JG
Johanson Group LLP
Unverified Peer ReviewedUnclaimed accountUnited States
SOC 1SOC 2SOC 3ISO 27001HIPAA
0.0(0)
€€€€
Fixed-fee SOC 2 with rapid turnaround.
SaaSFintech
Directory
HIPAA Auditors in North America
14 accredited HIPAA audit firms serving North America on Nomona. HIPAA is US law governing how protected health information is safeguarded. There is no official certificate. Compliance is shown through independent assessment. Typical timeline: HIPAA compliance is continuous. An initial risk analysis and remediation typically take a few weeks to a few months; an independent assessment can then be performed and refreshed periodically, commonly annually.. Typical cost: Independent HIPAA assessment fees vary with scope and the state of your program. Pairing HIPAA with SOC 2 or pursuing HITRUST changes the cost profile; budget for remediation on top of assessment..
PS
Prescient Security
Unverified Peer ReviewedUnclaimed accountNashville, United States
SOC 2ISO 27001ISO 42001HIPAAGDPRPCI DSSCREST
0.0(0)
€€€€
Security-first audits, built by pen testers.
SaaSFintechGovernment
K
KirkpatrickPrice
UnverifiedUnclaimed accountTampa, United States
SOC 1SOC 2ISO 27001HIPAAPCI DSS
0.0(0)
Pricing not publishedMulti-framework CPA and cybersecurity assessment firm
SaaSHealthcareFintech
SL
Sensiba LLP
UnverifiedUnclaimed accountPleasanton, United States
SOC 1SOC 2ISO 27001ISO 27701ISO 42001HIPAA
0.0(0)
Pricing not publishedTop 100 US CPA firm and certified B Corp, fixed-fee SOC 2 and ISO audits
SaaSFintech
W
WithumSmith+Brown
UnverifiedUnclaimed accountPrinceton, United States
SOC 1SOC 2ISO 27001HIPAA
0.0(0)
Pricing not publishedNational top-25 CPA and advisory firm with a SOC audit practice
SaaSFintechHealthcare
A
AARC-360
UnverifiedUnclaimed accountAtlanta, United States
SOC 1SOC 2SOC 3ISO 27001HIPAAPCI DSS
0.0(0)
Pricing not publishedPCAOB-registered CPA firm serving small and mid-sized companies.
SaaSFintech
AB
Anchin Block & Anchin
UnverifiedUnclaimed accountNew York, United States
SOC 1SOC 2HIPAA
0.0(0)
Pricing not publishedNew York CPA firm focused on the mid-market.
SaaSFintechRetail
T
Thoropass
UnverifiedUnclaimed accountNew York, United States
SOC 2ISO 27001HIPAAPCI DSS
0.0(0)
Pricing not publishedGRC platform and CPA audit under a single contract
SaaSFintechHealthcare
ZD
Zero Day CPA
UnverifiedUnclaimed accountTroy, United States
SOC 2HIPAA
0.0(0)
Pricing not publishedSOC 2 and HIPAA audits with flexible delivery for smaller organizations
SaaSHealthcare
A
AAFCPAs
UnverifiedUnclaimed accountWestborough, United States
SOC 1SOC 2HIPAA
0.0(0)
Pricing not publishedIT audit services for service organizations.
SaaSHealthcare
A
A-LIGN
UnverifiedUnclaimed accountTampa, United States
SOC 1HITRUSTFedRAMPSOC 2PCI DSSHIPAAISO 27001
0.0(0)
Pricing not publishedSingle-provider audits across SOC 2, ISO 27001, FedRAMP, HITRUST, and PCI DSS
SaaSFintechHealthcareGovernment
FA
Fine Assurance
Verified Peer ReviewedPittsburgh, United States
SOC 2SOC 1SOC 3ISO 27001ISO 42001HIPAAGDPROther: ISO 27701
0.0(0)
€€€€
Quality-first SOC audits — not checkbox compliance.
SaaSFintechHealthcareAIStartups
Axipro
Readiness PartnerLondon, United Kingdom
SOC 2ISO 27001ISO 27701ISO 42001HIPAAGDPRPCI DSSNISTDORACMMCCREST
0.0(0)
Pricing not publishedCertification audits and compliance services — SOC 2, ISO 27001 and more — with CREST-accredited penetration testing.
SaaSFintechOther
MA
Modern Assurance
Verified Peer ReviewedUnited States
SOC 1SOC 2SOC 3HIPAAGDPR
0.0(0)
€€€€
Peer-reviewed CPA firm with no GRC platform partnerships.
SaaSFintechHealthcareAIStartups
HIPAA in North America: regulatory status
US
HHS proposed Security Rule update published December 2024 (public comment closed March 2025). Final rule and effective date still pending as of mid-2026.
Last verified Jul 13, 2026
Frequently asked
How many HIPAA auditors serve North America?
Nomona lists 14 independent, accredited HIPAA audit firms serving North America today, including firms with global coverage.
How much does a HIPAA audit typically cost?
Independent HIPAA assessment fees vary with scope and the state of your program. Pairing HIPAA with SOC 2 or pursuing HITRUST changes the cost profile; budget for remediation on top of assessment.