Throughline CPA
throughlineaudit.com| Frameworks & services | SOC 2, SOC 1, ISO 27001, ISO 42001, HIPAA, GDPR, Consumer Data Rightsource |
|---|---|
| Platform partnerships | Not verified |
| Regions | Georgia, US and Sydney, Australiasource |
| Startup focus | AI-native and technology companies; site also describes work with pre-seed and seed startupssource |
| Published pricing | Not published |
| Last verified | 2026-11-12 |
Overview
Throughline CPA describes itself as a registered CPA firm and certification body specializing in AI-native companies and technology businesses. It says it is based in Georgia, US and Sydney, Australia, and publishes [email protected] as its contact address. The homepage lists SOC 2, ISO 27001, ISO 42001, GDPR, HIPAA, SOC 1 and Consumer Data Right among its services. No fees are published. source
Founder and approach
The firm was founded by Paul Wenham, who says he previously founded AssuranceLab and grew it to more than 1,200 clients before its acquisition by Sensiba. Throughline's about page positions the firm as the next iteration, focused on AI-native companies, and says every engagement has a named senior practitioner accountable from scoping through report issuance. It also describes serving companies from pre-seed and seed startups through growth-stage and enterprise. source
SOC 2 and other frameworks
Throughline says it is an auditor, not a consultant: it conducts the audit and issues the attestation or certification report, and does not write policies, implement controls or run remediation. Its homepage FAQ says a SOC 2 Type 2 tests controls over an observation period of typically 3 to 12 months, and that a Type 1 can provide an earlier report while a company works toward Type 2. AuditPicker has not independently verified accreditation for its ISO certification-body work. source
Profile compiled from the firm's public website and listings, last checked 2026-11-12. Facts are attributed to the linked source; AuditPicker does not endorse any firm.