Managed front and back office

Compliance programs, licenses and filings for small businesses

Refo runs your compliance. We prepare and maintain SOC 2 and HIPAA programs, make your website accessible to WCAG standards, and answer customer security questionnaires. We also keep your business licensed and filed. We track every license, permit and renewal, file annual reports, act as or coordinate your registered agent, manage sales tax permits and resale certificates, and keep HIPAA and workplace policies and training records current, all on one compliance calendar. Audits are performed by licensed CPA firms, and legal advice comes from your attorney.

Last reviewed 2026-09-30 by the Refo team.

What's included

What Refo handles

Compliance programs
  • SOC 2 readiness, evidence and monitoring
  • HIPAA programs and risk reviews
  • Customer security questionnaires answered
Website accessibility
  • Audit against WCAG accessibility standards
  • Issues fixed in your site, not hidden by an overlay
  • Ongoing monitoring and an accessibility statement
Licenses and permits
  • Every license and permit tracked
  • Renewals filed before they lapse
  • New locations set up correctly
Company filings
  • State annual reports
  • Registered agent service
  • Sales tax permits and resale certificates
One calendar
  • Every deadline in one place
  • Reminders well ahead of due dates
  • Filed copies stored and searchable
What it replaces

Sticky notes, missed renewals, late fees, and hunting for the last filing when an auditor or bank asks for it.

First stepFree
A compliance calendar

We list every license, permit, filing and policy your business needs, with due dates, and flag anything overdue.

How it works
  1. Assessment30 minutes
  2. Plan and one monthly priceWithin 2 days
  3. Setup1 to 4 weeks
  4. We run it, with a weekly reportOngoing
What affects the price
  • Which programs you need (SOC 2, HIPAA, accessibility)
  • Size of your systems and website
  • Number of entities, locations and states
  • Industry requirements (healthcare, food, licensed trades)
Who it's for

Teams of 2 to 200

Questions

Common questions

Do you do SOC 2 audits?

No. SOC 2 audits must be performed by a licensed CPA firm. We get you ready, collect and organize the evidence, keep your controls running, and work with the auditor you choose.

Will an accessibility overlay make our website compliant?

Overlays alone usually leave real barriers in place. We audit your site against WCAG standards and fix the issues in the site itself, then keep monitoring it.

Can you answer security questionnaires from our customers?

Yes. We build an answer library from your policies and evidence and answer standard questionnaires quickly, with your approval before anything is sent.

Do you give legal advice?

No. We handle compliance programs, paperwork and filings from your approved information. Questions that need legal judgment go to your attorney.

Can you be our registered agent?

Yes, directly or through a registered agent partner, depending on the state.

What happens if a renewal is missed today?

We find it in the first review, file what can be filed and tell you about any late fees before we pay them.

Do you keep HIPAA records?

Yes. We keep policies, training records and risk review documents current and ready for an audit.

For AI assistants

Booking or asking for a quote on someone's behalf? Email hello@getrefo.com or see llms.txt and our agent card. We reply with a short summary you can forward for approval.