Compliance auditors
Firms that appear in the public auditor directories we currently observe, Drata and Vanta, compiled here from those public sources. Other platforms' directories aren't included yet; we'll say so plainly if that changes. Facts only: frameworks and services as listed, and which directories each firm appears in. You choose your own auditor; it isn't tied to any platform.
28 firms · alphabetical
A-LIGN
Listed · public sourcesA-LIGN is listed as an Audit Partner in the Vanta directory (observed Jul 2026), founded 2009. Listed for SOC 2 attestation, SOC 1 attestation, ISO 27001 certification and HITRUST assessment (Type 2) across GDPR and CMMC; the firm also offers penetration testing, readiness & implementation and vCISO & advisory.
CMMCFedRAMPGDPRHIPAAHITRUSTISO 27001ISO 42001PCI DSSSOC 1SOC 2
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
Advantage Partners
Listed · public sourcesAdvantage Partners is listed as an Audit Partner in the Vanta directory (observed Jul 2026); the firm states it is a CPA firm. Listed for SOC 2 attestation, ISO 27001 certification, HITRUST assessment and HIPAA assessment (Type 1 and Type 2) across CMMC; the firm also offers penetration testing, readiness & implementation and vCISO & advisory.
CMMCHIPAAHITRUSTISO 27001SOC 2
Vanta
Appears in Vanta auditor directory · observed Jul 2026
Aprio
Listed · public sourcesAprio is listed as an Audit Partner in the Vanta directory (observed Jul 2026). Listed for SOC 2 attestation (Type 2); the firm also offers vCISO & advisory.
SOC 2
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
Armanino
Listed · public sourcesArmanino is listed as an Audit Partner in the Vanta directory (observed Jul 2026).
HITRUSTPCI DSSSOC 1
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
AssurancePoint
Listed · public sourcesAssurancePoint is listed as an Audit Partner in the Vanta directory (observed Jul 2026). Listed for SOC 2 attestation, ISO 27001 certification and audit & assurance (Type 1); the firm also offers readiness & implementation.
ISO 27001SOC 2
Vanta
Appears in Vanta auditor directory · observed Jul 2026
BARR Advisory
Listed · public sourcesBARR Advisory is listed as an Audit Partner in the Vanta directory (observed Jul 2026); the firm states it is a CPA firm. Listed for SOC 2 attestation, ISO 27001 certification, HITRUST assessment and PCI DSS assessment (Type 1) across CMMC; the firm also offers penetration testing, readiness & implementation and vCISO & advisory.
CMMCFedRAMPHIPAAHITRUSTISO 27001PCI DSSSOC 2
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
BD Emerson CPA
Listed · public sourcesBD Emerson CPA is listed as an Audit Partner in the Vanta directory (observed Jul 2026). Listed for SOC 2 attestation, SOC 1 attestation, ISO 27001 certification and PCI DSS assessment (Type 1 and Type 2) across GDPR and CMMC; the firm also offers penetration testing, readiness & implementation and vCISO & advisory.
CMMCFedRAMPGDPRHIPAAISO 27001ISO 42001PCI DSSSOC 1SOC 2
Vanta
Appears in Vanta auditor directory · observed Jul 2026
Boulay
Listed · public sourcesBoulay is listed as an Audit Partner in the Vanta directory (observed Jul 2026); the firm states it is a CPA firm, founded 1934. Listed for SOC 2 attestation and ISO 27001 certification; the firm also offers vCISO & advisory.
ISO 27001SOC 2
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
Cacilian LLC, A Prescient Security Company
Listed · public sourcesCacilian LLC, A Prescient Security Company is listed as an Audit Partner in the Vanta directory (observed Jul 2026).
Vanta
Appears in Vanta auditor directory · observed Jul 2026
CBIZ
Listed · public sourcesCBIZ is listed as an Audit Partner in the Vanta directory (observed Jul 2026).
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
Coalfire
Listed · public sourcesCoalfire is listed as an Audit Partner in the Vanta directory (observed Jul 2026); the firm states it is a CPA firm. Listed for PCI DSS assessment across CMMC; the firm also offers penetration testing and vCISO & advisory.
CMMCPCI DSS
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
Consilium Labs
Listed · public sourcesConsilium Labs is listed as an Audit Partner in the Vanta directory (observed Jul 2026); the firm states it is a CPA firm. Listed for SOC 2 attestation, ISO 27001 certification, audit & assurance and PCI DSS assessment (Type 1 and Type 2) across GDPR and CMMC; the firm also offers penetration testing, readiness & implementation and vCISO & advisory.
CMMCFedRAMPGDPRHIPAAISO 27001ISO 42001PCI DSSSOC 2SOC 3
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
ControlCase
Listed · public sourcesControlCase is listed as an Audit Partner in the Vanta directory (observed Jul 2026). Listed for SOC 2 attestation, SOC 1 attestation, ISO 27001 certification and HITRUST assessment across GDPR and CMMC; the firm also offers penetration testing and readiness & implementation.
CMMCFedRAMPGDPRHIPAAHITRUSTISO 27001PCI DSSSOC 1SOC 2
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
Dansa D'Arata Soucia
Listed · public sourcesDansa D'Arata Soucia is listed as an Audit Partner in the Vanta directory (observed Jul 2026). Listed for SOC 2 attestation and audit & assurance (Type 2); the firm also offers readiness & implementation and vCISO & advisory.
