Only licensed CPA firms can issue a SOC 2 report. This directory covers Big 4 audit firms (Deloitte, PwC, EY, KPMG), mid-tier audit firms (BDO, Grant Thornton, RSM, Crowe), and boutique CPA firms specializing in SOC 2 (Schellman, A-LIGN, Prescient, Insight Assurance, BARR Advisory).