Logo Menu

Auditors

By company
By country
By audit type
By platform

Consultants

SOC 2 support

Software

By category

By company

Popular reviews

Learn

  • SOC 2 Insights

    Articles on cost, controls, timelines, and auditor choice

Start here

Reference

Free Tools

Plan and budget

Data

SOC 2 Statistics & Data

Cost, timeline, peer-review, and firm-mix figures from our SOC 2 auditor directory and public sources. Each figure has its own date. Charts, CSVs, and citations are free to reuse with attribution.

4.2× Big Four vs specialist The Type 2 planning-range midpoint median is $137,500 across 19 regional directory records representing Big Four networks, versus $32,500 for assurance specialists. The Big Four count is not a count of four networks or four legal issuers.

How we calculate these figures Download all figures (JSON) Press room See the figures

Last updated ·Oldest figure ·License CC BY 4.0

Big Four vs specialist Type 2 planning estimate
4.2×
Type 2 planning-estimate median
$55K
US firms peer-review enrolled
91%
Median fieldwork-to-report timeline
9 wk

What did a dated sample of verified firm records show?

The 2026-08-20 sample covers 48 attestation-capable records. The median Type 2 range midpoint is $43K; the 10th-to-90th-percentile span is $24K–$100K. Price evidence in the sample: 42 directory estimates, 1 public-source figure, and 5 firm-confirmed figures. Median fieldwork-to-report timing is 8 weeks; the 10th-to-90th-percentile span is 4 weeks–12 weeks.

That sample came from a then-current population of 174 records; the current directory has 187. It is not a live-registry aggregate or evidence of observed transaction prices, paid invoices, or binding quotes.

Range-midpoint percentiles; missing and stale records are excluded, never entered as zero.
Metric p10 Median p90 Sample
Type 1 price midpoint $12K $25K $68K 48
Type 2 price midpoint $24K $43K $100K 48
Fieldwork-to-report midpoint 4 weeks 8 weeks 12 weeks 48

Price evidence in this sample: 42 directory estimates, 1 public-source figure, and 5 firm-confirmed figures.

Peer review uses a separate US-only sample. 45 of 46 verified US records had a current AICPA public-file check; 45 of 45 were enrolled, and 32 disclosed a rating. Firms without a public file are excluded, not counted as unenrolled.

No licensing percentage is published. We have not verified enough current license records to quote a market share. Check the signing entity with its state board before you hire.

Computed 2026-08-20 from our auditor directory. Prices use range midpoints, rounded to the nearest $1,000; timelines to the nearest week.

Audit cost

$35K

Type 1 planning-range midpoint median

#type-1-median-cost

Across 187 attestation-capable directory records, the median of the per-record SOC 2 Type 1 planning-range midpoints is $35,000; the p10–p90 span is $17,300–$55,000. These are estimates of audit pricing for planning, not observed transaction prices, paid invoices, or binding quotes.

Big Four firms have the highest Type 1 planning-range midpoint median, $93.5KMedian of per-record Type 1 planning-range midpoints, in US dollars, by organization group. Records behind each row: Big Four 19, Full-service CPA 106, Assurance specialist 62. As of 2026-10-15.
Big Four
Full-service CPA
Assurance specialist

Download CSV · · Aggregate from our directory data

Sample
187 directory records
Method
Aggregate from our directory data
As of
2026-10-15
Suggested citation
SOC2Auditors.org. (2026). Type 1 planning-range midpoint median. https://soc2auditors.org/data/#type-1-median-cost
$55K

Type 2 planning-range midpoint median

#type-2-median-cost

Across 187 attestation-capable directory records, the median of the per-record SOC 2 Type 2 planning-range midpoints is $55,000; the p10–p90 span is $30,000–$100,000. These are estimates of audit pricing for planning, not observed transaction prices, paid invoices, or binding quotes.

Big Four firms have the highest Type 2 planning-range midpoint median, $137.5KMedian of per-record Type 2 planning-range midpoints, in US dollars, by organization group. Records behind each row: Big Four 19, Full-service CPA 106, Assurance specialist 62. As of 2026-10-15.
Big Four
Full-service CPA
Assurance specialist

Download CSV · · Aggregate from our directory data

Sample
187 directory records
Method
Aggregate from our directory data
As of
2026-10-15
Suggested citation
SOC2Auditors.org. (2026). Type 2 planning-range midpoint median. https://soc2auditors.org/data/#type-2-median-cost

These are headline aggregates. See the full sourced cost breakdown by tier and add-on.

