{
  "dataset": "soc2-auditor-statistics",
  "name": "SOC 2 audit firm statistics",
  "version": "2026-09-07",
  "license": "https://creativecommons.org/licenses/by/4.0/",
  "page": "https://soc2auditors.org/data/",
  "generated_at": "2026-09-07",
  "creator": {
    "name": "SOC2Auditors.org",
    "url": "https://soc2auditors.org"
  },
  "publisher": {
    "name": "SOC2Auditors.org",
    "url": "https://soc2auditors.org"
  },
  "figures": [
    {
      "id": "type-1-median-cost",
      "label": "Type 1 median cost",
      "claim": "The median SOC 2 Type 1 audit fee across the 192 firms we track is $35,000, with 80% of firms falling between $17,500 and $55,000.",
      "value": 35000,
      "display_value": "$35K",
      "unit": "usd",
      "sample_n": 192,
      "method": "aggregate-from-auditors-json",
      "retrieved_at": "2026-09-07",
      "url": "https://soc2auditors.org/data/#type-1-median-cost",
      "csv_url": "https://soc2auditors.org/data/type-1-median-cost.csv",
      "citation": {
        "apa": "SOC2Auditors.org. (2026). Type 1 median cost. https://soc2auditors.org/data/#type-1-median-cost",
        "bibtex": "@misc{soc2auditors2026type1mediancost,\n  author = {SOC2Auditors.org},\n  title = {Type 1 median cost},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#type-1-median-cost},\n  note = {Retrieved 2026-09-07. Sample n=192.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#type-1-median-cost (retrieved 2026-09-07)."
      }
    },
    {
      "id": "type-2-median-cost",
      "label": "Type 2 median cost",
      "claim": "The median SOC 2 Type 2 audit fee across the 192 firms we track is $55,000, with 80% of firms falling between $30,000 and $100,000.",
      "value": 55000,
      "display_value": "$55K",
      "unit": "usd",
      "sample_n": 192,
      "method": "aggregate-from-auditors-json",
      "retrieved_at": "2026-09-07",
      "url": "https://soc2auditors.org/data/#type-2-median-cost",
      "csv_url": "https://soc2auditors.org/data/type-2-median-cost.csv",
      "citation": {
        "apa": "SOC2Auditors.org. (2026). Type 2 median cost. https://soc2auditors.org/data/#type-2-median-cost",
        "bibtex": "@misc{soc2auditors2026type2mediancost,\n  author = {SOC2Auditors.org},\n  title = {Type 2 median cost},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#type-2-median-cost},\n  note = {Retrieved 2026-09-07. Sample n=192.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#type-2-median-cost (retrieved 2026-09-07)."
      }
    },
    {
      "id": "median-audit-timeline",
      "label": "Median audit timeline",
      "claim": "The median fieldwork-to-report window across the 192 firms we track is 9 weeks.",
      "value": 9,
      "display_value": "9 wk",
      "unit": "weeks",
      "sample_n": 192,
      "method": "aggregate-from-auditors-json",
      "retrieved_at": "2026-09-07",
      "url": "https://soc2auditors.org/data/#median-audit-timeline",
      "csv_url": "https://soc2auditors.org/data/median-audit-timeline.csv",
      "citation": {
        "apa": "SOC2Auditors.org. (2026). Median audit timeline. https://soc2auditors.org/data/#median-audit-timeline",
        "bibtex": "@misc{soc2auditors2026medianaudittimeline,\n  author = {SOC2Auditors.org},\n  title = {Median audit timeline},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#median-audit-timeline},\n  note = {Retrieved 2026-09-07. Sample n=192.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#median-audit-timeline (retrieved 2026-09-07)."
