Auditor Directory
GDPR Auditors
General Data Protection Regulation (EU) 2016/679
Browse accredited firms offering GDPR audits. Filter by location, size, and budget.
280 firms — interactive filtering loads below.
A-LIGN
Tampa, FL
A-LIGN is one of the largest and most recognized compliance audit firms in the United States. Profile includes pricing, framework coverage, reviews, and engagement process.
Aon Cyber Solutions UK
London, United Kingdom
Aon Cyber Solutions UK offers ISO 27001, SOC 2, and PCI DSS assessments with cyber insurance integration.
Atos Cybersecurity
Paris, France
Atos Cybersecurity is a global IT services company offering enterprise-grade ISO 27001, SOC 2, and NIS2 compliance.
Baker Tilly
Chicago, Illinois
Baker Tilly is a top-10 global advisory CPA firm network with 43,000+ professionals in 141 countries, serving mid-market and growth companies.
BDO International
Brussels, Belgium
BDO is the fifth-largest professional services network globally, providing audit, tax, and advisory services through member firms in over 160 countries.
Bridewell Consulting
Reading, United Kingdom
Bridewell Consulting is a UK cybersecurity firm offering ISO 27001, SOC 2, PCI DSS, and NIS2 assessments.
BSI Group
London, UK
BSI Group is the world's first national standards body and largest ISO certification body, offering ISO 27001, ISO 27701, SOC 2, and Cyber Essentials audits globally.
BSI Group
London, United Kingdom
BSI Group is the world's leading standards and certification body, providing ISO 27001, ISO 22301, and other management system certifications globally.
Bureau Veritas
Paris, France
Bureau Veritas is a world-leading testing, inspection, and certification company providing ISO 27001 and management system certifications in 140+ countries.
CGI Cybersecurity
Paris, France
CGI Cybersecurity offers enterprise-grade compliance services across ISO 27001, SOC 2, NIS2, and more.
Coalfire
Westminster, Colorado
Coalfire is a leading US cybersecurity advisory and audit firm specializing in FedRAMP, SOC 2, PCI DSS, HITRUST, and CMMC for cloud and technology companies.
Crowe Global
New York, United States
Crowe Global is a top-10 global accounting network providing audit, tax, and advisory services through member firms in over 145 countries worldwide.
DarkMatter Group
Abu Dhabi, UAE
DarkMatter Group is a UAE cybersecurity firm offering ISO 27001, SOC 2, and NESA compliance assessments.
Deloitte
London, United Kingdom
Deloitte is the world's largest professional services firm, offering audit, assurance, tax, and advisory services across 150+ countries worldwide.
Deloitte Australia
Sydney, Australia
Deloitte Australia is a Big Four professional services firm providing SOC 2, ISO 27001, IRAP, Essential Eight, and enterprise risk advisory services to Australia's largest organizations across government, financial services, and technology.
Deloitte Canada
Toronto, Canada
Deloitte Canada is the country's largest Big Four professional services firm, providing SOC 2, ISO 27001, PIPEDA, SOX, and enterprise risk advisory services across financial services, technology, energy, and government sectors.
Deloitte Haskins & Sells LLP
Mumbai, India
Deloitte Haskins & Sells is Deloitte's primary India affiliate, offering SOC 1, SOC 2, ISO 27001, DPDPA, and compliance audit services across India.
Deloitte India
Mumbai, India
Deloitte India is a Big Four professional services firm providing SOC 2, ISO 27001, DPDPA, SOX, and comprehensive risk advisory services to India's largest corporations and multinational subsidiaries.
Deloitte Middle East
Dubai, UAE
Deloitte Middle East is the region's largest professional services firm, providing Big Four audit, assurance, and advisory services across the MENA region.
Deloitte Singapore
Singapore
Deloitte Singapore is a Big Four professional services firm providing SOC 2, ISO 27001, PDPA, MTCS, and enterprise risk advisory services to major corporations and government agencies across Singapore and Southeast Asia.
Deloitte Tohmatsu
Tokyo, Japan
Deloitte Tohmatsu is Deloitte's Japanese member firm and one of Japan's largest audit firms, providing Big Four services including J-SOX and ISMAP compliance.
Deloitte Touche Tohmatsu Brazil
Sao Paulo, Brazil
Deloitte Brazil is the largest professional services firm in Latin America, offering SOC 1, SOC 2, ISO 27001, LGPD, and compliance audit services.
