Disclaimer
Last updated: March 14, 2026
Directory is Informational Only
SOC2Scout provides a searchable directory of SOC 2, ISO 27001, HIPAA, and PCI-DSS audit firms to help organizations begin their research. The information displayed — including firm names, locations, certifications, audit types, industries served, and contact details — is compiled from publicly available sources and is provided for informational purposes only.
We make no guarantee that any information on this Site is accurate, current, or complete. Firm details change frequently, and our directory may not reflect the most recent status of any listed firm.
No Endorsement
The appearance of any firm in our directory — whether in standard listings, search results, or featured placements — does not constitute an endorsement, recommendation, or approval by SOC2Scout. We do not certify, audit, or independently verify the qualifications, licensing, reputation, or performance of any listed firm.
Featured firms pay for increased visibility. Featured placement is a commercial arrangement only and does not reflect quality, reliability, or our recommendation.
No Professional Advice
Achieving SOC 2 compliance, ISO 27001 certification, HIPAA compliance, or PCI-DSS certification involves significant technical, legal, and operational considerations. Nothing on this Site — including the Match Wizard results, cost estimates, readiness quiz, or any firm profile content — constitutes professional compliance advice, legal advice, or accounting advice.
Cost estimates provided by our Cost Estimator tool are rough market approximations only. Actual audit costs vary significantly based on your organization's size, complexity, existing controls, scope, and the specific firm you engage. Do not rely on our estimates for budgeting without getting quotes directly from auditors.
Readiness Quiz Limitation
The SOC 2 Readiness Quiz on this Site is an educational self-assessment tool only. It is based on general SOC 2 Trust Services Criteria and is not a substitute for a formal readiness assessment conducted by a qualified auditor. Your quiz result does not indicate whether your organization will pass or fail a SOC 2 audit.
Your Responsibility to Verify
Before engaging any auditor firm found through SOC2Scout, you should independently verify:
- That the firm is currently AICPA-licensed and in good standing (check the AICPA directory at aicpa.org).
- That the firm has experience in your specific industry and scope.
- That contact information is current and the firm is actively accepting new clients.
- References from other organizations the firm has audited.
- The firm's engagement letter, scope definition, and fee structure before signing anything.
No Liability for Auditor Performance
SOC2Scout is not a party to any engagement between you and an auditor firm. We are not responsible for the quality, timeliness, accuracy, or outcome of any audit services you receive from a firm found through our directory. Any disputes regarding audit services are solely between you and the auditor firm.
External Links
Links to auditor firm websites and external resources are provided for convenience. SOC2Scout does not control those sites and is not responsible for their content, accuracy, availability, or privacy practices.
Contact
If you believe any listing contains inaccurate information, or if you represent a firm that wishes to update or remove its listing, contact us at:
Email: [email protected]
Mail: 3801 N Capital of Texas Hwy, Ste E240-3769, Austin, TX 78746