Agent Index by Heritage Services
Submit / Claim
AI
Agent Index by Heritage Services
theagentindex.io/guides/vanta-and-drata-audit-partners/ · Last reviewed 22 Oct 2026

Agent Index by Heritage Services · theagentindex.io/guides/vanta-and-drata-audit-partners/ · Not legal or audit advice · CC BY 4.0
Home / Guides / Vanta and Drata audit partners

Free guide · auditors · partners · 22 Oct 2026

Vanta and Drata audit partners: verified audit firms

Firms in this directory that appear on Vanta’s or Drata’s public audit-partner pages, with each firm’s stored registry rows. A partner-directory listing is the vendor’s own listing, not an endorsement by Agent Index.

Last reviewed 22 Oct 2026Auditors dataset v0.1.32
General information, not legal advice. Confirm scope with your counsel or auditor. A partner-directory listing is the vendor’s own listing, not an endorsement by Agent Index. Confirm current partnership and scope with the vendor and the firm.

Related: Vanta · Drata · Vanta vs Drata · Vanta alternatives · Secureframe alternatives · Sprinto alternatives · SOC 2 auditor FAQ · auditors directory.

On both directories

11 firms in this dataset have both a Vanta and a Drata partner row: A-LIGN, Boulay, Coalfire, Consilium Labs, Insight Assurance, MHM CPA, Prescient Security, Schellman, Schneider Downs, Sensiba, Tempo Audits. [3]

Vanta audit partners in this directory (23)

Source: Vanta find-a-partner (Audit Partner filter). [1]

Firm HQ Frameworks Registry rows
A-LIGN United States ISO 27001, ISO 27701, ISO 42001, HITRUST, PCI DSS, FedRAMP, CMMC, GovRAMP ANAB Management Systems CB Directory; FedRAMP Marketplace - recognized assessors (3PAO); HITRUST Authorized External Assessor list; PCI SSC Qualified Security Assessor list; Cyber AB Marketplace - C3PAO; GovRAMP accredited 3PAO list
Amtivo (USA), Inc. United States ISO 27001 ANAB Management Systems CB Directory
Aprio United States SOC 2, ISO 27001, ISO 27701, ISO 42001, HITRUST, PCI DSS, FedRAMP, CMMC, GovRAMP CPAverify (NASBA) - GA board of accountancy; ANAB Management Systems CB Directory; FedRAMP Marketplace - recognized assessors (3PAO); HITRUST Authorized External Assessor list; PCI SSC Qualified Security Assessor list; Cyber AB Marketplace - C3PAO; GovRAMP accredited 3PAO list
Boulay United States SOC 1, SOC 2, ISO 27001 CPAverify (NASBA) - MN board of accountancy; ANAB Management Systems CB Directory
British Assessment Bureau United Kingdom ISO 27001 UKAS - accredited certification bodies
BSI United Kingdom ISO 27001, ISO 27701, ISO 42001 UKAS - accredited certification bodies; ANAB Management Systems CB Directory
Coalfire United States ISO 27001, ISO 27701, ISO 42001, HITRUST, PCI DSS, FedRAMP, CMMC, GovRAMP FedRAMP Marketplace - recognized assessors (3PAO); PCI SSC Qualified Security Assessor list; HITRUST Authorized External Assessor list; ANAB Management Systems CB Directory; Cyber AB Marketplace - C3PAO; GovRAMP accredited 3PAO list
