Timberline Registrar

Timberline Registrar is a Denver-based certification body with about one hundred and twenty staff and contract auditors that certifies organisations to ISO/IEC 42001 and issues SOC 2 reports through a licensed CPA affiliate. It has developed a particular depth in healthcare and medical technology, where clients often need the AI management system audit to line up with existing quality system audits, and it schedules those engagements so that a single visit can serve both. Certification follows the two-stage model, with stage 1 conducted remotely and stage 2 on site at the client's primary facility; surveillance audits in years two and three are usually remote. Timberline also offers an optional pre-assessment, a single day spent reviewing documentation and interviewing process owners, which produces a list of likely nonconformities without any advice on how to fix them. That distinction is deliberate: the body does not consult, draft policies or recommend controls, and it screens every engagement for conflicts with the client's advisers. It holds clients in the United States, Canada and the United Kingdom, with British audits carried out by a partner team under Timberline's accreditation. Fees are quoted per application based on scope, sites and headcount; the body does not publish price bands for any of its services.