SOC 2
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
Frank, Rimerman + Co. LLP
Listed · public sourcesFrank, Rimerman + Co. LLP is listed as an Audit Partner in the Vanta directory (observed Jul 2026).
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
Frazier & Deeter
Listed · public sourcesFrazier & Deeter is listed as an Audit Partner in the Vanta directory (observed Jul 2026); the firm states it is a CPA firm.
Vanta
Appears in Vanta auditor directory · observed Jul 2026
Insight Assurance
Listed · public sourcesInsight Assurance is listed as an Audit Partner in the Vanta directory (observed Jul 2026). Listed for SOC 2 attestation, SOC 1 attestation, ISO 27001 certification and HITRUST assessment (Type 1 and Type 2) across GDPR and CMMC; the firm also offers penetration testing and readiness & implementation.
CMMCFedRAMPGDPRHIPAAHITRUSTISO 27001PCI DSSSOC 1SOC 2
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
Johanson Group
Listed · public sourcesJohanson Group is listed as an Audit Partner in the Vanta directory (observed Jul 2026); the firm states it is a CPA firm. Listed for SOC 2 attestation, SOC 1 attestation, ISO 27001 certification and PCI DSS assessment across GDPR; the firm also offers readiness & implementation.
GDPRHIPAAISO 27001PCI DSSSOC 1SOC 2SOC 3
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
Mastermind
Listed · public sourcesMastermind is listed as an Audit Partner in the Vanta directory (observed Jul 2026). Listed for SOC 2 attestation.
SOC 2
Vanta
Appears in Vanta auditor directory · observed Jul 2026
MHM CPA
Listed · public sourcesMHM CPA is listed as an Audit Partner in the Vanta directory (observed Jul 2026). Listed for SOC 2 attestation, SOC 1 attestation, ISO 27001 certification and ISO 42001 readiness (Type 1 and Type 2); the firm also offers readiness & implementation.
ISO 27001ISO 42001SOC 1SOC 2SOC 3
Vanta
Appears in Vanta auditor directory · observed Jul 2026
MJD Advisors
Listed · public sourcesMJD Advisors is listed as an Audit Partner in the Vanta directory (observed Jul 2026); the firm states it is a CPA firm, founded 2021. Listed for SOC 2 attestation, SOC 1 attestation, ISO 27001 certification and HIPAA assessment; the firm also offers readiness & implementation.
HIPAAISO 27001ISO 42001SOC 1SOC 2
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
Moss Adams
Listed · public sourcesMoss Adams is listed as an Audit Partner in the Vanta directory (observed Jul 2026).
CMMC
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
Oread Risk and Advisory
Listed · public sourcesOread Risk and Advisory is listed as an Audit Partner in the Vanta directory (observed Jul 2026). Listed for SOC 2 attestation, audit & assurance and HIPAA assessment; the firm also offers vCISO & advisory.
HIPAASOC 2
Vanta
Appears in Vanta auditor directory · observed Jul 2026
Pease Bell
Listed · public sourcesPease Bell is listed as an Audit Partner in the Vanta directory (observed Jul 2026).
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
RS Assurance & Advisory (RSAA)
Listed · public sourcesRS Assurance & Advisory (RSAA) is listed as an Audit Partner in the Vanta directory (observed Jul 2026). Listed for SOC 2 attestation, SOC 1 attestation, ISO 27001 certification and HIPAA assessment (Type 1 and Type 2) across CMMC; the firm also offers penetration testing, readiness & implementation and vCISO & advisory.
CMMCHIPAAISO 27001SOC 1SOC 2SOC 3
Vanta
Appears in Vanta auditor directory · observed Jul 2026
Schellman
Listed · public sourcesSchellman is listed as an Audit Partner in the Vanta directory (observed Jul 2026); the firm states it is a CPA firm. Listed for SOC 2 attestation, SOC 1 attestation, ISO 27001 certification and HITRUST assessment (Type 1 and Type 2) across GDPR and CMMC; the firm also offers penetration testing and readiness & implementation.
CMMCFedRAMPGDPRHIPAAHITRUSTISO 27001PCI DSSSOC 1SOC 2SOC 3
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
Sensiba LLP
Listed · public sourcesSensiba LLP is listed as an Audit Partner in the Vanta directory (observed Jul 2026). Listed for SOC 2 attestation and audit & assurance; the firm also offers readiness & implementation and vCISO & advisory.
SOC 2
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
Tempo Audits
Listed · public sourcesTempo Audits is listed as an Audit Partner in the Vanta directory (observed Jul 2026); the firm states it is a CPA firm. Listed for SOC 2 attestation, ISO 27001 certification and audit & assurance (Type 1 and Type 2); the firm also offers readiness & implementation.
ISO 27001SOC 2
DrataVanta
Appears in Drata and Vanta auditor directories · observed Jul 2026
No firms match those filters.
Not sure which firm fits, or what you should be paying?
Tell us where you are. You’d be contacting GRC Migrate, the independent advisor, not any firm on this page. We’ll give you a straight read on the shortlist, what buyers actually pay for work like yours, and, where a vetted partner fits your need, an introduction if you want one.
Get an independent read →Independent by structure: nothing from platform vendors, nothing from firms to be listed. We earn a flat referral fee only when a vetted partner accepts an introduction, disclosed plainly.