Audit timeline

9 wk

Median audit timeline

#median-audit-timeline

The median fieldwork-to-report window across the 187 firms we track is 9 weeks.

Big Four firms have the longest median fieldwork-to-report window, 12 weeksMedian fieldwork-to-report window, in weeks, by organization group. Records behind each row: Big Four 19, Full-service CPA 106, Assurance specialist 62. As of 2026-10-15.
Big Four
Full-service CPA
Assurance specialist

Download CSV · · Aggregate from our directory data

Sample
187 directory records
Method
Aggregate from our directory data
As of
2026-10-15
Suggested citation
SOC2Auditors.org. (2026). Median audit timeline. https://soc2auditors.org/data/#median-audit-timeline
187

Timeline distribution

#timeline-distribution

Of the 187 firms we track, the most common fieldwork-to-report window is 9 to 12 weeks, quoted by 102 firms.

The most common fieldwork-to-report window is 9 to 12 weeks, quoted by 102 firmsFirms by fieldwork-to-report window. As of 2026-10-15.
8 weeks or fewer
9 to 12 weeks
13 to 16 weeks
17 to 24 weeks
25 weeks or more

Download CSV · · Aggregate from our directory data

Sample
187 directory records
Method
Aggregate from our directory data
As of
2026-10-15
Suggested citation
SOC2Auditors.org. (2026). Timeline distribution. https://soc2auditors.org/data/#timeline-distribution

Estimate a timeline for your own scope with the SOC 2 timeline calculator.

Audit firms

91%

US firms in the AICPA snapshot enrolled in peer review

#directory-firms-peer-review-enrolled

91% of the 149 US-based directory firms covered by our 2026-10-21 AICPA snapshot were enrolled in the peer-review program.

Sample
149 US audit firms
Method
AICPA peer-review registry
As of
2026-10-21
Suggested citation
SOC2Auditors.org. (2026). US firms in the AICPA snapshot enrolled in peer review. https://soc2auditors.org/data/#directory-firms-peer-review-enrolled
110

Peer-review result (disclosed subset)

#peer-review-rating-disclosed-subset

Among the 110 firms in the 2026-10-21 snapshot whose AICPA peer-review result was public (a member/opt-in subset, not the whole directory), the results break down as recorded; we do not extrapolate this to firms that did not disclose.

Pass is the most common disclosed peer-review result, 106 firmsFirms whose AICPA peer-review result was public at the time of the check. As of 2026-10-21.
Pass
pass-with-deficiency

Download CSV · · AICPA peer-review registry

Sample
110 firms with disclosed results
Method
AICPA peer-review registry
As of
2026-10-21
Suggested citation
SOC2Auditors.org. (2026). Peer-review result (disclosed subset). https://soc2auditors.org/data/#peer-review-rating-disclosed-subset

Read the enrollment and disclosed-result analysis on the SOC 2 audit-firm data page.

Accreditations

38

Distinct accreditations recorded

#accreditation-prevalence

Across the 187 firms we track we record 38 distinct accreditation labels; the most common, AICPA, appears on 155 of them.

AICPA is the most common accreditation label, on 155 of 187 firmsFirms carrying each accreditation label. A firm can carry several. As of 2026-10-15.
AICPA
CPA Firm
PCI DSS QSA
HITRUST Assessor
PCAOB
CMMC C3PAO
ISO 27001 Certification Body
AICPA Peer Review
CPA Canada
CPA
FedRAMP 3PAO
CSA STAR
ANAB
IAS
CMMC RPO

Showing the top 15 of 38 · Download CSV · · Aggregate from our directory data

Sample
187 directory records
Method
Aggregate from our directory data
As of
2026-10-15
Suggested citation
SOC2Auditors.org. (2026). Distinct accreditations recorded. https://soc2auditors.org/data/#accreditation-prevalence

GRC platforms

36%

Name a GRC platform

#grc-platform-support

36% of the firms we track name at least one GRC platform they work with.

