About Us
Who We Are
We're a licensed CPA firm specializing in IT audit, advisory, and consulting, headquartered in the Denver metro area (Westminster, Colorado). We combine deep audit expertise with real-world technical experience. We speak the language of SaaS and B2B technology companies.
Connect with an ExpertOur Story
Jordan started as a software developer, writing full-stack applications and working against databases and ERP systems for years. When he came across SAS 70 work and the idea of compliance auditing of systems, he wanted in. He went back to school for a Master's in Accounting, joined a Big Four firm doing IT audit: SOX, government work, and SOC engagements, and earned his CPA along the way.
Then he went back to IT.
As a GRC analyst and security professional, he built out an internal compliance program and led a financial services firm through its first SOC 1 and SOC 2 attestation reports, from the inside. He has sat in the chair your team sits in. He knows what it's like to translate technical controls for auditors who don't understand the environment, and to feel the gap between what audit firms deliver and what growing companies actually need.
Sage Audits was built to close that gap. A firm with the technical depth to meet you where your environment actually is, and the audit rigor to produce reports that hold up when it matters.
Why Sage Audits
The Firm Behind the Report
What separates a report that passes compliance from one that holds up when your biggest customer's security team reads it line by line?
Big Four Expertise, Boutique Attention
We trained at top-tier global firms. You get that depth of knowledge and rigor without the overhead, junior staff rotations, or one-size-fits-all audit programs that come with large firm engagements.
Partner-Led, Start to Finish
The partner who earns your trust in the first call runs your engagement. No hand-offs to staff. The same expert who scoped your audit reviews your controls, asks the hard questions, and signs your report.
Genuine Technical Depth
We've built and managed real IT environments. That means we understand your cloud architecture, CI/CD pipelines, and infrastructure controls before we ask the first question, making every hour of fieldwork count.
Reports Built to Withstand Scrutiny
Enterprise security teams and sophisticated buyers read SOC reports closely. We write reports that hold up under that review, because assurance that doesn't hold up under scrutiny isn't assurance.
The People Behind the Report
We specialize in systems, infrastructure, and technology. We are a firm built intentionally small so that standard never slips.
Jordan Novak
Managing Partner
Tasya Novak
Managing Director
Intentionally Small, By Design
We don't scale by adding junior staff to your engagement. We stay involved because that's the only way to consistently deliver work worth standing behind. Meet the team.
Auditing Technology with Technology
We use modern tools to streamline evidence collection and reduce back-and-forth. Faster timelines, fewer disruptions. See how we avoid audit pain points.
A Process Built Around Your Engagement
No two audits run the same way because no two environments are the same. Learn about our process.
Get Your
Custom Quote
Our interactive calculator gives you a transparent estimate based on your organization's size, scope, and compliance requirements. Submit your information and receive a custom quote within 1 business day. No guesswork, no surprises.
What the Estimate Covers
- SOC 1 or SOC 2 audit scope
- Organization size and complexity
- Readiness assessment, if needed
- Advisory or consulting add-ons
- Delivered to your inbox, no obligation
Licensed CPA Firm
Big Four Trained
We bring Big Four public accounting backgrounds across government, private, and public company engagements.
Colorado CPA Firm
Licensed and registered in Colorado (Firm ID: FRM.5000785), headquartered in Westminster. Held to the highest professional and ethical standards of the CPA profession.
AICPA Member
Accredited member of the AICPA, the national body that sets standards for SOC reporting, CPA practice, and professional ethics.
