Moss Adams — SOC 2 audit firm review

Redefining Possible

Moss Adams is a fully integrated professional services firm providing accounting, consulting, and wealth management. Following its merger with Baker Tilly, it is the sixth largest CPA advisory firm in the US with over 11,000 professionals across more than 100 locations. The firm serves middle-market clients from startups to transitions, including SOC examinations for technology and service organizations.

Peer review: AICPA peer-reviewed (pass). Firm tier: Mid-tier firm.

Services: SOC 1, SOC 2 Type I, SOC 2 Type II, HIPAA, PCI DSS, HITRUST, FedRAMP, GDPR.

Offices: Los Angeles CA; San Francisco CA; Denver CO; Phoenix AZ; Portland OR; Spokane WA; Dallas TX; Chicago IL.

Industries served: Technology, SaaS, Fintech, Healthcare, Financial services, Manufacturing.

Frequently asked questions

What compliance frameworks does Moss Adams audit?

Moss Adams provides SOC 1, SOC 2 (Type 1 and Type 2), HIPAA, PCI DSS, HITRUST, FedRAMP, and GDPR assessments through its assurance practice. Following its merger with Baker Tilly, the combined firm is the sixth largest CPA advisory firm in the US, deepening its compliance service capacity.

How much does a SOC 2 audit from Moss Adams cost?

Moss Adams does not publish audit fee schedules publicly. As a major national mid-tier firm, fees reflect engagement complexity, industry, and scope. Ranges are not publicly disclosed; RFPs typically take 3–7 days for a quote.

Is Moss Adams AICPA-licensed and in good peer review standing?

Yes. Moss Adams is an AICPA-accredited firm and passed its most recent peer review in October 2023, per the firm's own peer review and PCAOB report page.

How long does a SOC 2 Type II engagement with Moss Adams typically take?

Moss Adams does not publish a specific typical timeline for SOC 2 engagements. As a large firm with 100+ offices, scheduling and fieldwork timelines can run 8–16 weeks; the full engagement including the observation period typically runs 6–12 months. 8–14 weeks is typical for mid-sized SaaS companies once fieldwork begins.

What GRC platforms does Moss Adams work with?

Moss Adams has verified working relationships with Vanta, Drata, Secureframe, and Hyperproof. Clients using these platforms can streamline evidence sharing with the Moss Adams audit team.

What are Moss Adams' main alternatives for SOC 2 audits?

Moss Adams' most frequently compared alternatives are Schellman, A-LIGN, and BDO USA. Schellman and A-LIGN are IT-audit specialists; BDO USA is a comparable national mid-tier firm. All three alternatives have stronger brand recognition specifically in the SOC 2 compliance market.