Decrypt Compliance
decrypt.cpa| Frameworks & services | SOC 1/2/3, ISO 27001, ISO 27701, ISO 42001, PCI DSS, HIPAA, HITRUST, GDPRsource |
|---|---|
| Platform partnerships | Not verified |
| Regions | San Jose, CAsource |
| Startup focus | Built for high-growth B2B SaaS companiessource |
| Published pricing | Not published |
| Last verified | 2026-10-28 |
Overview
Decrypt Compliance describes itself as a Silicon Valley cybersecurity audit firm built by technology veterans for high-growth B2B SaaS companies. It lists its address as 3031 Tisch Way, San Jose, California 95128 ([email protected]). It is founded and run by Raymond Cheng, says it has no private-equity ownership and no rotating staff, and claims 100+ clients across B2B SaaS and beyond. The site says Cheng was named one of Forbes' Best In-State CPAs for 2026. source
Licensing and peer review
Its SOC 2 page lists California CPA license #9491, AICPA membership, accreditation as an ISO 27001 auditor (MSCB-365) and status as an authorized HITRUST assessment provider. It says Decrypt passed its 2025 AICPA Peer Review and that Raymond Cheng is on every engagement. source
Frameworks
Beyond SOC 1, SOC 2 and SOC 3, Decrypt lists ISO 27001, ISO 27701, ISO 42001, PCI DSS, HIPAA, HITRUST and GDPR services. It claims to get high-growth B2B SaaS companies certified 50% faster without cutting corners, and positions Type I as best for unblocking a deal quickly and Type II (6–12 months) for enterprise buyers who need proof of consistency. Fees are not published; engagements start with a free consultation. source
Profile compiled from the firm's public website and listings, last checked 2026-10-28. Facts are attributed to the linked source; AuditPicker does not endorse any firm.