Auditor Directory
HIPAA Auditors
Health Insurance Portability and Accountability Act of 1996
Browse accredited firms offering HIPAA audits. Filter by location, size, and budget.
224 firms — interactive filtering loads below.
A-LIGN
Tampa, FL
A-LIGN is one of the largest and most recognized compliance audit firms in the United States. Profile includes pricing, framework coverage, reviews, and engagement process.
Baker Tilly
Chicago, Illinois
Baker Tilly is a top-10 global advisory CPA firm network with 43,000+ professionals in 141 countries, serving mid-market and growth companies.
BDO Canada
Toronto, ON
BDO Canada is a leading national CPA firm offering SOC, SOX, ISO 27001, and PIPEDA compliance audits.
BDO International
Brussels, Belgium
BDO is the fifth-largest professional services network globally, providing audit, tax, and advisory services through member firms in over 160 countries.
Citrin Cooperman
New York, NY
Citrin Cooperman is a Top 25 CPA firm offering comprehensive SOC, SOX, HIPAA, and ISO 27001 audit services.
CliftonLarsonAllen
Minneapolis, MN
CliftonLarsonAllen is a Top 10 CPA firm offering SOC, SOX, HIPAA, FedRAMP, and ISO 27001 audits.
CliftonLarsonAllen LLP
Minneapolis, MN
CliftonLarsonAllen (CLA) is a top-eight US CPA firm headquartered in Minneapolis, offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, and CMMC audit services nationally.
Coalfire
Westminster, Colorado
Coalfire is a leading US cybersecurity advisory and audit firm specializing in FedRAMP, SOC 2, PCI DSS, HITRUST, and CMMC for cloud and technology companies.
CohnReznick Advisory
New York, NY
CohnReznick Advisory is a Top 25 CPA firm offering SOC, SOX, and FedRAMP compliance audits.
Crowe Global
New York, United States
Crowe Global is a top-10 global accounting network providing audit, tax, and advisory services through member firms in over 145 countries worldwide.
Deloitte
London, United Kingdom
Deloitte is the world's largest professional services firm, offering audit, assurance, tax, and advisory services across 150+ countries worldwide.
Eide Bailly
Fargo, ND
Eide Bailly is a Top 25 CPA firm offering SOC, SOX, HIPAA, and ISO 27001 audit services.
Ernst & Young (EY)
London, United Kingdom
EY is a Big Four professional services firm providing audit, assurance, tax, consulting, and strategy services across more than 150 countries worldwide.
Forvis Mazars (US)
Springfield, Missouri
Forvis Mazars is a top-10 US professional services firm formed from the merger of BKD and Dixon Hughes Goodman, now part of the Mazars global network.
Grant Thornton
London, United Kingdom
Grant Thornton is a leading global professional services network providing audit, tax, and advisory services through member firms in over 140 countries.
Grant Thornton LLP
Chicago, IL
Grant Thornton US is a top-seven national CPA firm offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, FedRAMP, and CMMC audit services for mid-market and enterprise companies.
GuidePoint Security
Herndon, VA
GuidePoint Security offers SOC 2, ISO 27001, FedRAMP, and CMMC compliance assessments.
HCLTech Cybersecurity
Noida, India
HCLTech Cybersecurity provides enterprise compliance services across ISO 27001, SOC, PCI DSS, and NIST.
KPMG
Amstelveen, Netherlands
KPMG is a Big Four professional services firm providing audit, tax, and advisory services through a global network spanning 143 countries and territories.
Kroll
New York, New York
Kroll is a global risk and financial advisory firm providing cybersecurity, compliance, and investigation services with deep expertise in digital forensics.
LTIMindtree Cybersecurity
Mumbai, India
LTIMindtree Cybersecurity offers enterprise-grade ISO 27001, SOC 2, and PCI DSS compliance services.
Mazars
Paris, France
Mazars is an international audit, tax, and advisory firm operating as an integrated partnership across 95+ countries with 47,000+ professionals.
NCC Group (US)
New York, NY
NCC Group is a global cybersecurity consultancy offering SOC 2, ISO 27001, PCI DSS, and FedRAMP assessments.
Optiv Security
Denver, CO
Optiv Security is one of the largest cybersecurity solutions firms offering SOC 2, ISO 27001, HITRUST, and FedRAMP.
