Policy+ComplianceP+C
Get help →
Home›Directory›SOC 2 auditors

Directory

SOC 2 auditors.

A SOC 2 report can only be issued by a licensed CPA firm. Readiness consultants and automation platforms prepare you for it; they cannot sign it.

Share
Sponsored
Find
help
Consultants  Assessors  Quotes
Matched3 quotesread by a human
The Shortlist is Yoursfrom this directory
Shortlist the Modern WaySOC 2 auditors
01
Verified listings first
Unverified ones follow, labeled
02
Published prices where they exist
“Quote only” where we confirmed it, “Not published” where we have not
03
Up to three quotes, one form
Firms don’t see you until you choose
House ad. This slot is open to firms listed for this page. Get help →Advertise here →
Showing 8
CoalfireWestminster, CO, USANot yet verified
What they do
Assessor: FedRAMP 3PAO, SOC 2, PCI QSA, CMMC C3PAO
Who they help
Cloud providers and government contractors that need an accredited assessment, not a policy program. Listed because buyers confuse assessors with consultants.
Standards
FedRAMPStateRAMPSOC 2PCI DSSCMMC
Pricing
Not published
Website ↗Claim this listing →

Cannot also be your implementation consultant for the same certification.

TevoraIrvine, CA, USANot yet verified
What they do
Enterprise multi-framework
Who they help
Tevora is an enterprise multi-framework based in Irvine, CA, USA. Services, standards and pricing appear once the firm confirms its listing.
Pricing
Not published
Website ↗Claim this listing →
TruvantisSan Francisco, CA, USANot yet verified
What they do
Full-service GRC + vCISO
Who they help
Truvantis is a full-service GRC + vCISO based in San Francisco, CA, USA. Services, standards and pricing appear once the firm confirms its listing.
Pricing
Not published
Website ↗Claim this listing →
Control and FunctionDenver, CO, USANot yet verified
What they do
VCISO / ISO 27001 consultancy
Who they help
Control and Function is a vCISO / ISO 27001 consultancy based in Denver, CO, USA. Services, standards and pricing appear once the firm confirms its listing.
Pricing
Not published
Claim this listing →
Securis360Pittsburgh, PA, USANot yet verified
What they do
VCISO / ISO 27001 consultancy
Who they help
Securis360 is a vCISO / ISO 27001 consultancy based in Pittsburgh, PA, USA. Services, standards and pricing appear once the firm confirms its listing.
Pricing
Not published
Claim this listing →
vCISO.comPittsburgh, PA, USANot yet verified
What they do
VCISO / ISO 27001 consultancy
Who they help
vCISO.com is a vCISO / ISO 27001 consultancy based in Pittsburgh, PA, USA. Services, standards and pricing appear once the firm confirms its listing.
Pricing
Not published
Claim this listing →
IsecurionBangalore, IndiaNot yet verified
What they do
ISO 27001 / SOC 2
Who they help
Isecurion is an ISO 27001 / SOC 2 based in Bangalore, India. Services, standards and pricing appear once the firm confirms its listing.
Pricing
Not published
Website ↗Claim this listing →
Illume IntelligenceCalicut, Kerala, IndiaNot yet verified
What they do
Pentest + SOC 2 readiness
Who they help
Illume Intelligence is a pentest + SOC 2 readiness based in Calicut, Kerala, India. Services, standards and pricing appear once the firm confirms its listing.
Pricing
Not published
Claim this listing →

Need a hand implementing it?

Find a Consultant for SOC 2

Tell us what you need done and we will point you to firms that do this work. Your details go to a firm only when you choose it.

Get help →Consultants: advertise here

From the publisher

Keep Your Written Policies in One Place

Whatever you are working toward, AllyMatter gets your policies approved, keeps every version and records who has read each one.

See how AllyMatter works ↗From $29/mo, 20 editors, unlimited staff

About this data

Pages on this site are compiled with AI from two or more linked sources, rewritten in our words, and reviewed by people in stages. Each record shows its stage and date. Nothing here is legal, audit or tax advice, and policyandcompliance.com accepts no responsibility for errors or for decisions made on it. Read the source, then decide.
How we compile and verify →

Think something is wrong?

corrections@policyandcompliance.com
Tell us the page and what you found. We check it against the source and fix it.
Corrections log →

Want to advertise here?

ads@policyandcompliance.com
A primary ad and a secondary placement, flat fee. Buying one changes nothing else on the page.