Read More
Logo for Decrypt Compliance with the word Decrypt in bold uppercase letters, featuring a stylized backward R. The word Compliance appears below in smaller uppercase letters with a teal underline.
Contact us

Trust Center

Credentials You Can Actually Check

Trust Decrypt Compliance to provide you with audits that hold up under the scrutiny of your most demanding customers.
Schedule Your Free Consultation

Reviewed by Holbrook & Manter, CPAs

AICPA Peer Review Rating

Decrypt Compliance received a PASS – the highest possible rating.
Download Report
Want to verify independently? Search for Decrypt Compliance on the AICPA public file search.
A circular badge with AICPA Peer Review Rating at the top, a shield and checkmark icon, the word PASSED in large gold letters, and Valid through: September 30, 2028 at the bottom.

Our Firm's Credentials

Logo of the California Board of Accountancy, featuring large blue letters CBA above the words California Board of Accountancy in blue uppercase text, with horizontal blue lines above and below the text.

California Licensed CPA Firm License #9491

Verify on California Board of Accountancy →

A circular blue badge with the text AICPA SOC in the center. Below is aicpa.org/soc4so, and SOC for Service Organizations curves along the bottom edge.

AICPA Accredited Member Firm Active standing

Learn about AICPA accreditation →

A green oval badge features a white globe grid with bold IAF letters, Status: Active above, and IAFCERTSEARCH.ORG below.

ISO 27001 Accredited Certification Body

Verify on IAF CertSearch →

Recognition

2024 AICPA award badge for excellence

AICPA Tech Advisory Standing Ovation Recognition - 2024

The AICPA presents this award to CPA professionals who make outstanding contributions to the profession in technology-related fields. Decrypt’s managing partner received this recognition for his work in SOC reporting, cybersecurity, and information privacy.
For clients, it means the person leading your audit is recognized by the profession’s governing body as an authority in the exact field you’re being audited in.
A black graphic with the Decrypt Compliance logo at the top, and text stating Forbes Best-In-State CPAs and Raymond Cheng, Founder & CEO in bold white and blue letters.

Forbes Best-in-State CPAs - 2025

Decrypt’s managing partner was named to the Forbes Best-in-State CPAs list for 2025. The firm specializes in cybersecurity, privacy, and AI audit services.

This recognition is notable because Forbes evaluates CPAs across all practice areas. Being named while operating exclusively in technology compliance signals a standard of practice that carries across the profession, not just within a niche.

Leadership

Every Audit Led by a Multi-Awarded CPA

A man with short black hair wearing a black suit jacket and white shirt smiles at the camera against a solid yellow background.

CEO & Managing Partner

Raymond Cheng

Raymond Cheng built Decrypt Compliance after years inside the world’s most demanding technology companies and accounting firms. What he found: most compliance auditors didn’t understand the products they were auditing, which meant clients spent months educating their auditors instead of moving through the process.
Raymond Cheng built Decrypt Compliance after years inside the world’s most demanding technology companies and accounting firms. What he found: most compliance auditors didn’t understand the products they were auditing, which meant clients spent months educating their auditors instead of moving through the process.

Credentials

CPA.CITP

CISSP

CISA

CIPP/E

CCSK

ISO 27001 Lead Auditor

Background

  • B.Sc. Accounting & Information Systems, Santa Clara University
  • 10+ years in Security GRC
  • Prior experience at EY, Salesforce, and Tencent

Our Reviews

"Decrypt Complaince team truly delivers on their promises..."

4.9 out of 5 | Base on 281 reviews
A man with short, dark hair and light skin smiles slightly at the camera. He is wearing a dark blue, button-up shirt and is posed in front of a plain, light-colored background.
Ralph Hofacker

Co-Founder Brick Towers AG

Expectation for an expected timeline was given and also adhered to which helped us a lot to manage expectations with our prospects. Decrypt accommodated our additional input to the draft audit report which helped us to stand out.
A woman with shoulder-length brown hair and a navy blue sweater smiles at the camera against a plain light gray background.
Lior Romano

CEO, Tillion.ai

The Decrypt Compliance team truly delivered on their promises. They kept us constantly updated to ensure no surprises, while also making it easy to enable a quality audit. Decrypt’s responsiveness and high standards kept me confident throughout the process.

A person with short black hair, wearing a black collared shirt, smiling at the camera against a plain white background.
Kabir Mathur

CEO, Leen Inc

Becoming SOC2 compliant was very important to us since we’re selling to other security companies. Decypt ran an efficient process to help us become compliant and close new deals.

Frameworks We Audit

Most compliance firms specialize in one or two frameworks. Decrypt audits ten. More importantly, clients pursuing more than one certification can run both in a single engagement.

The evidence collection overlaps, the team stays the same, and you avoid starting from scratch with a second firm. It’s one of the more practical ways we save clients time without cutting corners on either report.

Framework

Type

SOC 1

Financial Controls

SOC 2

Security & Trust

SOC 3

Public Disclosure

ISO 27001

Information Security

ISO 27701

Privacy Management

ISO 42001

AI Governance

PCI DSS

Payment Security

HIPAA

Healthcare Data

HITRUST

Healthcare Security

GDPR

EU Data Privacy

Our Videos

The Auditor's Take on Compliance

Why did you start Decrypt Compliance?
Will a SOC 2 audit be worth the cost for my company?
What are the benefits of an independent compliance audit?
How can my company properly define our internal controls in preparation for a SOC 2 audit?
What are the two types of SOC 2 reports?
Is a compliance audit merely to uncover faults in my internal systems?

Get Started

Ready to Get Certified and Close More Deals?

Tell us about your company and we’ll get back to you with a clear path to certification – including timeline and pricing.

  • Submit the form and we'll reach out within one business day
  • We'll book a short discovery call to understand your environment and goals
  • You'll receive a fixed-fee quote with a clear timeline and next steps

Consultation form

Name(Required)