Consilium Labs United States ISO 27001, ISO 27701 ANAB Management Systems CB Directory
ControlCase United States ISO 27001, ISO 27701, ISO 42001, HITRUST, PCI DSS, FedRAMP, CMMC, CERT-In, GovRAMP PCI SSC Qualified Security Assessor list; ANAB Management Systems CB Directory; FedRAMP Marketplace - recognized assessors (3PAO); HITRUST Authorized External Assessor list; Cyber AB Marketplace - C3PAO; CERT-In empanelled information security auditing organisations; NABCB management-system certification bodies; GovRAMP accredited 3PAO list
Forvis Mazars United States HITRUST, PCI DSS, CMMC PCI SSC Qualified Security Assessor list; HITRUST Authorized External Assessor list; Cyber AB Marketplace - C3PAO
Frank, Rimerman + Co. United States SOC 1, SOC 2, ISO 27001, ISO 27701 CPAverify (NASBA) - CA board of accountancy; ANAB Management Systems CB Directory
Frazier & Deeter United States SOC 2, HITRUST, PCI DSS, HIPAA CPAverify (NASBA) - GA board of accountancy; PCI SSC Qualified Security Assessor list; HITRUST Authorized External Assessor list
Geels Norton United States SOC 1, SOC 2 CPAverify (NASBA) - NC board of accountancy
Global Compliance Certification Australia ISO 27001, ISO 42001 JAS-ANZ Register - accredited certification bodies
Insight Assurance United States HITRUST, PCI DSS, FedRAMP, CMMC, GovRAMP FedRAMP Marketplace - recognized assessors (3PAO); HITRUST Authorized External Assessor list; PCI SSC Qualified Security Assessor list; Cyber AB Marketplace - C3PAO; GovRAMP accredited 3PAO list
MHM CPA Canada SOC 1, SOC 2, ISO 27001, ISO 27701, ISO 42001 Standards Council of Canada (SCC) directory of accredited organizations; CPA Alberta - Verify a Professional Accounting Firm
Pease Bell United States SOC 1, SOC 2 CPAverify (NASBA) - OH board of accountancy
Prescient Security United States HITRUST, PCI DSS, FedRAMP, CMMC, GovRAMP FedRAMP Marketplace - recognized assessors (3PAO); HITRUST Authorized External Assessor list; PCI SSC Qualified Security Assessor list; Cyber AB Marketplace - C3PAO; GovRAMP accredited 3PAO list
RS Assurance & Advisory United States SOC 1, SOC 2 CPAverify (NASBA) - TX board of accountancy
Schellman United States ISO 27001, ISO 27701, ISO 42001, HITRUST, PCI DSS, FedRAMP, CMMC, HIPAA, GovRAMP ANAB Management Systems CB Directory; FedRAMP Marketplace - recognized assessors (3PAO); HITRUST Authorized External Assessor list; PCI SSC Qualified Security Assessor list; Cyber AB Marketplace - C3PAO; GovRAMP accredited 3PAO list
Schneider Downs United States SOC 1, SOC 2, HITRUST, PCI DSS, CMMC CPAverify (NASBA) - OH board of accountancy; PCI SSC Qualified Security Assessor list; HITRUST Authorized External Assessor list; Cyber AB Marketplace - C3PAO
Sensiba United States SOC 1, SOC 2, ISO 27001, ISO 27701, ISO 42001, HITRUST, HIPAA CPAverify (NASBA) - CA board of accountancy; ANAB Management Systems CB Directory; HITRUST Authorized External Assessor list
Tempo Audits United Kingdom ISO 27001 UKAS - accredited certification bodies