DNV
Oslo, Norway
DNV is a global assurance and risk management company providing ISO 27001, ISO 22301, and management system certifications across 100+ countries worldwide.
ElevenPaths (Telefonica Cyber)
Madrid, Spain
ElevenPaths (Telefonica Cyber) offers ISO 27001, PCI DSS, and ENS compliance across Europe and Latin America.
Ernst & Young (EY)
London, United Kingdom
EY is a Big Four professional services firm providing audit, assurance, tax, consulting, and strategy services across more than 150 countries worldwide.
EY Australia
Sydney, Australia
EY Australia is a Big Four professional services firm providing SOC 2, ISO 27001, IRAP, Essential Eight, and enterprise risk advisory services across financial services, technology, and government sectors in Australia.
EY France
Paris, France
EY France is a Big Four professional services firm providing ISO 27001, GDPR, HDS, SOC 2, and enterprise risk advisory services to French enterprises across financial services, technology, and manufacturing.
EY Germany
Stuttgart, Germany
EY Germany is a Big Four professional services firm providing ISO 27001, C5, TISAX, SOC 2, and GDPR compliance services to German enterprises, automotive companies, and financial institutions.
EY India
Mumbai, India
EY India is the largest Big Four operation in India by headcount, providing SOC 2, ISO 27001, DPDPA, SOX, and comprehensive risk advisory services across all major industries.
EY Japan
Tokyo, Japan
EY Japan (EY ShinNihon) provides Big Four audit, assurance, and advisory services with expertise in J-SOX, ISMAP, and Japanese regulatory compliance.
EY MENA
Dubai, UAE
EY MENA provides Big Four audit, assurance, tax, and advisory services across the Middle East and North Africa with offices in 15+ MENA countries.
EY Singapore
Singapore
EY Singapore provides Big Four audit, assurance, and advisory services with strong cybersecurity and regulatory compliance capabilities for the ASEAN market.
Forvis Mazars (US)
Springfield, Missouri
Forvis Mazars is a top-10 US professional services firm formed from the merger of BKD and Dixon Hughes Goodman, now part of the Mazars global network.
Grant Thornton
London, United Kingdom
Grant Thornton is a leading global professional services network providing audit, tax, and advisory services through member firms in over 140 countries.
Grant Thornton LLP
Chicago, IL
Grant Thornton US is a top-seven national CPA firm offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, FedRAMP, and CMMC audit services for mid-market and enterprise companies.
HCLTech Cybersecurity
Noida, India
HCLTech Cybersecurity provides enterprise compliance services across ISO 27001, SOC, PCI DSS, and NIST.
Help AG
Dubai, UAE
Help AG is one of the largest cybersecurity firms in the Middle East offering ISO 27001, SOC 2, and NESA assessments.
KPMG
Amstelveen, Netherlands
KPMG is a Big Four professional services firm providing audit, tax, and advisory services through a global network spanning 143 countries and territories.
KPMG Australia
Sydney, Australia
KPMG Australia provides Big Four audit, assurance, and cybersecurity services with deep expertise in APRA, CPS 234, and Australian regulatory compliance.
KPMG AZSA LLC
Tokyo, Japan
KPMG AZSA (KPMG Japan) is a Big Four audit firm providing SOC 2, ISO 27001, APPI, ISMAP, and enterprise risk advisory services to Japan's largest corporations across technology, manufacturing, and financial services.
KPMG Canada
Toronto, Canada
KPMG Canada is a Big Four professional services firm providing SOC 2, ISO 27001, PIPEDA, SOX, and enterprise risk advisory services to Canadian organizations across financial services, technology, energy, and government.
KPMG China
Beijing, China
KPMG China is one of China's largest Big Four firms, providing audit, assurance, and advisory services with expertise in Chinese regulatory compliance.
KPMG India
Mumbai, India
KPMG India is a Big Four professional services firm providing SOC 2, ISO 27001, DPDPA, and enterprise risk advisory services to India's largest organizations across financial services, technology, and government sectors.
KPMG Lower Gulf
Dubai, UAE
KPMG Lower Gulf is KPMG's UAE and Oman practice, providing Big Four audit, assurance, tax, and advisory services across the Gulf region.
KPMG Singapore
Singapore
KPMG Singapore is KPMG's ASEAN hub, providing Big Four audit, assurance, tax, and advisory services with strong regulatory and compliance expertise.
Kroll
New York, New York
Kroll is a global risk and financial advisory firm providing cybersecurity, compliance, and investigation services with deep expertise in digital forensics.
