Service catalog

Three retainer tiers. Each ships with the full AC5 Labs tooling stack — what differs is the engagement cadence, the senior attention, and which programs are in scope.

Essentials

Replace the burned-out office manager who's been doing compliance on the side.

Best for

10-50 person companies with one active compliance program (SOC 2 Type I or ISO 9001) and no in-house compliance lead.

Scope

✓Quarterly compliance posture review (1 hour)
✓Monthly evidence-collection audit using the Evidence Hub (MVP 03)
✓ISO 9001 / NIST 800-171 control implementation tracking (MVP 01 / 02)
✓Vendor risk register kept current (MVP 04)
✓Email response within 1 business day to compliance questions
✓One framework annually + one minor framework on request

Out of scope

−Live audit response (auditor on site requires a Standard or Premium engagement)
−Custom workflow design beyond MVP 06 templates
−DCAA / federal cost accounting (Standard or higher)

Start a discovery call →

Most common

Standard

Replace a junior compliance coordinator at half the loaded cost — with senior-level rigor.

Best for

50-200 person companies running 2-3 concurrent compliance programs and headed for a Type II audit, ISO certification, or CMMC C3PAO assessment in the next 12 months.

Scope

✓Everything in Essentials, plus:
✓Bi-weekly working session with the Fractional CO
✓Live audit-response support during external assessments
✓Monthly board / leadership compliance brief (one-pager + 15 min Q&A)
✓AI governance program operation (MVP 10) — registry, risk tiering, model cards
✓Audit BI dashboard (MVP 07) maintained quarterly with new KPIs
✓Workflow / CAPA management (MVP 06) — incident response, change control

Out of scope

−DCAA incurred-cost submission preparation (Premium)
−Multi-entity / parent-sub structures (Premium)

Start a discovery call →

Premium

Senior compliance officer at a fraction of the FTE cost, fluent in federal contracting.

Best for

100-500 person federal contractors operating under DFARS / CMMC L2, with ISO 9001 / AS9100, vendor portfolios of 100+, and at least one active DCAA-audited contract.

Scope

✓Everything in Standard, plus:
✓Weekly working session with the Fractional CO
✓On-site presence quarterly (or monthly during active audits)
✓DCAA toolkit operation (MVP 08) — indirect rate updates, Schedule H prep, FAR Part 31 unallowable review
✓Pre-award proposal compliance review (cost narrative, rate certification, DFARS clause flowdown)
✓Acting AI Governance Officer for ISO 42001 readiness (MVP 10)
✓Direct liaison to external auditors, DCAA, and prime contracting officers

Out of scope

−M&A due-diligence support (separate fixed-fee engagement)
−Litigation / investigation support (separate fixed-fee engagement)

Start a discovery call →

Custom engagements available — M&A diligence, post-incident review, litigation support, multi-entity rollups, or pre-IPO compliance bake. Scoped on a fixed-fee basis after a one-hour scoping call.