pa.taxFind help
Browse by specialty

FedRAMP + SOC 2

Firms appearing in the FedRAMP extract with a separately confirmed SOC 2 practice.

14 firms listed · October 2026 snapshot

FedRAMP 3PAOGovRAMP 3PAOPCI QSACMMC C3PAOHITRUST assessorISO 27001 CBSOC 2 services sourced

Aprio, LLP.

Atlanta, GA

View profile
FedRAMP 3PAOGovRAMP 3PAOPCI QSAPCI ASVCMMC C3PAOHITRUST assessorSOC 2 services sourced

ControlCase

Fairfax, VA

View profile
FedRAMP 3PAOGovRAMP 3PAOPCI QSAPCI ASVCMMC C3PAOHITRUST assessorSOC 2 services sourced

RSM US, LLP

Chicago, IL

View profile
FedRAMP 3PAOPCI QSACMMC C3PAOHITRUST assessorSOC 2 services sourced

Tevora

Irvine, CA

View profile

Frequently asked questions

How is this list sourced?

Firms in the FedRAMP Marketplace whose own site also documents SOC 2 services.

Are these listings endorsements?

No. Compare the firm's services and confirm current status before engaging an auditor.

SOC 2 practice confirmed from each firm's own site; no official SOC 2 auditor registry exists. Firms are listed from official registries, each with its own as-of date. Locations are shown only where the registry or the firm's own site provides them. A listing records registry status, not an endorsement, and directory information may change. SOC 2 is a CPA attestation report, not a certificate. pa.tax is independent: listed firms pay nothing for inclusion, ranking or referrals, and firms are listed alphabetically.

No official SOC 2 auditor list exists. To check that a firm is a licensed CPA firm, use NASBA's CPAverify and the AICPA peer review public file.