pa.taxFind help
Browse by specialty

HITRUST external assessors

Authorized External Assessor firms listed by HITRUST to perform validated assessments for HITRUST certification.

102 firms listed · October 2026 snapshot

FedRAMP 3PAOGovRAMP 3PAOPCI QSACMMC C3PAOHITRUST assessorISO 27001 CBSOC 2 services sourced

Aprio, LLP.

Atlanta, GA

View profile
FedRAMP 3PAOGovRAMP 3PAOPCI QSAPCI ASVCMMC C3PAOHITRUST assessorSOC 2 services sourced

ControlCase

Fairfax, VA

View profile
HITRUST assessor

PwC

Location not verified · ask about remote service

View profile
FedRAMP 3PAOGovRAMP 3PAOPCI QSAPCI ASVCMMC C3PAOHITRUST assessorSOC 2 services sourced

RSM US, LLP

Chicago, IL

View profile
FedRAMP 3PAOPCI QSACMMC C3PAOHITRUST assessorSOC 2 services sourced

Tevora

Irvine, CA

View profile

Frequently asked questions

How is this list sourced?

HITRUST external assessor list is the official list, read October 3, 2026. HITRUST issues the certification after quality review; the external assessor performs the validated assessment. Readiness licensees on HITRUST's page are not included. Check the live registry for changes.

Are these listings endorsements?

No. Compare the firm's services and confirm current status before engaging an auditor.

Firms are listed from official registries, each with its own as-of date. Locations are shown only where the registry or the firm's own site provides them. A listing records registry status, not an endorsement, and directory information may change. SOC 2 is a CPA attestation report, not a certificate. pa.tax is independent: listed firms pay nothing for inclusion, ranking or referrals, and firms are listed alphabetically.

Confirm current status and scope directly with the HITRUST external assessor list, as of October 3, 2026.