Top SOC 2 Type I Compliance Services in St. Louis, United States
Compare 37 verified SOC 2 Type I specialists serving St. Louis, United States. Find the right partner with local expertise in St. Louis to accelerate your compliance journey. As of September 2026, ISMS Directory lists 37 verified providers for this search, ranked by real 30-day buyer demand on the directory (not paid placement).
Showing 37 services
DNV
Global assurance provider offering ISO 27001 certification and risk-based management system audits, with deep Nordic and critical-infrastructure roots.
Service Type
Regions
I.S. Partners
Philadelphia CPA and compliance firm for SOC, HIPAA, HITRUST, PCI, and ISO 27001 assessments.
Service Type
Regions
Schellman
Leading US IT compliance attestation firm for SOC 1/2/3, PCI, and ANAB-accredited ISO certifications including ISO 27001 and ISO 42001.
Service Type
Regions
LogicGate
Chicago no-code GRC platform (Risk Cloud) for enterprise risk, compliance, and audit workflows.
Matched on: SOC 2 Type I · St. Louis
Why am I seeing this? An independent provider, selected by coverage match and 30-day directory demand. No vendor can pay for this spot.
LogicGate
Chicago no-code GRC platform (Risk Cloud) for enterprise risk, compliance, and audit workflows.
Service Type
Regions
Johanson Group LLP
Boutique US CPA firm specializing in SOC 1/2/3 examinations and related security and compliance audits for growing companies.
Service Type
Regions
HALOCK
Chicago information-security consultancy for risk assessments, SOC 2 readiness, and compliance programs.
Service Type
Regions
GRC Solutions
UK cyber security and compliance group (formerly IT Governance) for ISO 27001 consultancy, training, toolkits, and multi-framework programs.
Service Type
Regions
6clicks
Cyber GRC platform with a strong US presence for risk, compliance, and third-party assessments.
Service Type
Regions
OneTrust
Atlanta GRC and privacy platform for privacy, third-party risk, and compliance programs at enterprise scale.
Service Type
Regions
CBIZ Pivot Point Security
US information security consultancy specializing in ISO 27001 implementation, SOC 2 readiness, CMMC, and ongoing compliance programs.
Service Type
Regions
Sensiba
Bay Area CPA firm with a technology assurance practice for SOC 2 and related reports.
Service Type
Regions
Linford & Company
Denver CPA firm of former Big Four auditors specializing in SOC 2, HIPAA, FedRAMP, and HITRUST assessments.
Service Type
Regions
Workiva
Iowa connected reporting and GRC platform for SOX, audit, risk, and ESG narrative work.
Service Type
Regions
Conveyor
San Francisco AI trust-center and questionnaire platform for customer security reviews.
Service Type
Regions
ProcessUnity
US third-party risk platform for assessments, continuous monitoring, and vendor lifecycle programs.
Service Type
Regions
Tevora
Irvine cybersecurity and compliance firm for PCI, SOC 2, ISO 27001, HITRUST, CMMC, and FedRAMP.
Service Type
Regions
BARR Advisory
Cloud-native compliance firm offering SOC 2 audits and ISO 27001 certification with coordinated multi-framework programs for SaaS.
Service Type
Regions
Apptega
Atlanta continuous-compliance platform built for MSSPs and security teams running multi-framework programs.
Service Type
Regions
Armanino
California CPA firm with a technology assurance practice for SOC 2 and related reports.
Service Type
Regions
KirkpatrickPrice
Nashville licensed CPA firm for SOC 2, PCI, HIPAA, and ISO 27001 audits across US offices.
Service Type
Regions
Withum
US CPA firm with a technology attestation practice frequently used for SOC 2 by SaaS companies.
Service Type
Regions
A-LIGN
High-volume multi-framework audit firm for SOC 2, ISO 27001, HITRUST, FedRAMP, CMMC, and PCI, with dual ANAB/UKAS ISO pathways.
Service Type
Regions
Schneider Downs
Pittsburgh CPA firm with SOC 2 and technology assurance services for mid-market companies.
Service Type
Regions
Ostendio
Washington DC security and compliance platform for assessments, vendor risk, and control programs.
Service Type
Regions
Lazarus Alliance
US assessor for SOC 2, FedRAMP, CMMC, and related federal-adjacent security audits.
Service Type
Regions
Prescient Assurance
US CPA firm focused on SOC 2, ISO 27001, and related assurance for technology companies.
Service Type
Regions
Insight Assurance
Florida CPA firm providing SOC 2, ISO 27001, and HIPAA attestation for mid-market technology companies.
Service Type
Regions
LogicManager
Boston ERM and GRC software for enterprise risk, compliance, and audit alignment.
Service Type
Regions
Prevalent
US third-party risk platform for vendor assessments, scoring, and continuous monitoring.
Service Type
Regions
Coalfire
Enterprise cybersecurity and compliance assessment firm for FedRAMP, SOC 2, HITRUST, PCI, ISO 27001, and government frameworks.
Service Type
Regions
Resolver
Risk and incident platform used by US enterprises for investigations, risk, and compliance cases.
Service Type
Regions
Comp AI
US open-source-friendly compliance automation platform for SOC 2, ISO 27001, and HIPAA evidence.
Service Type
Regions
Whistic
Utah third-party risk and trust-center platform for assessments, monitoring, and vendor response.
Service Type
Regions
Sage Audits LLP
Denver-based CPA firm specializing exclusively in SOC 1 and SOC 2 examinations for SaaS and tech companies. Partner-led engagements, independent control testing against Trust Services Criteria, and Big Four IT audit experience. No junior auditors. CPA, CISSP, CISA, CRISC, CISM, CITP.
Service Type
Regions
Onspring
Kansas City no-code GRC platform for risk, compliance, audit, policy, and third-party workflows.
Service Type
Regions
360 Advanced
US CPA and compliance assessment firm for SOC 1/2, ISO 27001, HITRUST, HIPAA, and PCI with hands-on mid-market delivery.
Service Type
Regions
ControlCase
US QSA and assessor for PCI DSS, SOC 2, ISO 27001, and related payment-security programs.
Service Type
Regions