14 Verified · HITRUST · office in California · Verified first · All HITRUST firms · All firms in California
These firms have a current official-registry listing for HITRUST (HITRUST External Assessor list) and a published office in California. Listings are checked facts, not endorsements or rankings.
HQ: United StatesVerified
US accounting and consulting firm (first-listed office San Ramon, CA); listed as a PCI Qualified Security Assessor company and HITRUST External Assessor, with an ANAB-accredited ISO certification body (Armanino Certified, LLC).
San Ramon, California · Chicago, Illinois · New York, New York · +2 more
HQ: United StatesVerified
CPA and advisory firm with offices across the US; performs SOC 1 and SOC 2 examinations and is listed as a HITRUST External Assessor and CMMC C3PAO.
Raleigh, North Carolina · Carlsbad, California · Torrance, California · +51 more
HQ: United StatesVerified
Encinitas, California compliance firm listed as a HITRUST External Assessor; SOC 2 attestation reports are issued through its licensed CPA firm, CyberCrest Controls RLLP.
HQ: United StatesVerified
San Jose, California CPA firm offering SOC 1 and SOC 2 examinations, listed as a HITRUST External Assessor; offers HIPAA compliance services.
HQ: United StatesVerified
US member firm of the Deloitte network. ANAB-accredited ISO/IEC 27001 certification body, FedRAMP-recognized third-party assessor and HITRUST External Assessor.
New York, New York · Chicago, Illinois · Arlington, Virginia · +15 more
HQ: United StatesVerified
US member firm of the EY global network; listed as a PCI DSS Qualified Security Assessor and a HITRUST External Assessor.
New York, New York · Chicago, Illinois · San Francisco, California · +11 more
HQ: United StatesVerified
US accounting and advisory firm with offices in many states; listed as a PCI QSA, HITRUST External Assessor and CMMC C3PAO.
Charlotte, North Carolina · Appleton, Wisconsin · Asheville, North Carolina · +72 more
HQ: United StatesVerified
Alameda, California IT and compliance firm listed as a HITRUST External Assessor; also offers HIPAA risk assessments.
HQ: United StatesVerified
Licensed CPA firm with a Nashville corporate office performing SOC, HITRUST and PCI DSS assessments, with locations listed in ten US cities.
Nashville, Tennessee · Atlanta, Georgia · Bethesda, Maryland · +7 more
HQ: United StatesVerified
Leawood, Kansas cybersecurity firm listed as a PCI Qualified Security Assessor (QSA) company and a HITRUST External Assessor.
HQ: United StatesVerified
Menlo Park-based consulting firm offering PCI DSS assessments as a QSA company and HITRUST assessments as an authorized external assessor.
HQ: United StatesVerified
California accounting and consulting firm whose GRC practice performs SOC, ISO and HITRUST engagements; its Drata directory listing describes its audits as remote-first.
San Jose, California · San Mateo, California · San Ramon, California · +3 more
HQ: United StatesVerified
Irvine, California cybersecurity firm listed as a FedRAMP 3PAO, PCI QSA, HITRUST External Assessor and CMMC C3PAO.
Irvine, California · Fairfax, Virginia · Scottsdale, Arizona
HQ: United StatesVerified
San Francisco-based law firm offering HITRUST readiness and certification services and privacy compliance work, listed by HITRUST as an External Assessor.
Other frameworks in California: PCI DSS (12) · CMMC (6) · ISO 27001 (6) · SOC 2 (6) · SOC 1 (5) · FedRAMP (4) · HIPAA (4) · ISO 27701 (4)
Other HITRUST locations: the United States · Florida · Virginia · Chicago · Georgia · Illinois · Texas · Atlanta · Pennsylvania · Tennessee
14 Verified firms are listed for HITRUST with an office in California. This is not a ranking.
We check HITRUST External Assessor list. A framework tag appears only when that registry listed the firm at last check.
Chicago (6), Dallas (6), New York (6), Atlanta (5), San Francisco (5), Denver (4).
Use Get matched or the auditor-match form on this page. A listing is a set of checked facts, not an endorsement. Get matched.
See the listing method. Pages exist only where at least 3 Verified firms match both the framework and the location.
Related guides: HITRUST External Assessors · PCI DSS QSA companies
Reference:
We'll email you when a matching listing is added; no other automatic emails. Nothing is sent automatically now.
Reference:
We'll review your request; no automatic emails. Introductions start later. Nothing was sent to any firm.