Drata audit partners in this directory (13)

Source: Drata Audit Alliance directory, re-checked 22 Oct 2026. Firms that did not appear on that fetch are not shown as Drata partners. [2]

Firm HQ Frameworks Registry rows
360 Advanced United States SOC 1, SOC 2, ISO 27001, ISO 27701, HITRUST, PCI DSS, FedRAMP, GovRAMP CPAverify (NASBA) - FL board of accountancy; ANAB Management Systems CB Directory; FedRAMP Marketplace - recognized assessors (3PAO); HITRUST Authorized External Assessor list; PCI SSC Qualified Security Assessor list; GovRAMP accredited 3PAO list
A-LIGN United States ISO 27001, ISO 27701, ISO 42001, HITRUST, PCI DSS, FedRAMP, CMMC, GovRAMP ANAB Management Systems CB Directory; FedRAMP Marketplace - recognized assessors (3PAO); HITRUST Authorized External Assessor list; PCI SSC Qualified Security Assessor list; Cyber AB Marketplace - C3PAO; GovRAMP accredited 3PAO list
Boulay United States SOC 1, SOC 2, ISO 27001 CPAverify (NASBA) - MN board of accountancy; ANAB Management Systems CB Directory
Coalfire United States ISO 27001, ISO 27701, ISO 42001, HITRUST, PCI DSS, FedRAMP, CMMC, GovRAMP FedRAMP Marketplace - recognized assessors (3PAO); PCI SSC Qualified Security Assessor list; HITRUST Authorized External Assessor list; ANAB Management Systems CB Directory; Cyber AB Marketplace - C3PAO; GovRAMP accredited 3PAO list
Consilium Labs United States ISO 27001, ISO 27701 ANAB Management Systems CB Directory
I.S. Partners United States ISO 27001, HITRUST, CMMC ANAB Management Systems CB Directory; HITRUST Authorized External Assessor list; Cyber AB Marketplace - C3PAO
Insight Assurance United States HITRUST, PCI DSS, FedRAMP, CMMC, GovRAMP FedRAMP Marketplace - recognized assessors (3PAO); HITRUST Authorized External Assessor list; PCI SSC Qualified Security Assessor list; Cyber AB Marketplace - C3PAO; GovRAMP accredited 3PAO list
MHM CPA Canada SOC 1, SOC 2, ISO 27001, ISO 27701, ISO 42001 Standards Council of Canada (SCC) directory of accredited organizations; CPA Alberta - Verify a Professional Accounting Firm
Prescient Security United States HITRUST, PCI DSS, FedRAMP, CMMC, GovRAMP FedRAMP Marketplace - recognized assessors (3PAO); HITRUST Authorized External Assessor list; PCI SSC Qualified Security Assessor list; Cyber AB Marketplace - C3PAO; GovRAMP accredited 3PAO list
Schellman United States ISO 27001, ISO 27701, ISO 42001, HITRUST, PCI DSS, FedRAMP, CMMC, HIPAA, GovRAMP ANAB Management Systems CB Directory; FedRAMP Marketplace - recognized assessors (3PAO); HITRUST Authorized External Assessor list; PCI SSC Qualified Security Assessor list; Cyber AB Marketplace - C3PAO; GovRAMP accredited 3PAO list
Schneider Downs United States SOC 1, SOC 2, HITRUST, PCI DSS, CMMC CPAverify (NASBA) - OH board of accountancy; PCI SSC Qualified Security Assessor list; HITRUST Authorized External Assessor list; Cyber AB Marketplace - C3PAO
Sensiba United States SOC 1, SOC 2, ISO 27001, ISO 27701, ISO 42001, HITRUST, HIPAA CPAverify (NASBA) - CA board of accountancy; ANAB Management Systems CB Directory; HITRUST Authorized External Assessor list
Tempo Audits United Kingdom ISO 27001 UKAS - accredited certification bodies

FAQ

Which audit firms are Vanta partners?

23 firms in this directory have a Vanta row in partner_tools, sourced from Vanta’s public audit-partner directory: A-LIGN, Amtivo (USA), Inc., Aprio, Boulay, British Assessment Bureau, BSI, Coalfire, Consilium Labs, ControlCase, Forvis Mazars, Frank, Rimerman + Co., Frazier & Deeter, Geels Norton, Global Compliance Certification, Insight Assurance, MHM CPA, Pease Bell, Prescient Security, RS Assurance & Advisory, Schellman, Schneider Downs, Sensiba, Tempo Audits.

Which are Drata partners?

13 firms in this directory have a Drata row in partner_tools, sourced from Drata’s Audit Alliance directory: 360 Advanced, A-LIGN, Boulay, Coalfire, Consilium Labs, I.S. Partners, Insight Assurance, MHM CPA, Prescient Security, Schellman, Schneider Downs, Sensiba, Tempo Audits.

Which firms are on both?

A-LIGN, Boulay, Coalfire, Consilium Labs, Insight Assurance, MHM CPA, Prescient Security, Schellman, Schneider Downs, Sensiba, Tempo Audits.

Do I have to use a partner auditor?

This page does not say you must use a partner auditor. Schellman’s listing on Drata’s directory says engagements are “contracted directly with Schellman. Drata is not a party to any client agreement.” For any other vendor, check with that vendor.

Schellman’s Drata directory text (fetched 22 Oct 2026): engagements are “contracted directly with Schellman. Drata is not a party to any client agreement.”

Get updates by email

Subscribe to the Brief

Weekly, free, unsubscribe anytime.

We use your email only to send the newsletter. See our privacy policy.

Sources

  1. Vanta, Find a partner (Audit Partner filter). https://www.vanta.com/partners/find-a-partner?filters=Audit+Partner
  2. Drata, Audit Alliance directory. https://drata.com/partners/audit-alliance/directory
  3. Agent Index auditors dataset v0.1.32, generated 2026-10-27. https://theagentindex.io/auditors.json

Prepared by Agent Index (Heritage Services). Last reviewed 22 Oct 2026. General information, not legal advice. Confirm scope with your counsel or auditor. Licensed CC BY 4.0.