Kroll (UK)
London, United Kingdom
Kroll UK is a global risk advisory firm offering ISO 27001, SOC 2, PCI DSS, and enterprise-grade compliance assessments.
Kudelski Security
Lausanne, Switzerland
Kudelski Security is a Swiss cybersecurity firm offering ISO 27001, SOC 2, and PCI DSS assessments globally.
LRQA
London, United Kingdom
LRQA is a global assurance and certification provider specializing in ISO 27001, ISO 22301, cybersecurity, and management system certifications worldwide.
LTIMindtree Cybersecurity
Mumbai, India
LTIMindtree Cybersecurity offers enterprise-grade ISO 27001, SOC 2, and PCI DSS compliance services.
Mandiant Germany
Munich, Germany
Mandiant Germany offers ISO 27001, BSI C5, and NIS2 compliance for enterprise clients.
Mazars
Paris, France
Mazars is an international audit, tax, and advisory firm operating as an integrated partnership across 95+ countries with 47,000+ professionals.
mnemonic AS
Oslo, Norway
mnemonic is Norway's largest cybersecurity firm offering ISO 27001, SOC 2, and NIS2 compliance assessments.
NCC Group (US)
New York, NY
NCC Group is a global cybersecurity consultancy offering SOC 2, ISO 27001, PCI DSS, and FedRAMP assessments.
Nixu Oyj
Helsinki, Finland
Nixu Oyj is a leading Nordic cybersecurity firm offering ISO 27001, SOC 2, NIS2, and GDPR compliance assessments.
Optiv Security
Denver, CO
Optiv Security is one of the largest cybersecurity solutions firms offering SOC 2, ISO 27001, HITRUST, and FedRAMP.
PricewaterhouseCoopers (PwC)
London, United Kingdom
PwC is one of the Big Four professional services firms, providing audit, assurance, tax, and consulting services to major organizations in 152 countries.
Protiviti
Menlo Park, California
Protiviti is a global consulting firm specializing in internal audit, risk management, and compliance with 9,000+ professionals across 25+ countries.
PwC Aarata LLC
Tokyo, Japan
PwC Aarata (PwC Japan) is a Big Four audit firm providing SOC 2, ISO 27001, APPI, ISMAP, and enterprise risk advisory services to Japan's leading corporations across financial services, technology, and manufacturing.
PwC Australia
Sydney, Australia
PwC Australia is one of Australia's largest professional services firms, providing Big Four audit, assurance, and cybersecurity services across Oceania.
PwC Canada
Toronto, Canada
PwC Canada is a Big Four professional services firm providing SOC 2, ISO 27001, PIPEDA, SOX, and enterprise risk advisory services to Canada's largest organizations across financial services, technology, energy, and government.
PwC China
Shanghai, China
PwC China is the largest Big Four firm in China, providing audit, assurance, and advisory services with deep expertise in Chinese regulatory compliance.
PwC France
Paris, France
PwC France is a Big Four professional services firm providing ISO 27001, GDPR, HDS, SOC 2, and enterprise risk advisory services to French enterprises across financial services, technology, healthcare, and government.
PwC Germany
Frankfurt, Germany
PwC Germany is a Big Four professional services firm providing ISO 27001, C5, TISAX, SOC 2, and GDPR compliance services to German enterprises across automotive, manufacturing, technology, and financial services.
PwC India
Mumbai, India
PwC India is a Big Four professional services firm providing SOC 2, ISO 27001, DPDPA, SOX, and enterprise risk advisory services to India's largest corporations and multinational subsidiaries.
PwC Middle East
Dubai, UAE
PwC Middle East is a Big Four professional services firm providing SOC 2, ISO 27001, NESA, PDPL, and enterprise risk advisory services across the UAE, Saudi Arabia, and the broader Middle East region.
PwC Singapore
Singapore
PwC Singapore is a Big Four professional services firm providing SOC 2, ISO 27001, PDPA, MTCS, and enterprise risk advisory services to financial institutions, technology companies, and government agencies in Singapore and the APAC region.
Reply Cyber Security
Turin, Italy
Reply Cyber Security is a European IT consultancy offering ISO 27001, SOC 2, and NIS2 compliance for enterprises.
RSM International
London, United Kingdom
RSM International is the sixth-largest global professional services network, delivering audit, tax, and consulting services across 120+ countries.
RSM US LLP
Chicago, IL
RSM US LLP is the fifth-largest US CPA firm and a leading mid-market auditor offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, FedRAMP, and CMMC services nationwide.
