Whitley Penn
Texas-based CPA firm delivering SOC 1 and SOC 2 reporting through its Risk Advisory practice under AT-C 205 / SSAE 18.
National firmSaaSFintechHealthcare
Overview
Whitley Penn is a CPA firm whose Risk Advisory Services practice performs SOC 1 examinations (controls over financial data) and SOC 2 reports prepared in accordance with AT-C 205, covering security, availability, processing integrity, confidentiality, and privacy. The work is led by named risk advisory and cybersecurity professionals holding CPA, CISA, and CIA credentials, and the firm references SSAE 18 attestation standards. It serves industries including healthcare, financial institutions, nonprofits, and professional services.
Strengths
- ✓SOC 2 reports explicitly prepared under AICPA attestation standards (AT-C 205 / SSAE 18)
- ✓Dedicated Risk Advisory and cybersecurity leadership with relevant CPA/CISA/CIA credentials
- ✓Addresses HIPAA and GDPR considerations within the SOC 2 context
Consider
- •The page references attestation standards and CPA-credentialed staff but does not spell out the firm's CPA licensure in plain text
- •Founding year and HQ not stated on the SOC page itself
Frameworks covered
SOC 1SOC 2 Type 1SOC 2 Type 2HIPAAGDPR
Regions served
United States
Sources: Whitley Penn — SOC services