PricewaterhouseCoopers (PwC)
London, United Kingdom
PwC is one of the Big Four professional services firms, providing audit, assurance, tax, and consulting services to major organizations in 152 countries.
Protiviti
Menlo Park, California
Protiviti is a global consulting firm specializing in internal audit, risk management, and compliance with 9,000+ professionals across 25+ countries.
PwC Australia
Sydney, Australia
PwC Australia is one of Australia's largest professional services firms, providing Big Four audit, assurance, and cybersecurity services across Oceania.
RSM International
London, United Kingdom
RSM International is the sixth-largest global professional services network, delivering audit, tax, and consulting services across 120+ countries.
RSM US LLP
Chicago, IL
RSM US LLP is the fifth-largest US CPA firm and a leading mid-market auditor offering SOC 1, SOC 2, ISO 27001, HIPAA, HITRUST, FedRAMP, and CMMC services nationwide.
Schellman & Company
Tampa, Florida
Schellman is a leading US compliance audit firm specializing in SOC 2, ISO 27001, FedRAMP, HITRUST, and PCI DSS assessments for technology companies.
SISA Information Security
Bangalore, India
SISA is India's largest PCI QSA company offering PCI DSS, ISO 27001, and SOC 2 assessments globally.
Stroz Friedberg (Aon)
New York, NY
Stroz Friedberg (Aon Cyber Solutions) offers SOC 2, ISO 27001, and cyber risk compliance services.
TCS (Tata Consultancy Services)
Mumbai, India
TCS is India's largest IT services company offering cybersecurity, compliance audit, and risk advisory services to enterprises across 46 countries worldwide.
TCS Cybersecurity
Mumbai, India
TCS Cybersecurity provides enterprise-grade compliance services across SOC, ISO 27001, PCI DSS, and more.
Tech Mahindra Cybersecurity
Pune, India
Tech Mahindra Cybersecurity offers ISO 27001, SOC 2, and PCI DSS compliance for enterprises globally.
Trustwave
Chicago, IL
Trustwave is a global cybersecurity firm specializing in PCI DSS, SOC 2, and ISO 27001 assessments.
Wipro Cybersecurity
Bangalore, India
Wipro Cybersecurity offers enterprise-grade compliance services across ISO 27001, SOC, and PCI DSS.
24By7Security
Coral Springs, FL
24By7Security is a Coral Springs, FL cybersecurity consultancy and PCI QSA specializing in HIPAA, PCI DSS, SOC 2, and CMMC compliance.
360 Advanced
Nashville, TN
360 Advanced is a US-based compliance audit firm offering SOC 2, PCI DSS, HITRUST, ISO 27001, and HIPAA audits with a focus on technology and healthcare companies.
AAFCPAs
Westborough, MA
AAFCPAs is a Massachusetts CPA firm founded in 1973 providing SOC 1, SOC 2, HIPAA, and IT audit services to service organizations.
AARC-360
Atlanta, GA
AARC-360 is a PCAOB-registered Atlanta CPA firm delivering SOC 1, SOC 2, ISO 27001, HIPAA, and PCI DSS assurance and compliance services.
Abacode
Tampa, FL
Abacode is a Tampa-based managed cybersecurity and compliance provider aligning clients to CMMC, SOC 2, ISO 27001, and HIPAA frameworks.
AMARU
Wellington, New Zealand
AMARU is a New Zealand cybersecurity firm offering ISO 27001, SOC 2, and NIST compliance services for ANZ technology companies expanding globally.
Anchin Block & Anchin LLP
New York, NY
Anchin Block & Anchin is a New York-based CPA firm offering SOC 1, SOC 2, HIPAA, and cybersecurity audit services for mid-market companies.
Aprio
Atlanta, Georgia
Aprio is a top-25 US CPA and advisory firm offering SOC 2, ISO 27001, HITRUST, and cybersecurity assessments with strong technology sector expertise.
Arete Advisors
Nashville, TN
Arete Advisors is a healthcare compliance specialist based in Nashville, focusing on HIPAA, HITRUST, and health-tech security assessments.
Ariente Advisors
Boston, MA
Ariente Advisors offers affordable SOC 2, ISO 27001, and PCI DSS assessments for startups.
Armanino
San Ramon, California
Armanino is a top-25 US CPA firm based in California with strong technology sector focus, offering SOC 2, ISO 27001, and cybersecurity assessments.