Schellman & Company
Tampa, Florida
Schellman is a leading US compliance audit firm specializing in SOC 2, ISO 27001, FedRAMP, HITRUST, and PCI DSS assessments for technology companies.
secunet Security Networks
Essen, Germany
secunet is Germany's leading IT security company offering ISO 27001, BSI C5, and NIS2 compliance for enterprises.
SGS
Geneva, Switzerland
SGS is the world's largest testing, inspection, and certification company, providing ISO 27001 and management system certifications across 140+ countries.
SISA Information Security
Bangalore, India
SISA is India's largest PCI QSA company offering PCI DSS, ISO 27001, and SOC 2 assessments globally.
Sogeti Cybersecurity
Paris, France
Sogeti Cybersecurity is a Capgemini subsidiary offering enterprise-grade compliance services across Europe.
Stroz Friedberg (Aon)
New York, NY
Stroz Friedberg (Aon Cyber Solutions) offers SOC 2, ISO 27001, and cyber risk compliance services.
TCS (Tata Consultancy Services)
Mumbai, India
TCS is India's largest IT services company offering cybersecurity, compliance audit, and risk advisory services to enterprises across 46 countries worldwide.
TCS Cybersecurity
Mumbai, India
TCS Cybersecurity provides enterprise-grade compliance services across SOC, ISO 27001, PCI DSS, and more.
Tech Mahindra Cybersecurity
Pune, India
Tech Mahindra Cybersecurity offers ISO 27001, SOC 2, and PCI DSS compliance for enterprises globally.
Truesec
Stockholm, Sweden
Truesec is a leading Swedish cybersecurity firm offering ISO 27001, SOC 2, and NIS2 compliance assessments.
Trustwave
Chicago, IL
Trustwave is a global cybersecurity firm specializing in PCI DSS, SOC 2, and ISO 27001 assessments.
TUV Rheinland
Cologne, Germany
TUV Rheinland is a world-leading German certification and testing body providing ISO 27001, TISAX, and management system certifications across 60+ countries.
TUV SUD
Munich, Germany
TUV SUD is a leading German testing, inspection, and certification body providing ISO 27001, TISAX, and management system certifications across 50+ countries.
Wavestone
Paris, France
Wavestone is a French management and technology consultancy offering ISO 27001, NIS2, and GDPR compliance.
Wipro Cybersecurity
Bangalore, India
Wipro Cybersecurity offers enterprise-grade compliance services across ISO 27001, SOC, and PCI DSS.
WithSecure
Helsinki, Finland
WithSecure (formerly F-Secure Business) is a Finnish cybersecurity firm offering ISO 27001 and NIS2 compliance.
A1 Digital Austria
Vienna, Austria
A1 Digital Austria offers ISO 27001, NIS2, and TISAX compliance assessments for Austrian enterprises.
ACA Group
New York, NY
ACA Group is a global GRC advisory firm whose ACA Aponix division provides cybersecurity assessments and compliance support for financial services.
Accredia Accredited Certification Bodies
Rome, Italy
Accredia is Italy's national accreditation body, accrediting ISO certification bodies to deliver ISO 27001, ISO 27701, and management system certifications in the Italian market.
Acuity Risk Management
London, United Kingdom
Acuity Risk Management offers ISO 27001, SOC 2, and NIS2 compliance assessments with integrated risk management.
Advens
Lille, France
Advens is a French cybersecurity firm offering ISO 27001, HDS, and NIS2 compliance assessments.
AENOR
Madrid, Spain
AENOR is Spain's national standards and certification body offering ISO 27001, ISO 27701, ENS, and management system certifications across Spain and Latin America.
AFNOR Certification
Saint-Denis, France
AFNOR Certification is France's national standards body and a COFRAC-accredited ISO certification body offering ISO 27001, ISO 27701, and HDS audits.
Alvarez & Marsal
New York, NY
Alvarez & Marsal is a global professional services firm founded in 1983 in New York, offering cyber risk, resilience, and compliance advisory services.
AMARU
Wellington, New Zealand
AMARU is a New Zealand cybersecurity firm offering ISO 27001, SOC 2, and NIST compliance services for ANZ technology companies expanding globally.
APCER
Porto, Portugal
APCER is a Portuguese ISO certification body offering ISO 27001, ISO 27701, and management system certifications across Portugal, Brazil, and Lusophone Africa.
Aprio
Atlanta, Georgia
Aprio is a top-25 US CPA and advisory firm offering SOC 2, ISO 27001, HITRUST, and cybersecurity assessments with strong technology sector expertise.
