HQ US LLP is a U.S.-based CPA firm providing independent SOC 2 Type I and Type II examinations. We help SaaS, technology, and service organizations demonstrate the effectiveness of their controls, strengthen customer trust, and meet enterprise security assurance requirements.
- SOC 2 Type I & II
- SOC 1 Examinations
- Nationwide Inquiries
WIN THE COMPETITION
BUILT FOR CUSTOMER TRUST
ENTERPRISE VENDOR DILIGENCE
SECURITY-FOCUSED ORGANIZATIONS
CREDIBLE CPA FIRM
What we do
We Don't Sell a Compliance Badge
We Deliver INDEPENDENT Examination
Independent Attestation is our core focus. Our examinations culminate in an independent CPA auditor’s report, helping organizations demonstrate accountability, strengthen stakeholder confidence, and meet customer assurance requirements.
01 / CORE SERVICE
SOC 2 Type I
An examination of control design at a specified date. An option for organizations seeking independent reporting on how controls are designed.
02 / CORE SERVICE
SOC 2 Type II
An examination that includes the operating effectiveness of controls over a defined period—often requested by enterprise customers.
03 / ENGAGEMENT SUPPORT
Scope & Reporting
Clear engagement scoping, evidence requests, examination procedures, and communication of exceptions and conclusions.
Choose the right examination
Type I or Type II?
Know what each report addresses.
POINT-IN-TIME EXAMINATION
SOC 2 Type I
Independent reporting on the suitability of control design as of a specified date.
- Defined Examination Date
- Focus On Control Design
- Useful For An Initial Attestation Journey
- Often Requested By Startups
PERIOD-BASED EXAMINATION
SOC 2 Type II
Independent reporting on control design and operating effectiveness throughout the review period.
- Specified Examination Period
- Testing Of Controls In Operation
- Frequently Requested In Vendor Assessments
The Discipline Behind Credible SOC Attestation
Attestation Process
From initial scoping to final reporting, HQ US LLP follows a structured, standards-based examination process designed to deliver objective findings, clear communication, and credible assurance.
Discovery & Scoping
Define Scope, Systems, & Control Environment
Engagement Planning
Set Timelines, Requests, & Examination Procedures
Control Testing
Evaluate Design & Operating Effectiveness
Evidence Review
Review Documentation & Assess Exceptions
Report Delivery
Issuance Of Final Attestation Report
Why Companies Need SOC 2 ?
Independent reporting that helps businesses build trust, reduce friction, and compete for larger opportunities.
Build Customer Trust
Demonstrate that your controls are designed to protect customer data.
Meet Buyer Requirements
Satisfy vendor due diligence and enterprise procurement expectations.
Accelerate Sales Cycles
Reduce repetitive security questionnaires and remove friction.
Strengthen Control Environment
Improve internal discipline around security.
Differentiate in the Market
Stand out as a trustworthy service organization.
SOC EXAMINATION FAQs
Make your next assurance decision with clarity.
Answers to common questions asked by companies evaluating SOC 2 audit services and independent CPA firms.
A SOC 2 audit is commonly used to describe an independent CPA attestation examination of a service organization’s controls relevant to selected Trust Services Criteria: security, availability, processing integrity, confidentiality, and privacy.
Type I examines the suitability of control design as of a specified date. Type II additionally addresses whether the controls operated effectively throughout a specified period.
Pricing depends on system complexity, selected criteria, number of locations, maturity of controls and whether a Type I or Type II examination is needed. Request a scoped proposal for an accurate estimate.
A SOC 2 examination report is issued by an appropriately qualified independent CPA firm performing the engagement under applicable professional standards. The AICPA does not itself attest to individual companies’ SOC 2 controls.
No. SOC 2 is an attestation examination and report, not an AICPA certification. The examination may result in an unmodified or modified opinion depending on the findings.
SOC 1 addresses service organization controls likely to be relevant to user entities’ internal control over financial reporting. SOC 2 addresses controls relevant to selected Trust Services Criteria, often sought for security and other operational assurance.
A Commitment to Excellence. A Reputation for Trust.
WHO WE SERVE?
Independent SOC reporting for growth-minded service organizations.
SaaS & Technology
Build trust and open enterprise opportunities with SOC reporting.
FinTech & Financial Services
Meet customer and regulatory expectations with independent attestation.
Cloud & Managed IT Providers
Demonstrate control, security, and reliability with SOC reporting.
Healthcare Technology
Support compliance and build trust with independent attestation.
Business Process Outsourcing
Showcase operational excellence with SOC reporting.
Ready to Strengthen Your Compliance?
Let's discuss your SOC 2 attestation requirements and establish a clear, structured path toward independent reporting.
Latest Posts & News