Aronson LLC
Rockville, MD
Aronson LLC is a Maryland CPA firm offering SOC, SOX, and FedRAMP compliance audits for government contractors.
ASGN Cybersecurity
Glen Allen, VA
ASGN Cybersecurity is a boutique US cybersecurity and compliance firm specializing in SOC 2, FedRAMP, CMMC, and HITRUST assessments for government contractors and technology companies.
AssurancePoint
Atlanta, GA
AssurancePoint is a boutique CPA firm specializing in SOC 2 audits for technology companies. Profile includes pricing, framework coverage, and engagement details.
Assure Professional
Charlotte, NC
Assure Professional, acquired by A-LIGN in 2023, is an audit provider delivering SOC 1, SOC 2, SOC 3, HIPAA, HITRUST, and ISO 27001 assessments.
Astra Security
New Delhi, India
Astra Security is a CERT-IN empanelled, NASSCOM-awarded cybersecurity firm in New Delhi offering automated and manual penetration testing alongside compliance services.
Aujas Cybersecurity
Bangalore, India
Aujas Cybersecurity is a Bangalore-based firm offering ISO 27001, SOC 2, and PCI DSS compliance services.
Avertium
Phoenix, AZ
Avertium is a managed security and compliance firm offering PCI DSS, HIPAA, CMMC, and SOC 2 assessment services from Arizona and Tennessee.
BARR Advisory
Fairway, KS
BARR Advisory is a Kansas-based cybersecurity and compliance firm specializing in SOC 2, HITRUST, FedRAMP, and ISO 27001 audits for cloud-first companies.
Berdon LLP
New York, NY
Berdon LLP is a New York-based CPA firm offering SOC 1, SOC 2, HIPAA, and IT audit services for mid-market real estate and financial services companies.
Berger Toombs
Tucson, AZ
Berger Toombs is a Tucson CPA firm providing SOC and HIPAA audits.
BerryDunn
Portland, ME
BerryDunn is a Portland, Maine-based assurance and consulting firm delivering SOC 1/2, HIPAA, HITRUST, and NIST-based assessments nationwide.
Biovell Compliance
San Diego, CA
Biovell Compliance specializes in healthcare compliance with HIPAA, HITRUST, and ISO 27001 assessments.
BKD CPAs & Advisors
Springfield, MO
BKD CPAs & Advisors is a leading mid-market US CPA firm based in Missouri offering SOC, ISO 27001, HIPAA, and cybersecurity audit services across the central United States.
BKM Sowan Horan
Dallas, TX
BKM Sowan Horan is a Dallas CPA firm offering SOC, SOX, and HIPAA compliance audits.
Blue & Co.
Carmel, IN
Blue & Co. is a Carmel, IN CPA and consulting firm offering SOC 1, SOC 2, HIPAA, and HITRUST compliance services with deep healthcare expertise.
Bonadio Group
Pittsford, NY
The Bonadio Group is a top-50 CPA firm in Pittsford, NY whose information risk practice delivers SOC 1, SOC 2, HIPAA, HITRUST, and PCI DSS audits.
Boulay Group
Minneapolis, MN
Boulay Group is a top-10 Minnesota CPA firm with 300+ professionals offering SOC reporting, HIPAA audits, and Microsoft SSPA assessments.
BPM LLP
San Jose, CA
BPM LLP is a leading West Coast accounting firm providing SOC 2, ISO 27001, and HIPAA audit services to technology companies and mid-market organizations in Silicon Valley and beyond.
BSK Associates
Sacramento, CA
BSK Associates is a Sacramento CPA firm providing SOC and HIPAA compliance audits.
BSR & Co (KPMG India affiliate)
Mumbai, India
BSR & Co is KPMG's affiliate firm in India, providing audit, assurance, tax, and advisory services with Big Four methodology to Indian enterprises.
Caliber Security Partners
Austin, TX
Caliber Security Partners is an Austin-based compliance firm specializing in SOC 2, HITRUST, and PCI DSS assessments.
CampusGuard
Omaha, NE
CampusGuard is a PCI QSA and ASV firm specializing in PCI DSS and HIPAA compliance for higher education, healthcare, and government organizations.
Carr Riggs & Ingram
Enterprise, AL
Carr Riggs & Ingram is a Top 25 CPA firm offering SOC, SOX, and HIPAA compliance audits.
CBIZ
Cleveland, Ohio
CBIZ is a leading US business services company offering audit, tax, insurance, and advisory services through 100+ offices across the United States.