Drata is the GRC platform named most often, by 49 firmsFirms naming each GRC platform they work with. A firm can name several. As of 2026-10-15.
Drata
Sprinto
Vanta
Secureframe
Archer
Hyperproof
OneTrust
Thoropass
TrustCloud
A-SCEND
anecdotes
Compyl
Cypago
fullCircle
Optro

Showing the top 15 of 23 · Download CSV · · Aggregate from our directory data

Sample
187 directory records
Method
Aggregate from our directory data
As of
2026-10-15
Suggested citation
SOC2Auditors.org. (2026). Name a GRC platform. https://soc2auditors.org/data/#grc-platform-support

Geography

7

Firms by country

#firms-by-country

The 187 firms we track operate across 7 countries.

USA accounts for 147 of the 187 firms we trackFirms by country of operation. As of 2026-10-15.
USA
Canada
Australia
Germany
UK
India
Netherlands

Download CSV · · Aggregate from our directory data

Sample
187 directory records
Method
Aggregate from our directory data
As of
2026-10-15
Suggested citation
SOC2Auditors.org. (2026). Firms by country. https://soc2auditors.org/data/#firms-by-country
79%

US-based share

#share-us-based

79% of the SOC 2 audit firms we track are based in the United States.

Sample
187 directory records
Method
Aggregate from our directory data
As of
2026-10-15
Suggested citation
SOC2Auditors.org. (2026). US-based share. https://soc2auditors.org/data/#share-us-based

Organization group

187

Firms by organization group

#firms-by-type

Full-service CPA firms are the largest organization group among the 187 SOC 2 auditors we track, accounting for 106 of them.

Full-service CPA firms are the largest group, 106 of the 187 we trackFirms by organization group. As of 2026-10-15.
Big Four
Full-service CPA
Assurance specialist

Download CSV · · Aggregate from our directory data

Sample
187 directory records
Method
Aggregate from our directory data
As of
2026-10-15
Suggested citation
SOC2Auditors.org. (2026). Firms by organization group. https://soc2auditors.org/data/#firms-by-type

Team size

550

Team-size distribution

#team-size-distribution

The median firm we track reports a team of about 550 people.

The most common team size is 1,000+ people, reported by 72 firmsFirms by reported team size, in people. Firms without a reported size are left out. As of 2026-10-15.
1–10
11–50
51–200
201–1,000
1,000+

Download CSV · · Aggregate from our directory data

Sample
187 directory records
Method
Aggregate from our directory data
As of
2026-10-15
Suggested citation
SOC2Auditors.org. (2026). Team-size distribution. https://soc2auditors.org/data/#team-size-distribution

Firm age

1984

Founding-year distribution

#founding-year-distribution

The median founding year among the firms we track is 1984.

The 1980s saw the most firms founded, 24 of the 187 we trackFirms by founding decade. A decade with no firms shows 0. As of 2026-10-15.
1840s
1850s
1860s
1870s
1880s
1890s
1900s
1910s
1920s
1930s
1940s
1950s
1960s
1970s
1980s
1990s
2000s
2010s
2020s

Download CSV · · Aggregate from our directory data

Sample
187 directory records
Method
Aggregate from our directory data
As of
2026-10-15
Suggested citation
SOC2Auditors.org. (2026). Founding-year distribution. https://soc2auditors.org/data/#founding-year-distribution

Methodology & license

Figures come from our directory of 187 SOC 2 audit firms that issue attestation reports. Readiness consultants are listed separately on the readiness directory. Type 1 and Type 2 figures take the midpoint of each firm's planning range, then summarize those midpoints. They are estimates of audit pricing for planning, not observed transaction prices, paid invoices, or binding quotes. Timeline figures use fieldwork-to-report range midpoints. Medians and 10th-to-90th-percentile bands describe the spread. A missing field drops that firm from the sample; it is never counted as zero.

This sample combines firm-confirmed figures, public-source figures, and directory estimates. These are planning aggregates, not binding quotes or a promise of what any engagement will cost. A CPA firm sets the final fee after scoping. Each figure has its own date.

US peer-review figures match directory firms to the AICPA public file. Enrollment covers the matched sample; ratings cover only firms whose result is public.

Series refresh independently (newest 2026-10-21; oldest on this page 2026-10-15). Questions or corrections: hello@soc2auditors.org.

Cite with attribution. Published under CC BY 4.0. Credit SOC2Auditors.org and link to soc2auditors.org/data. Each figure has APA, BibTeX, and short citations you can copy. The full set is also in the JSON file of all figures.

Get a matched shortlist

Use these medians to set expectations, then compare firms that fit your scope.

Share your scope for a shortlist of fitting firms, then compare their ballparks and timelines against the medians above.

Get matched with auditors