mhm
A five-year-old Calgary assurance firm and ISO 42001 accreditation pioneer acquired by Axiom GRC.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
MHM, founded in 2020 and based in Calgary, is a Canadian SOC 2 and ISO 27001 assurance firm and the first Canadian organization accredited to deliver ISO 42001 AI governance audits, giving it an early-mover position in AI governance assurance. It is led by ex-PwC partners with a combined 50-plus years of experience.
Axiom GRC acquired it as its first Canadian deal, extending its North American GRC assurance footprint after prior acquisitions of IS Partners and AssurancePoint.
Innovation Matrix Assessment
First Canadian firm accredited to deliver ISO 42001 AI governance audits, moving ahead of the market on a newly emerging standard.
Delivers SOC and ISO advisory, readiness, and attestation services to an established U.S. and Canada client base.
Acquired by Axiom GRC in June 2026 as its first Canadian deal, following prior acquisitions of IS Partners and AssurancePoint.
SOC/ISO assurance is a mature, well-established category; MHM's edge is being early to ISO 42001 rather than a new business model.
No specific client names or audit-outcome metrics were disclosed beyond the ISO 42001 accreditation claim.
AI governance assurance (ISO 42001) is a rapidly emerging compliance requirement as AI regulation accelerates globally.
Why CISOs Should Care
MHM gives CISOs and compliance leaders a specialized partner for SOC 2, ISO 27001, and the newer ISO 42001 AI governance audits, helping organizations get ahead of emerging AI-governance requirements rather than scrambling once regulation lands.
What Makes It Different
MHM was the first Canadian organization accredited to deliver ISO 42001 AI governance audits, giving it an early-mover position in AI governance assurance that most SOC/ISO shops don't yet offer, led by ex-PwC partners with a combined 50+ years of experience.
The Matrix Verdict
40/100 — EMERGING / UNRANKED
A five-year-old Canadian SOC/ISO assurance firm and ISO 42001 accreditation pioneer acquired by Axiom GRC as its first Canadian deal, extending Axiom's North American GRC assurance footprint after prior acquisitions of IS Partners and AssurancePoint.
Editorial Note: Claims vs. Verified Findings
The 'first Canadian organization accredited to deliver ISO 42001' claim is repeated consistently across multiple independent outlets (PRNewswire, GRC Report, Consulting.ca) covering the acquisition, making it a well-corroborated claim.
Sources
Alternatives to mhm
Chainalysis
The dominant, decade-plus incumbent in blockchain analytics, tracing illicit crypto flows and screening sanctions/AML risk for exchanges, banks,…
Vanta
Continuous automated compliance monitoring platform that replaces manual audit evidence-gathering with live, integration-based control checks.
Arcova
Cybersecurity advisory and managed services firm, rebranded from MorganFranklin Cyber, offering GRC, IAM, OT security, and a cloud-based…
DigitalXForce
CISO ReviewedIrving, Texas-based AI-powered platform unifying governance, risk, compliance, and security posture management into one real-time system.
Credo AI
AI governance platform that discovers, assesses, and continuously monitors enterprise AI systems and agents against regulations like the…
Level 6 Cyber
CISO ReviewedContinuous decision-intelligence platform (LISN) that replaces point-in-time security audits with a live digital twin of a CISO's program.