Richey May & Co., LLP
Licensed CPA firm issuing SOC 1, SOC 2, SOC 3, and SOC for Cybersecurity reports with a mortgage and financial services focus.
Overview
Richey, May & Co., LLP is a licensed independent CPA firm that provides attest services, including SOC 1, SOC 2, SOC 3, and SOC for Cybersecurity examinations. Its SOC 2 reporting addresses security, availability, and processing integrity for service organizations. The firm has a notable concentration in mortgage banking and financial services.
Strengths
- ✓Explicitly confirmed licensed CPA firm providing attest services
- ✓Covers the full SOC range plus SOC for Cybersecurity
- ✓Deep domain expertise in mortgage banking and financial services
Consider
- •Strong vertical concentration in mortgage/financial services may be less tailored for pure SaaS clients
- •Evidence page does not state founding year or HQ (Englewood, CO supplied externally)
Frameworks covered
Regions served
Pricing and timeline in context
Based in Englewood, CO, Richey May & Co., LLP quotes SOC 2 work in the $18K–$90K band — in line with the national firm median of $18K–$90K across the firms we track. As an AICPA-licensed CPA firm it issues SOC 1, SOC 2 Type 1, and SOC 2 Type 2 reports directly, and the fee scales with your headcount, the Trust Services Criteria in scope, and any frameworks you bundle. Plan for roughly 8–22 weeks on a Type 2 engagement. Compare it against the full SOC 2 audit cost benchmark before you commit.
Who Richey May & Co., LLP is for
Richey May & Co., LLP works most often with Fintech and SaaS companies. Scale-ups and mid-market companies that want experienced, credible coverage without Big Four pricing are the typical fit.
Frequently asked questions
How much does a Richey May & Co., LLP SOC 2 audit cost?
Richey May & Co., LLP's SOC 2 engagements typically run $18K–$90K, depending on your headcount, the Trust Services Criteria in scope, and how many frameworks you bundle. Because no firm publishes fixed pricing, request a scoped quote — you can get three matched quotes on identical scope to compare.
How long does a Richey May & Co., LLP SOC 2 audit take?
A typical Type 2 engagement with Richey May & Co., LLP takes about 8–22 weeks from kickoff to report, plus the observation window itself. Use the timeline calculator to estimate your own schedule.
What frameworks does Richey May & Co., LLP cover?
Richey May & Co., LLP covers SOC 1, SOC 2 Type 1, and SOC 2 Type 2. If you need several of these, bundling them into one engagement is usually cheaper than auditing each separately.
Is Richey May & Co., LLP an AICPA-licensed CPA firm?
Yes. Richey May & Co., LLP is an AICPA-licensed CPA firm, which is a requirement to issue a SOC 2 report — only licensed CPA firms can. It's worth confirming a firm's AICPA peer-review status before signing; see questions to ask a SOC 2 auditor.
Where does Richey May & Co., LLP operate?
Richey May & Co., LLP is headquartered in Englewood, CO and serves clients across United States. SOC 2 is a US attestation standard, so a US-licensed firm can serve clients wherever they are based.
Are you Richey May & Co., LLP? Add your badge
Show clients you're listed in an independent SOC 2 directory. Paste this into your site to display the badge, linked to this profile:
<a href="https://soc2-auditors.com/auditors/richey-may-and-co?utm_source=badge&utm_medium=referral">
<img src="https://soc2-auditors.com/badge/listed-soc2-auditors.svg" alt="Listed on SOC 2 Auditors — Richey May & Co., LLP" width="220" height="60" />
</a>Sources: Richey May & Co., LLP — SOC services
Firms similar to Richey May & Co., LLP
Other national firm SOC 2 auditors with overlapping industry focus. Compare their pricing and fit, or get three matched quotes on identical scope.
Top-tier independent assessor combining a licensed CPA firm with ISO, PCI, FedRAMP, and HITRUST accreditations.
Global compliance and cybersecurity firm serving as a licensed SOC auditor and multi-framework assessor.
Cloud-focused security and compliance CPA firm serving regulated, high-value-data organizations.
Licensed CPA firm offering SOC, PCI, ISO, HIPAA, and penetration testing across US offices.