits, and that it focuses exclusively on independent SOC examinations, ISO certifications and AI governance audits across SOC 2, ISO 27001, ISO 27701, ISO 42001 and privacy frameworks. source
SOC 2
MHM performs SOC 2 Type 1 and Type 2 examinations with what it calls a practical, risk-based approach, for organizations pursuing a first report, responding to customer requirements, or running SOC 2 alongside ISO/IEC 27001. Its contact page lays out the process: an intake, a brief technical scoping call, then a fixed-fee, all-inclusive proposal with milestone windows. source
Pricing
MHM does not publish fee amounts. Its pricing page says most engagements are fixed-fee based on scope and readiness, that bundled pricing is available for multiple audits such as SOC 2 plus ISO 27001, and that the maturity of your control environment affects effort. Contact: [email protected]. source
Firm background
In its Drata Audit Alliance listing, MHM says it is a Calgary-based boutique CPA firm of former Big 4 professionals, led by former PwC partners Mark Mandel and Jose Costa, with clients in North America, Europe and Israel. It says its pricing is tailored for small and mid-sized organizations and lists SMB (1–300 FTE) and mid-market clients, including start-ups. source
Profile compiled from the firm's public website and listings, last checked 2026-10-28. Facts are attributed to the linked source; AuditPicker does not endorse any firm.