"Great people to work with!"

"Professionalism, support, open communication, very approachable!"

"Being a former LBMC employee, I know that you all put so much work into educating your employees. Chad Milom is the partner in charge of our engagement, and he makes me feel like we are working as a team to make sure everything is as accurate as possible and not being "audited". Chad also calls to walk me through new requirement/codifications, etc. that are coming up and walking through how those may apply to our Organization, and he is always available for questions and talking through any tax questions. If he doesn't know the answer, he speaks with a tax person to get an understanding and then comes back to us to discuss and get us in touch with the tax team if further information is needed. This is much appreciated."

"Full version LBMC has been our third-party auditor from our first SOC 2 Type I in 2023 through achieving SOC 2 Type II, ISO 27001:2022, and HIPAA in 2025, with ISO 27701:2025 now folding in for 2026. As a PE-backed holding company, we started with two of six operating companies pursuing SOC 2 individually; LBMC's audit rigor and clear feedback helped us reshape that into a centralized enterprise GRC program at the holding company, and every operating company achieved SOC 2 Type II the following year. We've since grown to nine platforms, previously nine distinct operating companies, and in 2026 each audit and assessment will produce a single deliverable covering all of them from within the Transit Technologies business. What we value most is how LBMC holds the line with independence, they never consulted on our structures or workflows yet still took the time to hear our design intent and confirm the approach would scale. That confidence is why adding ISO 27001, and now consolidating nine platforms under one report, was a fold-in rather than a rebuild. Short version Since our first SOC 2 Type I in 2023, LBMC has audited Transit Technologies through SOC 2 Type II, ISO 27001:2022, HIPAA, and now ISO 27701:2025, as we grew from two operating companies pursuing SOC 2 to a centralized GRC program covering nine platforms under a single deliverable per assessment. They never crossed the line into consulting, but they listened to our design intent and confirmed it would scale, and that confidence made each expansion a fold-in rather than a rebuild."

"Helpful friendly professionals"

"What I like best about working with LBMC is the sense of partnership they bring to every interaction. Their team is accessible, knowledgeable, and genuinely invested in helping us succeed. It is clear that they care not only about delivering services, but also about building lasting relationships and understanding what matters most to our organization."

"The team is great. Very knowledgeable about healthcare."

"We value LBMC's professionalism, responsiveness, and willingness to serve as a trusted compliance partner. Their team consistently provides clear direction, timely feedback, and a collaborative approach that helps make the PCI assessment process smooth and effective."

"Timeliness and the agility to change in strategy, if needed"

"Thoroughness and professionalism"