"Full version LBMC has been our third-party auditor from our first SOC 2 Type I in 2023 through achieving SOC 2 Type II, ISO 27001:2022, and HIPAA in 2025, with ISO 27701:2025 now folding in for 2026. As a PE-backed holding company, we started with two of six operating companies pursuing SOC 2 individually; LBMC's audit rigor and clear feedback helped us reshape that into a centralized enterprise GRC program at the holding company, and every operating company achieved SOC 2 Type II the following year. We've since grown to nine platforms, previously nine distinct operating companies, and in 2026 each audit and assessment will produce a single deliverable covering all of them from within the Transit Technologies business. What we value most is how LBMC holds the line with independence, they never consulted on our structures or workflows yet still took the time to hear our design intent and confirm the approach would scale. That confidence is why adding ISO 27001, and now consolidating nine platforms under one report, was a fold-in rather than a rebuild. Short version Since our first SOC 2 Type I in 2023, LBMC has audited Transit Technologies through SOC 2 Type II, ISO 27001:2022, HIPAA, and now ISO 27701:2025, as we grew from two operating companies pursuing SOC 2 to a centralized GRC program covering nine platforms under a single deliverable per assessment. They never crossed the line into consulting, but they listened to our design intent and confirmed it would scale, and that confidence made each expansion a fold-in rather than a rebuild."

"Helpful friendly professionals"

"What I like best about working with LBMC is the sense of partnership they bring to every interaction. Their team is accessible, knowledgeable, and genuinely invested in helping us succeed. It is clear that they care not only about delivering services, but also about building lasting relationships and understanding what matters most to our organization."

"The team is great. Very knowledgeable about healthcare."

"We value LBMC's professionalism, responsiveness, and willingness to serve as a trusted compliance partner. Their team consistently provides clear direction, timely feedback, and a collaborative approach that helps make the PCI assessment process smooth and effective."

"Timeliness and the agility to change in strategy, if needed"

"Thoroughness and professionalism"

"Patient staff who are willing to teach how to correct any errors going forward and not just penalize."

"The people have always been kind, professional, patient. They are helpful with our questions without making us feel small. That's why we are still with the firm after 45 years of business and personal care."

"The feel of a local firm with the resources of a super-regional."