# Johanson Group LLP > Johanson Group LLP is a licensed CPA firm based in Colorado Springs, Colorado, providing security and compliance audit services worldwide since 2012. The firm performs SOC 1, SOC 2, and SOC 3 examinations, ISO 27001, ISO 27017/27018, and ISO 42001 certification audits, and HIPAA, GDPR, CCPA, PCI DSS, and NIST assessments. Johanson Group holds AICPA peer review status and IAS accreditation (MSCB-314), has served more than 4,000 clients, and typically delivers final audit reports within 4 to 6 weeks of audit kickoff. Important facts about Johanson Group LLP: - Licensed CPA firm founded in 2012, headquartered at 6547 North Academy Blvd #105, Colorado Springs, CO 80918, USA - Covers 14 compliance frameworks with one integrated audit process, so organizations pursuing multiple reports can complete them on one timeline - Auditors work directly inside GRC automation platforms (Vanta, Drata, Secureframe, and others) with no manual evidence exports - Every client is assigned a dedicated Customer Success Manager and an experienced audit project lead from kickoff to final report - Rated 4.9/5 on G2 based on 100+ verified customer reviews - Contact: support@johansonllp.com, 719-301-6851 ## Services - [Services Overview](https://www.johansonllp.com/services): All compliance audit and assessment services offered by the firm - [SOC 1 Audits](https://www.johansonllp.com/services/soc-1): Examinations of controls relevant to user entities' internal control over financial reporting (ICFR); common for payroll processors, financial SaaS, and benefits administrators - [SOC 2 Audits](https://www.johansonllp.com/services/soc-2): Readiness assessments, Type I, and Type II examinations against the AICPA Trust Services Criteria; the standard trust report for technology companies selling to enterprise buyers - [SOC 3 Reports](https://www.johansonllp.com/services/soc-3): Public-facing summary of SOC 2 results that can be freely shared for marketing purposes - [ISO 27001 Certification](https://www.johansonllp.com/services/iso-27001): Certification audits for information security management systems (ISMS), often required by enterprise and international buyers - [ISO 27017/27018 Certification](https://www.johansonllp.com/services/iso-27017-18): Cloud-specific security and privacy controls extending ISO 27001 for IaaS, PaaS, and SaaS providers - [ISO 42001 Certification](https://www.johansonllp.com/services/iso-42001): Certification for AI management systems under the first international AI governance standard; Johanson Group is among the few firms performing these audits today - [HIPAA Assessments](https://www.johansonllp.com/services/hipaa-compliance): Attestations of compliance with HIPAA privacy and security requirements for organizations handling protected health information - [GDPR Assessments](https://www.johansonllp.com/services/gdpr): Structured assessments of data processing activities against EU GDPR requirements - [CCPA Assessments](https://www.johansonllp.com/services/ccpa-compliance): Assessments and attestations of California Consumer Privacy Act compliance - [PCI DSS Compliance](https://www.johansonllp.com/services/pci-dss): Payment card security compliance for merchants, processors, fintech, and e-commerce - [NIST Assessments](https://www.johansonllp.com/services/nist-assessments): NIST 800-53 and NIST 800-171 assessments for government contractors and cloud providers pursuing FedRAMP ## Industries - [Technology & SaaS](https://www.johansonllp.com/industries/technology-saas): Compliance audits for software, platform, and product-led growth companies - [Financial Services](https://www.johansonllp.com/industries/financial-services): Compliance for banks, fintechs, and investment firms - [AI & Emerging Tech](https://www.johansonllp.com/industries/ai-emerging-tech): ISO 42001 and security audits for AI companies and ML platforms - [Government & Public Sector](https://www.johansonllp.com/industries/government-public-sector): Frameworks required by federal and state buyers - [Healthcare](https://www.johansonllp.com/industries/healthcare): HIPAA and SOC audits for providers, payers, and health tech vendors - [Education](https://www.johansonllp.com/industries/education): Compliance for universities and EdTech platforms - [SMB & Startup](https://www.johansonllp.com/industries/smb-startup): First frameworks to unlock enterprise deals - [Mid-Market](https://www.johansonllp.com/industries/mid-market): Managing compliance as the stack grows - [Enterprise](https://www.johansonllp.com/industries/enterprise): Full compliance coverage across every framework ## Resources - [Frequently Asked Questions](https://www.johansonllp.com/faq): Self-contained answers on SOC audits, Type I vs Type II reports, framework selection, timelines, and pricing - [Articles](https://www.johansonllp.com/articles): Insights on compliance frameworks, audit preparation, and regulation - [Customer Success Stories](https://www.johansonllp.com/customer-success-stories): Case studies including Bitkub Exchange, Thailand's first digital asset exchange to achieve SOC 2 Type II, and Scisco Genetics - [Events](https://www.johansonllp.com/events): Upcoming webinars, conferences, and workshops ## Company - [About Us](https://www.johansonllp.com/about): Firm history, team, credentials, and accreditations - [Contact / Get a Quote](https://www.johansonllp.com/contact): Scope a compliance engagement or request a proposal - [Careers](https://www.johansonllp.com/careers): Open roles for experienced auditors and compliance professionals - [Partners Directory](https://www.johansonllp.com/partners): Network of GRC platform, MSP, and vCISO partners - [Become a Partner](https://www.johansonllp.com/become-a-partner): Join the Johanson Group partner program ## Optional - [G2 Reviews](https://www.g2.com/products/johanson-group/reviews): Independent customer reviews, 4.9/5 from 100+ reviews - [LinkedIn](https://www.linkedin.com/company/johanson-group-llp): Company updates and compliance insights - [YouTube](https://www.youtube.com/@JohansonGroupLLP): Video content on compliance topics - [Privacy Policy](https://www.johansonllp.com/privacy-policy): Data handling and privacy practices