CBT Advisors
Boston, MA
CBT Advisors is a Boston-based CPA firm offering SOC 2, SOC 1, and HIPAA compliance audits for technology and healthcare companies.
CertPro
Singapore
CertPro is a Singapore-headquartered compliance firm offering SOC 2, ISO 27001, and PCI DSS certifications across Asia-Pacific, with offices in Hong Kong, Toronto, and London.
Cherry Bekaert
Richmond, Virginia
Cherry Bekaert is a top-25 US CPA firm providing audit, tax, and advisory services with strong presence in the Southeast and growing national coverage.
Cipher Security
Miami, FL
Cipher Security is a global cybersecurity firm offering SOC 2, ISO 27001, and PCI DSS assessments.
Clark Nuber
Bellevue, WA
Clark Nuber is a Bellevue CPA firm offering SOC, SOX, and HIPAA compliance audits.
ClearDATA
Austin, TX
ClearDATA specializes in healthcare cloud compliance with HIPAA, HITRUST, and SOC 2 assessments.
ClearView Audit Group
Denver, CO
ClearView Audit Group is a Denver CPA firm specializing in efficient SOC 2 and HIPAA audits for SaaS companies.
Clearwater Compliance
Nashville, TN
Clearwater is a Nashville-based healthcare cybersecurity and compliance firm specializing in HIPAA risk analysis, HITRUST, and SOC 2 services.
Coforge Cybersecurity
Noida, India
Coforge Cybersecurity provides ISO 27001, SOC 2, and PCI DSS compliance services globally.
CohnReznick LLP
New York, NY
CohnReznick is a top-20 US accounting firm providing SOC 2, ISO 27001, HIPAA, and financial audit services to mid-market and enterprise clients across technology, financial services, and healthcare.
Compass IT Compliance
Providence, RI
Compass IT Compliance is a Providence-based QSA and HITRUST assessor offering PCI DSS, SOC 2, HIPAA, and penetration testing for financial and healthcare organizations.
Compass IT Compliance
Tampa, FL
Compass IT Compliance is a PCI DSS specialist firm serving retail, healthcare, and hospitality organizations. Profile includes pricing and framework coverage.
ComplianceForge
Scottsdale, Arizona
ComplianceForge provides cybersecurity documentation templates, consulting, and NIST/CMMC/ISO implementation support for organizations building compliance programs.
CompliancePoint
Duluth, GA
CompliancePoint is a HITRUST-authorized assessor in Georgia offering SOC 2, HITRUST, HIPAA, and ISO 27001 audits for healthcare and technology companies.
ControlCase
Fairfax, Virginia
ControlCase is a compliance and cybersecurity firm specializing in PCI DSS, SOC 2, ISO 27001, and HITRUST audits with a unified compliance approach.
ControlCase India
Mumbai, India
ControlCase India offers PCI DSS, ISO 27001, SOC 2, and HITRUST assessments at competitive pricing.
Coretelligent
Westwood, MA
Coretelligent is a Massachusetts-based managed IT provider delivering cybersecurity and compliance services to financial and life sciences firms.
CyberGuard Compliance
Las Vegas, NV
CyberGuard Compliance is a Las Vegas-based, PCAOB-registered CPA firm focused exclusively on SOC, PCI DSS, HITRUST, and HIPAA compliance audits.
CyberGuard360
Orlando, FL
CyberGuard360 provides SOC 2, CMMC, and NIST compliance assessments for SMBs and government contractors.
CyberSapiens
Melbourne, Australia
CyberSapiens is an Australian cybersecurity firm offering SOC 2, ISO 27001, PCI DSS, and HIPAA compliance services for ANZ technology companies.
CyberSecOp
New York, NY
CyberSecOp is a New York-based security consultancy and CMMC RPO delivering SOC 2, ISO 27001, HIPAA, and PCI compliance readiness and advisory services.
Cyient Cybersecurity
Hyderabad, India
Cyient Cybersecurity provides ISO 27001 and SOC 2 compliance for technology and defense sectors.
Dansa D'Arata Soucia LLP
Buffalo, NY
Dansa D'Arata Soucia LLP is a Buffalo, NY full-service CPA firm offering SOC 1, SOC 2, and SOC 3 attestation plus information security consulting.
Daszkal Bolton
Boca Raton, FL
Daszkal Bolton is a South Florida CPA firm providing SOC and HIPAA compliance audit services.