Armanino
San Ramon, California
Armanino is a top-25 US CPA firm based in California with strong technology sector focus, offering SOC 2, ISO 27001, and cybersecurity assessments.
Assent Risk Management
London, UK
Assent Risk Management is a London-based compliance firm specializing in SOC 2, ISO 27001, and GDPR assessments for UK and European technology companies.
Astra Security
New Delhi, India
Astra Security is a CERT-IN empanelled, NASSCOM-awarded cybersecurity firm in New Delhi offering automated and manual penetration testing alongside compliance services.
Aujas Cybersecurity
Bangalore, India
Aujas Cybersecurity is a Bangalore-based firm offering ISO 27001, SOC 2, and PCI DSS compliance services.
BDO Australia
Melbourne, Australia
BDO Australia is a leading mid-market audit and advisory firm providing SOC 2, ISO 27001, Essential Eight, and Privacy Act compliance services to Australian businesses across technology, financial services, and healthcare.
BDO France
Paris, France
BDO France offers SOC, ISO 27001, and GDPR compliance audit services.
BDO Germany
Hamburg, Germany
BDO Germany is a leading mid-market audit and advisory firm providing ISO 27001, C5, TISAX, SOC 2, and GDPR compliance services to German mid-market companies and the Mittelstand.
BDO Ireland
Dublin, Ireland
BDO Ireland offers SOC, ISO 27001, and GDPR compliance audit services.
BDO Japan
Tokyo, Japan
BDO Japan is a mid-market audit and advisory firm providing ISO 27001, SOC 2, APPI, and P-Mark compliance services to mid-market companies and foreign-invested businesses operating in Japan.
BDO Singapore
Singapore
BDO Singapore is a mid-market audit and advisory firm providing SOC 2, ISO 27001, PDPA, and MTCS compliance services to SMEs, mid-market firms, and listed companies in Singapore.
BDO UAE
Dubai, UAE
BDO UAE is BDO International's member firm in the UAE, providing audit, tax, and advisory services with strong compliance capabilities for Gulf businesses.
BDO UK LLP
London, United Kingdom
BDO UK is one of the UK's largest accountancy and business advisory firms, providing SOC 2, ISO 27001, GDPR, and Cyber Essentials audit services to mid-market and enterprise organizations.
BPM LLP
San Jose, CA
BPM LLP is a leading West Coast accounting firm providing SOC 2, ISO 27001, and HIPAA audit services to technology companies and mid-market organizations in Silicon Valley and beyond.
Brightsight BV
Delft, Netherlands
Brightsight is a Dutch security evaluation lab specializing in PCI, Common Criteria, and hardware security assessments.
Brisk InfoSec
Chennai, Tamil Nadu, India
Brisk InfoSec is a CREST-accredited, CERT-IN empanelled cybersecurity firm in Chennai with 100% ISO 27001 audit success rate.
BSR & Associates LLP
Mumbai, India
BSR & Associates LLP is KPMG India's audit affiliate, offering SOC 1, SOC 2, ISO 27001, and compliance audit services for enterprise and mid-market clients.
BSR & Co (KPMG India affiliate)
Mumbai, India
BSR & Co is KPMG's affiliate firm in India, providing audit, assurance, tax, and advisory services with Big Four methodology to Indian enterprises.
Bulletproof
London, UK
Bulletproof is a London-based cybersecurity firm offering ISO 27001, SOC 2, PCI DSS, and GDPR compliance services alongside CREST-certified penetration testing.
Canadian Cyber
Toronto, ON, Canada
Canadian Cyber is a Toronto-based cybersecurity and compliance firm specializing in ISO 27001, SOC 2, and privacy assessments for Canadian technology companies.
CERT-In Empaneled Auditors
New Delhi, India
CERT-In empaneled auditors are organizations authorized by India's Computer Emergency Response Team to conduct cybersecurity audits for regulatory compliance.
Certification Europe
Dublin, Ireland
Certification Europe is an Irish-based accredited certification body specializing in ISO 27001 and management system certifications across Europe.
CertPro
Singapore
CertPro is a Singapore-headquartered compliance firm offering SOC 2, ISO 27001, and PCI DSS certifications across Asia-Pacific, with offices in Hong Kong, Toronto, and London.
CGI Sweden
Stockholm, Sweden
CGI Sweden offers ISO 27001, SOC 2, and NIS2 compliance assessments in the Nordics.