      }
    },
    {
      "id": "timeline-distribution",
      "label": "Timeline distribution",
      "claim": "Of the 192 firms we track, the most common fieldwork-to-report window is 9 to 12 weeks, quoted by 102 firms.",
      "value": 192,
      "display_value": "192",
      "unit": "count",
      "sample_n": 192,
      "method": "aggregate-from-auditors-json",
      "retrieved_at": "2026-09-07",
      "url": "https://soc2auditors.org/data/#timeline-distribution",
      "csv_url": "https://soc2auditors.org/data/timeline-distribution.csv",
      "citation": {
        "apa": "SOC2Auditors.org. (2026). Timeline distribution. https://soc2auditors.org/data/#timeline-distribution",
        "bibtex": "@misc{soc2auditors2026timelinedistribution,\n  author = {SOC2Auditors.org},\n  title = {Timeline distribution},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#timeline-distribution},\n  note = {Retrieved 2026-09-07. Sample n=192.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#timeline-distribution (retrieved 2026-09-07)."
      }
    },
    {
      "id": "firms-by-country",
      "label": "Firms by country",
      "claim": "The 192 firms we track operate across 7 countries.",
      "value": 7,
      "display_value": "7",
      "unit": "count",
      "sample_n": 192,
      "method": "aggregate-from-auditors-json",
      "retrieved_at": "2026-09-07",
      "url": "https://soc2auditors.org/data/#firms-by-country",
      "csv_url": "https://soc2auditors.org/data/firms-by-country.csv",
      "citation": {
        "apa": "SOC2Auditors.org. (2026). Firms by country. https://soc2auditors.org/data/#firms-by-country",
        "bibtex": "@misc{soc2auditors2026firmsbycountry,\n  author = {SOC2Auditors.org},\n  title = {Firms by country},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#firms-by-country},\n  note = {Retrieved 2026-09-07. Sample n=192.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#firms-by-country (retrieved 2026-09-07)."
      }
    },
    {
      "id": "share-us-based",
      "label": "US-based share",
      "claim": "78% of the SOC 2 audit firms we track are based in the United States.",
      "value": 78,
      "display_value": "78%",
      "unit": "percent",
      "sample_n": 192,
      "method": "aggregate-from-auditors-json",
      "retrieved_at": "2026-09-07",
      "url": "https://soc2auditors.org/data/#share-us-based",
      "csv_url": null,
      "citation": {
        "apa": "SOC2Auditors.org. (2026). US-based share. https://soc2auditors.org/data/#share-us-based",
        "bibtex": "@misc{soc2auditors2026shareusbased,\n  author = {SOC2Auditors.org},\n  title = {US-based share},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#share-us-based},\n  note = {Retrieved 2026-09-07. Sample n=192.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#share-us-based (retrieved 2026-09-07)."
      }
    },
    {
      "id": "firms-by-type",
      "label": "Firms by organization group",
      "claim": "Full-service CPA firms are the largest organization group among the 192 SOC 2 auditors we track, accounting for 107 of them.",
      "value": 192,
      "display_value": "192",
      "unit": "count",
      "sample_n": 192,
      "method": "aggregate-from-auditors-json",
      "retrieved_at": "2026-09-07",
      "url": "https://soc2auditors.org/data/#firms-by-type",
      "csv_url": "https://soc2auditors.org/data/firms-by-type.csv",
      "citation": {
        "apa": "SOC2Auditors.org. (2026). Firms by organization group. https://soc2auditors.org/data/#firms-by-type",
        "bibtex": "@misc{soc2auditors2026firmsbytype,\n  author = {SOC2Auditors.org},\n  title = {Firms by organization group},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#firms-by-type},\n  note = {Retrieved 2026-09-07. Sample n=192.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#firms-by-type (retrieved 2026-09-07)."
      }
    },
    {
      "id": "team-size-distribution",
      "label": "Team-size distribution",
      "claim": "The median firm we track reports a team of about 550 people.",
      "value": 550,
      "display_value": "550",
      "unit": "people",
      "sample_n": 192,
      "method": "aggregate-from-auditors-json",
      "retrieved_at": "2026-09-07",
      "url": "https://soc2auditors.org/data/#team-size-distribution",
      "csv_url": "https://soc2auditors.org/data/team-size-distribution.csv",
      "citation": {
        "apa": "SOC2Auditors.org. (2026). Team-size distribution. https://soc2auditors.org/data/#team-size-distribution",
        "bibtex": "@misc{soc2auditors2026teamsizedistribution,\n  author = {SOC2Auditors.org},\n  title = {Team-size distribution},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#team-size-distribution},\n  note = {Retrieved 2026-09-07. Sample n=192.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#team-size-distribution (retrieved 2026-09-07)."