DataLink Networks
Los Angeles, CA
DataLink Networks provides SOC 2, ISO 27001, and PCI DSS compliance assessments in Southern California.
DirectDefense
Englewood, CO
DirectDefense is a Colorado security services firm founded in 2011 offering PCI, CMMC, HIPAA, ISO 27001, and NERC CIP compliance assessments and managed security.
Dixon Hughes Goodman LLP
Charlotte, NC
Dixon Hughes Goodman (DHG) is a leading Southeast US CPA firm offering SOC 1, SOC 2, ISO 27001, and HIPAA compliance audit services for mid-market companies.
Doeren Mayhew
Troy, MI
Doeren Mayhew is a Troy, Michigan CPA firm dating to 1932 offering SOC 1/2 examinations, HIPAA, and NIST-based technology assurance services.
EisnerAmper
New York, New York
EisnerAmper is a top-20 US accounting and advisory firm offering audit, tax, and cybersecurity services with strong presence in the Northeast and nationally.
Elliott Davis
Greenville, SC
Elliott Davis is a Top 40 CPA firm offering SOC, SOX, and HIPAA compliance audits.
eSec Forte Technologies
Gurugram, Haryana, India
eSec Forte is a CMMi Level 3 certified, CERT-IN empanelled cybersecurity firm in Gurugram offering PCI DSS QSA, SOC 2, and ISO 27001 audits.
Fluid Attacks
Bogota, Colombia
Fluid Attacks is a Colombian cybersecurity firm offering ISO 27001, SOC 2, and PCI DSS assessments.
Focal Point Data Risk
Tampa, FL
Focal Point Data Risk offers SOC 2, ISO 27001, HITRUST, and PCI DSS compliance assessments.
Frazier & Deeter
Atlanta, GA
Frazier & Deeter is a Top 75 CPA firm in Atlanta offering comprehensive compliance audit services.
Freed Maxick
Buffalo, NY
Freed Maxick is a regional CPA firm in Buffalo offering SOC, SOX, and HIPAA compliance audits.
Friedman LLP
New York, NY
Friedman LLP is a New York-based CPA firm offering SOC 1, SOC 2, HIPAA, and PCI DSS compliance audits for mid-market companies in the tristate area.
FRSecure
Minnetonka, MN
FRSecure is a Minnetonka, MN information security firm providing risk assessments and compliance readiness for SOC 2, ISO 27001, HIPAA, and PCI DSS.
FTI Consulting
Washington, DC
FTI Consulting is a global expert firm founded in 1982, headquartered in Washington, DC, offering cybersecurity, risk, and regulatory compliance advisory.
Globant Cybersecurity
Buenos Aires, Argentina
Globant Cybersecurity offers ISO 27001, SOC 2, and PCI DSS compliance across the Americas.
Grant Thornton Bharat
New Delhi, India
Grant Thornton Bharat is one of India's largest professional services firms, offering audit, tax, and advisory services including cybersecurity and compliance.
Grassi & Co
New York, NY
Grassi & Co is a New York-based mid-market CPA firm offering SOC 1, SOC 2, HIPAA, and PCI DSS compliance audit services for SMBs and mid-market companies.
Grassi Advisors & Accountants
New York, NY
Grassi is a Top 100 CPA firm in New York offering SOC, SOX, and HIPAA audit services.
GreyCastle Security
Troy, NY
GreyCastle Security is a Troy, NY cybersecurity services firm, now part of DeepSeas, providing risk assessments and ISO 27001, HIPAA, and NIST CSF advisory.
HALOCK Security Labs
Schaumburg, IL
HALOCK Security Labs offers SOC 2, ISO 27001, HITRUST, and PCI DSS compliance assessments.
HBS Group
Memphis, TN
HBS Group is a Memphis CPA firm offering SOC, SOX, and HIPAA compliance audits.
Hexaware Cybersecurity
Mumbai, India
Hexaware Cybersecurity offers ISO 27001 and SOC 2 compliance services.
HLB International
London, United Kingdom
HLB International is a global advisory and accounting network with 40,000+ professionals in member firms spanning 156 countries and territories.
Holbrook & Manter
Columbus, OH
Holbrook & Manter is a century-old Ohio CPA firm highly regarded for SOC reporting with team holding CITP, CISSP, CISA, and ISO 27001 Lead Auditor certifications.