DisclosureIndependent directory. Not a CPA firm. Nothing here is legal, audit, or tax advice. Methodology.

Moss Adams (now Baker Tilly) — SOC 2 audit firm review

Former Seattle-based CPA firm; its SOC practice now operates under the Baker Tilly name

Moss Adams, a Seattle-based accounting and consulting firm, completed its combination with Baker Tilly on June 3, 2025, and the combined firm operates under the Baker Tilly name. Moss Adams' audit business joined Baker Tilly US, LLP and its consulting business joined Baker Tilly Advisory Group, LP; the combination was described as creating the sixth largest advisory CPA firm in the US. The former mossadams.com website is no longer online. Baker Tilly's SOC practice offers SOC 1, SOC 2 (Type 1 and Type 2), SOC 3, SOC for Cybersecurity, and SOC for Supply Chain reporting. In June 2026, Baker Tilly said it would make New York City its US headquarters after its acquisition of Anchin, Block & Anchin, which took effect July 1, 2026.

Peer review: AICPA peer-reviewed (pass). Firm tier: Mid-tier firm.

Services: SOC 1, SOC 2 Type I, SOC 2 Type II, HIPAA, PCI DSS, HITRUST, FedRAMP, GDPR.

Offices: Seattle WA; Los Angeles CA; San Francisco CA; Denver CO; Phoenix AZ; Portland OR; Spokane WA; Dallas TX.

Industries served: Technology, SaaS, Fintech, Healthcare, Financial services, Manufacturing.

Frequently asked questions

What compliance frameworks does Moss Adams audit?

Moss Adams now operates as part of Baker Tilly (the combination closed June 3, 2025). Baker Tilly's SOC reporting page lists SOC 1, SOC 2 (Type 1 and Type 2), SOC 3, SOC for Cybersecurity, and SOC for Supply Chain, and notes that SOC 2 reports can include additional criteria such as HITRUST. Before the combination, Moss Adams also listed HIPAA, PCI DSS, HITRUST, FedRAMP, and GDPR assessments; confirm current availability of those services with Baker Tilly directly.

How much does a SOC 2 audit from Moss Adams (now Baker Tilly) cost?

Baker Tilly's SOC reporting page does not publish audit fee schedules, and Moss Adams did not publish them before the combination. As a major national firm, fees reflect engagement complexity, industry, and scope. Request a quote directly.

Is Moss Adams (now Baker Tilly) in good peer review standing?

Since June 2025, Moss Adams' audit business has been part of Baker Tilly US, LLP, so the relevant peer review is Baker Tilly's. The AICPA peer review public file lists Baker Tilly US LLP (Chicago) with a Pass rating for its review covering April 1, 2023 to March 31, 2024 (accepted December 12, 2024). That review predates the Moss Adams combination. The old Moss Adams peer review page is no longer online. Checked 2026-11-04.

How long does a SOC 2 Type II engagement with Moss Adams (now Baker Tilly) typically take?

Moss Adams did not publish a specific typical timeline for SOC 2 engagements. As a large firm with 100+ offices, scheduling and fieldwork timelines can run 8–16 weeks; the full engagement including the observation period typically runs 6–12 months. 8–14 weeks is typical for mid-sized SaaS companies once fieldwork begins.

What GRC platforms does Moss Adams (now Baker Tilly) work with?

Drata's Audit Alliance directory lists Baker Tilly (Advanced tier), and Vanta's audit partner finder and TrustCloud's partner directory still list the firm as Moss Adams. Baker Tilly's SOC reporting page names no platforms. Baker Tilly also announced an AuditBoard partnership in 2022, for risk management rather than SOC 2 evidence. Checked 2026-11-04.

What are the main alternatives to Moss Adams (now Baker Tilly) for SOC 2 audits?

Moss Adams' most frequently compared alternatives are Schellman, A-LIGN, and BDO USA. Schellman and A-LIGN are IT-audit specialists; BDO USA is a comparable national mid-tier firm. All three alternatives have stronger brand recognition specifically in the SOC 2 compliance market.