      }
    },
    {
      "id": "founding-year-distribution",
      "label": "Founding-year distribution",
      "claim": "The median founding year among the firms we track is 1986.",
      "value": 1986,
      "display_value": "1986",
      "unit": "year",
      "sample_n": 192,
      "method": "aggregate-from-auditors-json",
      "retrieved_at": "2026-09-07",
      "url": "https://soc2auditors.org/data/#founding-year-distribution",
      "csv_url": "https://soc2auditors.org/data/founding-year-distribution.csv",
      "citation": {
        "apa": "SOC2Auditors.org. (2026). Founding-year distribution. https://soc2auditors.org/data/#founding-year-distribution",
        "bibtex": "@misc{soc2auditors2026foundingyeardistribution,\n  author = {SOC2Auditors.org},\n  title = {Founding-year distribution},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#founding-year-distribution},\n  note = {Retrieved 2026-09-07. Sample n=192.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#founding-year-distribution (retrieved 2026-09-07)."
      }
    },
    {
      "id": "accreditation-prevalence",
      "label": "Distinct accreditations recorded",
      "claim": "Across the 192 firms we track we record 78 distinct accreditation labels; the most common, AICPA, appears on 160 of them.",
      "value": 78,
      "display_value": "78",
      "unit": "count",
      "sample_n": 192,
      "method": "aggregate-from-auditors-json",
      "retrieved_at": "2026-09-07",
      "url": "https://soc2auditors.org/data/#accreditation-prevalence",
      "csv_url": "https://soc2auditors.org/data/accreditation-prevalence.csv",
      "citation": {
        "apa": "SOC2Auditors.org. (2026). Distinct accreditations recorded. https://soc2auditors.org/data/#accreditation-prevalence",
        "bibtex": "@misc{soc2auditors2026accreditationprevalence,\n  author = {SOC2Auditors.org},\n  title = {Distinct accreditations recorded},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#accreditation-prevalence},\n  note = {Retrieved 2026-09-07. Sample n=192.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#accreditation-prevalence (retrieved 2026-09-07)."
      }
    },
    {
      "id": "grc-platform-support",
      "label": "Name a GRC platform",
      "claim": "36% of the firms we track name at least one GRC platform they work with.",
      "value": 36,
      "display_value": "36%",
      "unit": "percent",
      "sample_n": 192,
      "method": "aggregate-from-auditors-json",
      "retrieved_at": "2026-09-07",
      "url": "https://soc2auditors.org/data/#grc-platform-support",
      "csv_url": "https://soc2auditors.org/data/grc-platform-support.csv",
      "citation": {
        "apa": "SOC2Auditors.org. (2026). Name a GRC platform. https://soc2auditors.org/data/#grc-platform-support",
        "bibtex": "@misc{soc2auditors2026grcplatformsupport,\n  author = {SOC2Auditors.org},\n  title = {Name a GRC platform},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#grc-platform-support},\n  note = {Retrieved 2026-09-07. Sample n=192.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#grc-platform-support (retrieved 2026-09-07)."
      }
    },
    {
      "id": "directory-firms-peer-review-enrolled",
      "label": "US firms in the AICPA snapshot enrolled in peer review",
      "claim": "91% of the 149 US-based directory firms covered by our 2026-09-03 AICPA snapshot were enrolled in the peer-review program.",
      "value": 91,
      "display_value": "91%",
      "unit": "percent",
      "sample_n": 149,
      "method": "aicpa-peer-review",
      "retrieved_at": "2026-09-03",
      "url": "https://soc2auditors.org/data/#directory-firms-peer-review-enrolled",
      "csv_url": null,
      "citation": {
        "apa": "SOC2Auditors.org. (2026). US firms in the AICPA snapshot enrolled in peer review. https://soc2auditors.org/data/#directory-firms-peer-review-enrolled",
        "bibtex": "@misc{soc2auditors2026directoryfirmspeerreviewenrolled,\n  author = {SOC2Auditors.org},\n  title = {US firms in the AICPA snapshot enrolled in peer review},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#directory-firms-peer-review-enrolled},\n  note = {Retrieved 2026-09-03. Sample n=149.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#directory-firms-peer-review-enrolled (retrieved 2026-09-03)."
