BlueOrange Compliance
HQ: United StatesVerified
Dublin, Ohio healthcare security and compliance firm listed as a HITRUST External Assessor; offers HIPAA risk assessments.
HIPAA auditors in the United States
12 Verified · HIPAA · office in United States · Verified first · All HIPAA firms · All firms in the United States
These firms have a current official-registry listing for HIPAA (the official registry named on each listing) and a published office in United States. Listings are checked facts, not endorsements or rankings.
Clearwater
HQ: United StatesVerified
Nashville-based healthcare cybersecurity and compliance firm listed as a HITRUST External Assessor; its services include HIPAA risk analysis.
Crimson Security
HQ: United StatesVerified
Reston, Virginia security compliance and assessment firm listed as a PCI Qualified Security Assessor (QSA) company and a HITRUST External Assessor; its site offers HIPAA-based assessments.
CyberCrest Compliance
HQ: United StatesVerified
Encinitas, California compliance firm listed as a HITRUST External Assessor; SOC 2 attestation reports are issued through its licensed CPA firm, CyberCrest Controls RLLP.
Decrypt Compliance
HQ: United StatesVerified
San Jose, California CPA firm offering SOC 1 and SOC 2 examinations, listed as a HITRUST External Assessor; offers HIPAA compliance services.
Frazier & Deeter
HQ: United StatesVerified
Atlanta-based CPA and advisory firm whose cybersecurity practice covers SOC 2, HITRUST, HIPAA and PCI DSS; listed as a PCI QSA and HITRUST External Assessor.
Atlanta, Georgia · Alpharetta, Georgia · Auburn, Alabama · +12 more
Intraprise Health
HQ: United StatesVerified
Reston, Virginia healthcare cybersecurity firm listed as a HITRUST External Assessor; offers HIPAA security and privacy assessments.
Jacobian Engineering
HQ: United StatesVerified
Alameda, California IT and compliance firm listed as a HITRUST External Assessor; also offers HIPAA risk assessments.
Linford & Company
HQ: United StatesVerified
Denver-based CPA firm performing SOC examinations, ISO certification, FedRAMP, HITRUST, PCI DSS and CMMC assessments.
Schellman
HQ: United StatesVerified
Tampa-based attestation and certification firm offering ISO certification, FedRAMP, PCI DSS, HITRUST and CMMC assessments.
Securisea
HQ: United StatesVerified
Security assessment firm with an Annapolis, Maryland address listed as a FedRAMP 3PAO, PCI QSA and HITRUST External Assessor, with an ANAB-accredited affiliate for ISO 27001 and ISO 42001.
Sensiba
HQ: United StatesVerified
California accounting and consulting firm whose GRC practice performs SOC, ISO and HITRUST engagements; its Drata directory listing describes its audits as remote-first.
San Jose, California · San Mateo, California · San Ramon, California · +3 more
Other frameworks in the United States: PCI DSS (83) · CMMC (75) · HITRUST (63) · FedRAMP (43) · ISO 27001 (39) · GovRAMP (29) · SOC 2 (25) · SOC 1 (21) · ISO 27701 (20) · ISO 42001 (15) · CERT-In (6)
Other HIPAA locations: California
FAQ
How many HIPAA firms are listed in the United States?
12 Verified firms are listed for HIPAA with an office in United States. This is not a ranking.
Which registry do you check for HIPAA?
We check the official registry named on each listing. A framework tag appears only when that registry listed the firm at last check.
Which cities have the most listed firms?
Nashville (2), Reston (2), San Jose (2), Tampa (2), Alameda (1), Alpharetta (1).
How do I get matched with a listed firm?
Use Get matched or the auditor-match form on this page. A listing is a set of checked facts, not an endorsement. Get matched.
See the listing method. Pages exist only where at least 3 Verified firms match both the framework and the location.
Saved
Reference:
We'll email you when a matching listing is added; no other automatic emails. Nothing is sent automatically now.
Request received
Reference:
We'll review your request; no automatic emails. Introductions start later. Nothing was sent to any firm.