CompliancePoint
Security and compliance firm issuing SOC 2 reports through its named licensed CPA affiliate, CompliancePoint Assurance.
BoutiqueSaaSHealthcareFintech
Overview
CompliancePoint, a Wipfli company based in Duluth, Georgia, issues SOC 2 Type 1 and Type 2 reports through its independent, named licensed CPA affiliate, CompliancePoint Assurance (CPA) firm. Beyond SOC 2, it offers ISO 27001 and PCI DSS certification support, plus HIPAA and GDPR compliance services, serving SaaS companies, cloud and data center providers, healthcare organizations, and IT security companies. It also provides readiness assessments and ongoing SOC 2 program management.
Strengths
- ✓Issues SOC 2 reports through a clearly named, independent licensed CPA affiliate (CompliancePoint Assurance)
- ✓Broad compliance portfolio including ISO 27001, PCI DSS, HIPAA, and GDPR under one roof
- ✓Backed by Wipfli, providing additional firm depth and resources
Consider
- •The audit itself is performed by the affiliated CPA entity, while CompliancePoint also sells readiness/advisory services, so engagement scope should be clarified to maintain auditor independence
- •Founding year is not published on the SOC 2 page
Frameworks covered
SOC 2 Type 1SOC 2 Type 2ISO 27001HIPAAPCI DSSGDPR
Regions served
United States
Sources: CompliancePoint — SOC services