      }
    },
    {
      "id": "peer-review-rating-disclosed-subset",
      "label": "Peer-review result (disclosed subset)",
      "claim": "Among the 108 firms in the 2026-09-03 snapshot whose AICPA peer-review result was public (a member/opt-in subset, not the whole directory), the results break down as recorded; we do not extrapolate this to firms that did not disclose.",
      "value": 108,
      "display_value": "108",
      "unit": "count",
      "sample_n": 108,
      "method": "aicpa-peer-review",
      "retrieved_at": "2026-09-03",
      "url": "https://soc2auditors.org/data/#peer-review-rating-disclosed-subset",
      "csv_url": "https://soc2auditors.org/data/peer-review-rating-disclosed-subset.csv",
      "citation": {
        "apa": "SOC2Auditors.org. (2026). Peer-review result (disclosed subset). https://soc2auditors.org/data/#peer-review-rating-disclosed-subset",
        "bibtex": "@misc{soc2auditors2026peerreviewratingdisclosedsubset,\n  author = {SOC2Auditors.org},\n  title = {Peer-review result (disclosed subset)},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#peer-review-rating-disclosed-subset},\n  note = {Retrieved 2026-09-03. Sample n=108.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#peer-review-rating-disclosed-subset (retrieved 2026-09-03)."
      }
    },
    {
      "id": "it-audit-job-postings-total",
      "label": "Active IT-audit job postings (US/UK/CA)",
      "claim": "We counted 4,823 active IT-audit job postings on company career sites across the US, UK, and Canada in 2026-08.",
      "value": 4823,
      "display_value": "4,823",
      "unit": "count",
      "sample_n": 4823,
      "method": "bluedoor-job-postings",
      "retrieved_at": "2026-08-02",
      "url": "https://soc2auditors.org/data/#it-audit-job-postings-total",
      "csv_url": "https://soc2auditors.org/data/it-audit-job-postings-total.csv",
      "citation": {
        "apa": "SOC2Auditors.org. (2026). Active IT-audit job postings (US/UK/CA). https://soc2auditors.org/data/#it-audit-job-postings-total",
        "bibtex": "@misc{soc2auditors2026itauditjobpostingstotal,\n  author = {SOC2Auditors.org},\n  title = {Active IT-audit job postings (US/UK/CA)},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#it-audit-job-postings-total},\n  note = {Retrieved 2026-08-02. Sample n=4823.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#it-audit-job-postings-total (retrieved 2026-08-02)."
      }
    },
    {
      "id": "compliance-job-postings-by-role",
      "label": "Postings by role (compared, not summed)",
      "claim": "Across audit and compliance roles, IT audit is the most common (4,823). Dedicated \"SOC 2 auditor\" titles are rare (1); demand surfaces as the broader roles. These are separate keyword searches with overlapping coverage, so we compare them rather than add them up.",
      "value": 4823,
      "display_value": "4,823",
      "unit": "count",
      "sample_n": 5519,
      "method": "bluedoor-job-postings",
      "retrieved_at": "2026-08-02",
      "url": "https://soc2auditors.org/data/#compliance-job-postings-by-role",
      "csv_url": "https://soc2auditors.org/data/compliance-job-postings-by-role.csv",
      "citation": {
        "apa": "SOC2Auditors.org. (2026). Postings by role (compared, not summed). https://soc2auditors.org/data/#compliance-job-postings-by-role",
        "bibtex": "@misc{soc2auditors2026compliancejobpostingsbyrole,\n  author = {SOC2Auditors.org},\n  title = {Postings by role (compared, not summed)},\n  year = {2026},\n  url = {https://soc2auditors.org/data/#compliance-job-postings-by-role},\n  note = {Retrieved 2026-08-02. Sample n=5519.},\n}",
        "short": "Source: SOC2Auditors.org, https://soc2auditors.org/data/#compliance-job-postings-by-role (retrieved 2026-08-02)."
      }
    }
  ]
}