Agent Index by Heritage Services
Submit / Claim
AI
Agent Index by Heritage Services
theagentindex.io/guides/hitrust-external-assessors/ · Last reviewed 23 Oct 2026

Agent Index by Heritage Services · theagentindex.io/guides/hitrust-external-assessors/ · Not legal or audit advice · CC BY 4.0
Home / Guides / HITRUST External Assessors

Free guide · HITRUST · assessors · 23 Oct 2026

HITRUST External Assessors: how to find and check an authorized assessor

HITRUST publishes the official Authorized External Assessor list. This page quotes how that list works and how the 68 HITRUST firms in this directory break down by headquarters country. Not a ranking.

Last reviewed 23 Oct 2026Auditors dataset v0.1.32
General information, not legal advice. Confirm scope with your counsel or auditor. A directory listing is a set of checked facts, not an endorsement. Confirm current assessor status on HITRUST’s list before engaging a firm.

The official list

HITRUST’s Find an External Assessor page describes a vetting process that “includes reviewing policies and procedures and the background of the individuals performing the assessments”. [1]

“HITRUST does not recommend specific EA Organizations for engagements.” “It is the responsibility of the Assessed Entity to perform its own due diligence prior to engaging the EA Organization to perform a HITRUST Assessment.” [1]

The page filters by Assessor Type (External Assessor / Readiness Licensee) and by AICPA membership. [1]

Open the official list: HITRUST Find an External Assessor.

What this directory lists

Agent Index lists 68 organisations whose frameworks field contains “HITRUST”. Counts below are computed at build from that field. [2]

Country pages in this directory: HITRUST in the United States · HITRUST in India · HITRUST in the United Kingdom.

Law firms appear on the official list and in this directory (Vicis Law PC, King & Spalding LLP). This page makes no claim about those firms beyond the stored listing.

Related: auditors directory · PCI DSS QSA companies · SOC 2 auditor FAQ · Get matched.

Countries

Headquarters counts below are computed at build from HITRUST-tagged listings. Not a ranking.

Get matched

If you want a shortlist of listed firms for HITRUST or another published framework, use Get matched or the form below. We store the request for review; we do not email firms automatically.

Get matched

Get matched with verified auditors

We'll review your request; no automatic emails. Introductions start later. This does not send a message to any firm and does not include prices. Not a ranking.

Framework(s) (select all that apply)

FAQ

Where is the official HITRUST assessor list?

HITRUST publishes an Authorized External Assessor list. https://hitrustalliance.net/find-an-external-assessor

Does HITRUST recommend assessors?

HITRUST does not recommend specific EA Organizations for engagements. It is the responsibility of the Assessed Entity to perform its own due diligence prior to engaging the EA Organization to perform a HITRUST Assessment.

What is a Readiness Licensee?

A separate assessor type on HITRUST’s list.

Which of these firms also do SOC 2 or PCI DSS?

16 of the 68 HITRUST-tagged firms also carry SOC 2, and 43 also carry PCI DSS, from stored framework tags.

How do I get matched?

Use Get matched or the form on this page. We store the request for review; we do not email firms automatically. Get matched.

Get updates by email

Subscribe to the Brief

Weekly, free, unsubscribe anytime.

We use your email only to send the newsletter. See our privacy policy.

Sources

  1. HITRUST, Find an External Assessor, checked 23 Oct 2026. https://hitrustalliance.net/find-an-external-assessor
  2. Agent Index auditors dataset v0.1.32, generated 2026-10-27. https://theagentindex.io/auditors.json

Prepared by Agent Index (Heritage Services). Last reviewed 23 Oct 2026. General information, not legal advice. Confirm scope with your counsel or auditor. Licensed CC BY 4.0.